Note: Application Roles are different from Organization Roles.
When you invite a member to an org, you assign an organization role. Subsequently when you grant access to an app, you assign them the a pre-defined app role
- Admin: This role has complete access to the app and can assign roles to other members. However, Members with limited access cannot invite or list the other members in the app.
- Developer: This role cannot see any private information of the end-users or other members of the app. This role can see the infrastructure details.
- Customer Support: This role can see private information but cannot see any infrastructure details.
Now you can also create a custom role, which has the permissions defined by you.
We added the ability to create custom roles and assign them to users in an app. This means you can choose all the permissions associated to that custom role. We presently do not allow editing the permissions assigned to the pre-defined roles listed above.
The steps to create and assign custom roles are below
- Create a new custom role,
- Assign permissions to that role,
- Assign a role to a member of an app
Create a new role from the Roles Tab under your organization
When you create a role, you need to assign all the permissions. The meaning of each permission is listed in the next section
Once you have created a role, you can start assigning them to users within an application or across applications.
Permissions associated to a custom role
Since callstats dashboard is mostly about dashboards and wallboards, the visualising of data is controlled "read permissions". The dashboard has very limited features related to inputing data, the "write permissions" mainly relate to updating configurations and updating access control.
|COMPLETE TIMELINE ACCESS||Relates to the time range in the time filter. Complete means you are giving access to the complete lifetime of the app.|
|READ PRIVATE||Relates to Personal information in the userID object. Specifically, userID.username is considered PII and will only be visible to people with this permission.|
|READ SERVICE REPORTS||Relates to access to all the dashboards via the left navigation bar (Home, Discover, Org, User Feedback).|
|READ CONFERENCE SEARCH AGGREGATION||Relates to filtering (by ID, by location, by call status, call quality, etc) of the call data on the Discover page.|
|READ SERVICE||Relates to visualising the various aggregate metrics on the Discover page. The results are an outcome of data aggregated within a time period and any set of applied filters.|
|READ SERVICE BROWSER||Relates to visualising the userAgent (browser name and versions) string reported by the browser.|
|READ SERVICE GEOIP||Relates to viewing all the user geo locations, typically visualised in a map or via the Top N locations widget.|
|READ CONFERENCE||Relates to visualising all the conference details data, i.e., the raw data pertaining to a particular conference.|
|READ CONFERENCE GEOIP||Relates to viewing all the user geo locations in a particular call, typically visualised in a map or in the user table.|
|READ CONFERENCE ICE||Relates to viewing the a particular user's set of IP address.|
|READ CONFERENCE MST||Relates to visualising all the statistics corresponding to a particular media stream track.|
|READ CONFERENCE LOGS||Relates to visualising console.logs or errors reported by the endpoint while handling a call or conference.|
|READ CONFERENCE CSIO STATS||Relates to visualising csio-prefixed custom stats.|
|READ CUSTOM STATS||Relates to visualising browser-prefixed or platform-specific custom stats.|
|READ CONFERENCE AUTOMATIC DIAGNOSIS||Relates to the automatically generated insights for a particular call or conference.|
|READ/WRITE COLLAB NOTES||Relates to reading and writing collaboration notes, which allows users to share insights around call quality within the application.|