Default roles
There are three default role levels for the grid and for all applications: administrator, power-user and user. These roles each have a different level of access.
Administrator
There are administrator roles for the grid itself and for the applications. The roles are named "grid-admin" for the grid and "<Application name>/app-admin" for each application.
The grid-admin role grants full access to the grid internal functions. It can be used to install/uninstall applications, change all properties, add/remove hosts, and so on. This role should be assigned to users with great care. A user belonging to the grid-admin role does not necessarily have access to use the applications. The applications can have other role requirements.
The app-admin role grants full access to administer the application in the grid management user interface. It does not necessarily give access to using the application itself.
There is also a global role, grid-all-app-admin, which gives app-admin privileges for all grid applications in that grid.
Power-user
The power-user role in grid is called "grid-poweruser" and for applications "<Application name>/app-poweruser".
This role grants access to a limited set of operational tasks, for example, log level settings and application level operations
User
The user role in the grid is called "grid-user" and for applications "<Application name>/app-user".
The "grid-user" role is currently not in use. The application user roles may be used by the application. Review the documentation for each application to see how roles are used in that application.
Grid-viewer
The "grid-viewer" role grants access to viewing the Grid Management Pages. This role does not give access to administer the Grid or Grid applications.