User Documentation
Breadcrumbs

Roles & Permissions

Default Roles & Permissions

Description

HIS PACS message queue

TenantRegistrator

  • Special role for managing tenant registration.

  • This role cannot be assigned through the API, but its assignment is part of application configuration.

TenantRegister; TenantStatisticsGet; TenantStatisticsReset

TenantAdministrator

  • Has the highest level of access, including all permissions to manage and configure the tenant, including all PACSes.

  • It is not tied to a specific PACS and is responsible for tenant-wide setup and governance.

TenantUpdate; TenantStatisticsGet; RoleCreate; RoleGet; RoleList; RoleUpdate; RoleRemove; RoleAssign; RoleAssigmentGet; RoleListAssignments; RoleAssignmentRemove; UserListRoles;
PacsList; PacsRegister; PacsUnregister;
(Plus all permissions from the PacsAdministrator role)

PacsAdministrator

  • Manages PACS configurations and user identities. Typically used by your application to control the PACS system in case the application does not need to change tenant settings.

  • This role must be assigned in the context of a specific PACS, but it’s not a one-to-one connection: multiple users can have the role for one PACS, and a user can have the role for multiple PACS.

TenantGet; PacsGet; PacsUpdate; PacsConfigurationGet; IdentityCreate; IdentityGet; IdentityList; IdentityUpdate; IdentityRemove; IdentityCredentialCreate; IdentityCredentialGet; IdentityCredentialList; IdentityCredentialRemove; IdentityCredentialActivate; IdentityCredentialDeactivate;
IdentityAccessUnitAssign; IdentityAccessUnitRemove; IdentityAccessUnitList; VisitCreate; VisitList; VisitCheckIn; VisitCheckOut; VisitGet; VisitRemove; VisitUpdate; VisitCredentialCreate; VisitCredentialGet; VisitCredentialList; VisitCredentialRemove; VisitCredentialActivate; VisitCredentialDeactivate; VisitAccessUnitAssign; VisitAccessUnitRemove; VisitAccessUnitList; CrentialFormatsGet; AccessUnitList; AccessUnitGet; AccessUnitIdentityList; AccessUnitVisitList

AgentInstance

  • Technical role automatically assigned to the account provided during the registration of the PACS system in your tenant.

  • This role has limited permissions necessary for agent operations. Used for agents to connect to the platform.

PacsMessageGet; PacsResponseCreate; LogsWrite; ExtensionFieldsGet; PacsConfigurationGet

You can also create your custom roles, based on available permissions. Learn how to create and assign roles here.