New: the AI firewall watches the whole platform and explains each incident in plain words. See how it works

Kuray Karaaslan

Kuray Karaaslan

@kuray-karaaslan · Joined August 2026

Hermetry staffNewcomer
Topics
11
Replies
28
Points
0
Newcomer10 points to Member

Recent activity

  1. Replied to The Access Rights matrix: a row per permission, a column per role or group

    In the Permissions reference: every IoT permission with its minimum role and what it allows, plus the platform ones IoT admins meet most. The…

  2. Replied to The Access Rights matrix: a row per permission, a column per role or group

    A group works. dashboard_viewer.designs.write has Admin as its minimum role, and a group can lift a member over an Admin minimum. Only Owner minimums…

  3. Replied to 2.3.0: the IoT viewer role, for people who only watch

    No need. A template group is an ordinary group once it's added. If you want to compare, add the template and look at both…

  4. Started The Access Rights matrix: a row per permission, a column per role or group

    The first tab of Settings > Access Control, and where the groups from my October post turn into columns. Rows are the permissions of…

  5. Replied to 2.3.0: the IoT viewer role, for people who only watch

    Expected, and thanks for testing before the auditor did. Groups only add permissions on top of the role. The group itself grants nothing that…

  6. Replied to 2.3.0: the IoT viewer role, for people who only watch

    Yes. Watching live and viewing cameras are User permissions already, and the template includes cameras, live view, snapshots and recordings. Templates only offer permissions…

  7. Started 2.3.0: the IoT viewer role, for people who only watch

    2.3.0 adds an IoT viewer role: read access to every IoT screen, for people who watch and never change anything. Auditors, a shift lead…

  8. Replied to The Certificates page on a fresh organisation, and what will appear on it

    No, it refuses every certificate until its revocation set is loaded. There's no password fallback either: a presented certificate always decides.