---
title: "Roles"
slug: "roles"
updated: 2025-06-27T07:41:26Z
published: 2025-06-27T07:41:26Z
canonical: "docs.connect.netmoregroup.com/roles"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.connect.netmoregroup.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Roles

This page will explain what each user role’s capabilities are.

The following is the role definition with its hierarchical order

- **Customer Admin** - Manages Users, API Keys, Device Groups, Gateway Groups, and Device Groups
  - **Device Admin**
    - Device Basic Data RO (Read Only) - You can only pick either RO or Read and Write
      - Device Attachments
      - Device Payload
      - Device Send Downlink
    - Device Basic Data (Read and Write)
      - Device Onboarding
      - Device Attachments (RO)
      - Device Attachments
      - Device Payload
      - Device Send Downlink
    - Device Field Service (feature not implemented yet, in future planning)
  - **Gateway Admin**
    - Gateway Basic Data RO (Read Only) - You can only pick either RO or Read and Write
      - Gateway Attachments (RO)
    - Gateway Basic Data (Read and Write)
      - Gateway Onboarding
      - Gateway Attachments (RO)
      - Gateway Attachment
    - Gateway Field Service (feature not implemented yet, in future planning)

Roles are structured hierarchically, meaning higher-level roles inherit the permissions of the roles beneath them. For example, a Gateway Admin automatically has access to Gateway Onboarding, Attachments, and other gateway-related operations. The same applies to Device Admin and Customer Admin roles

## Role Description

| Role | Code | Permission | Role Description |
| --- | --- | --- | --- |
| Device Admin | **DeviceAdmin** | RW | Access to all data and all functionality on devices. |
| Device Basic Data (RO) | **DBasicData** | RO | Access to basic device data |
| Device Basic Data | **DBasicDataRW** | RW | Access to basic device data |
| Device Onboarding | **DOnboarding** | RW | Access to create and provision devices, and management of encryption keys. |
| Device Attachments (RO) | **DAttachments** | RO | Access to attachments on devices, including photos and other attached files. |
| Device Attachments | **DAttachmentsRW** | RW | Access to attachments on devices, including photos and other attached files. |
| Device Payload | **DPayload** | RW | Access to the device uplink and downlink payload. |
| Device Send Downlink | **DSendDownlink** | RW | Ability to send device downlinks. |
| Device Field Service (Future Development) | **DFieldService** | RW | Access to a specific UI / REST for installing, replacing, and removing devices. |
| Gateway Admin | **GatewayAdmin** | RW | Access to all data and all functionality on gateways. |
| Gateway Basic Data (RO) | **GBasicData** | RO | Access to basic gateway data |
| Gateway Basic Data | **GBasicDataRW** | RW | Access to basic gateway data |
| Gateway Onboarding | **GOnboarding** | RW | Access to create and provision gateways. |
| Gateway Attachments (RO) | **GAttachments** | RO | Access to attachments on gateways, including photos and other attached files. |
| Gateway Attachments | **GAttachmentsRW** | RW | Access to attachments on gateways, including photos and other attached files. |
| Gateway Field Service (Future Development) | **GFieldService** | RW | Access to a specific UI / REST for installing, replacing, and removing gateways. |