Roles & Permissions

TenantRegistrator

• Special role for managing tenant registration.

• This role cannot be assigned through the API, but its assignment is part of application configuration.

TenantRegister; TenantStatisticsGet; TenantStatisticsReset

TenantAdministrator

• Has the highest level of access, including all permissions to manage and configure the tenant, including all PACSes.

• It is not tied to a specific PACS and is responsible for tenant-wide setup and governance.

TenantUpdate; TenantStatisticsGet; RoleCreate; RoleGet; RoleList; RoleUpdate; RoleRemove; RoleAssign; RoleAssigmentGet; RoleListAssignments; RoleAssignmentRemove; UserListRoles;
PacsList; PacsRegister; PacsUnregister;
(Plus all permissions from the PacsAdministrator role)

PacsAdministrator

• Manages PACS configurations and user identities. Typically used by your application to control the PACS system in case the application does not need to change tenant settings.

• This role must be assigned in the context of a specific PACS, but it’s not a one-to-one connection: multiple users can have the role for one PACS, and a user can have the role for multiple PACS.

TenantGet; PacsGet; PacsUpdate; PacsConfigurationGet; IdentityCreate; IdentityGet; IdentityList; IdentityUpdate; IdentityRemove; IdentityCredentialCreate; IdentityCredentialGet; IdentityCredentialList; IdentityCredentialRemove; IdentityCredentialActivate; IdentityCredentialDeactivate;
IdentityAccessUnitAssign; IdentityAccessUnitRemove; IdentityAccessUnitList; VisitCreate; VisitList; VisitCheckIn; VisitCheckOut; VisitGet; VisitRemove; VisitUpdate; VisitCredentialCreate; VisitCredentialGet; VisitCredentialList; VisitCredentialRemove; VisitCredentialActivate; VisitCredentialDeactivate; VisitAccessUnitAssign; VisitAccessUnitRemove; VisitAccessUnitList; CrentialFormatsGet; AccessUnitList; AccessUnitGet; AccessUnitIdentityList; AccessUnitVisitList

AgentInstance

• Technical role automatically assigned to the account provided during the registration of the PACS system in your tenant.

• This role has limited permissions necessary for agent operations. Used for agents to connect to the platform.

PacsMessageGet; PacsResponseCreate; LogsWrite; ExtensionFieldsGet; PacsConfigurationGet