Roles & User Actions
Roles answer the question "what is this user allowed to do?" Without them, every account would either see nothing or see everything - neither of which is what a real organisation wants. A planner needs to plan but probably shouldn't be deleting users; a viewer needs to look but not change; an administrator needs to set things up but probably doesn't want to be on the hook for everyday planning. Roles are how Dime.Scheduler lets you carve up that authority.
A roleUser roleA named bundle of user actions assigned to users and user groups. Permissions flow through roles, never directly to a user. is a bundle of permissions. A user can be assigned multiple roles, and their effective permission is the union - so you compose access rather than create a separate role for every combination.
The standard roles
Dime.Scheduler ships with a set of standard roles that cover the common scenarios. Most tenants only ever use these.
- Administrator. Full access to the Administration module.
- User Manager. Access to the Administration module, but restricted to the user setup pages - cannot touch application settings, indicators, calendars, and so on.
- Application Manager. Access to the (Application) Settings module.
- Personalization. Can create and manage layouts, filters, and profiles, and share them with other users and groups.
- Planner. Full access to the planning view: can create, modify, and delete appointments.
- Viewer. Read-only access to the planning view. Cannot change anything.
Editing roles and assigning user actions
Go to User Management → Roles. The page shows two grids side by side: the editable list of roles on the left, and the user actions that belong to the selected role on the right.
Selecting a role refreshes the right grid to show that role's permissions. Tick a checkbox to grant a user action, untick it to remove it. The column header has a tick-all/clear-all shortcut.
Changes take effect on the next sign-in. Ask the affected users to log out and back in; on sign-in, Dime.Scheduler applies the updated permissions and stores them in the browser cookie. There is nothing else to do.
Reference: every user action and what it protects
A user actionUser actionA single protected capability, such as 'edit appointment', that a role can grant. The building block of role-based access control. protects a specific feature: a button, a screen, a capability. When you assign user actions to a role, you are deciding which features that role unlocks.
| User Action | Secured elements |
|---|---|
| Global administrator | User action that allows everything |
| Add application wide URL | |
| Add assignment with drag & drop | |
| Add planning boards | Add planning boards to the profile |
| Bulk edit categories | Update appointment's categories in bulk in planned tasks |
| Bulk edit time markers | Update appointment's time marker in bulk in planned tasks |
| Bypass calendars | Skip recalculation of appointments on planning board |
| Cut | Cut appointments in planning board |
| Copy | Copy appointments in planning board |
| Paste | Paste appointments in planning board |
| Details | Can view the details of an entity (task, job, appointment, etc.) |
| Drag & drop assignment | Can drag and drop assignments in the planning board |
| Drag & drop appointment | Can drag and drop tasks on the planning board |
| Manage profile | Manage profiles |
| Map action URL | Execute action uris in the map |
| Open task action URL | Execute task action uris in the open tasks grid |
| Appointment action URL | Execute appointment action uris in the planning board |
| New | Create manual appointments |
| Edit | Update appointments |
| Remove | Delete appointments |
| Next | Can shift to the next period in the planning board |
| Previous | Can shift to the previous period in the planning board |
| Optimization | Invoke advanced scheduling algorithms (VRP solver) from the planning board |
| Plan project | Plan project in Gantt chart |
| Save | Save layouts |
| Save user defined filters | Save filters |
| Scheduler module | View planning page |
| Settings module | View settings pages |
| User administrator | An administrator that can only manage users |
| Split appointments | Enables the user to split appointments |
Shortcut keys
| Shortcut key | Action | Remark |
|---|---|---|
| DELETE | Deletes the selected records. Is the equivalent of the delete button. | Only when a delete button is present |
| CTRL + click on group | Collapses the other groups in the grid | Only possible when grouping is set |