AMS Analytics Security Groups and Roles

The following table lists the baseline Security Groups available for users within this module, as well as the baseline Roles to which those Security Groups are assigned.

IMPORTANT: Assigning a Security User to a Role grants that user the privileges associated with all of the Security Groups that are assigned to that Role. To avoid granting a Security User unintended privileges, before assigning a Security User to a Role, be sure to review all of the privileges associated with the Security Groups assigned to that Role. Also, be aware that additional Roles, as well as Security Groups assigned to existing Roles, can be added via Security Manager.

Security Group

Roles

MI AMS Suite APM Administrator

MI Health Admin

MI AMS Suite APM Power User

MI Health Power

MI AMS Suite APM User

MI Health User

MI AMS Asset Portal Viewer MI APM Viewer

Note: The Security Groups listed in the table above account only for family permissions. Users must also be added to the MI Configuration Role Security Group in order to access the Systems and Tags page, which is required to modify families used by this module.

The baseline family-level privileges that exist for these Security Groups are summarized in the following table.

Family

MI AMS Suite APM Administrator

MI AMS Suite APM Power User

MI AMS Suite APM User

MI AMS Asset Portal Viewer

Entity Families
AMS Asset AlertView, Update, Insert, DeleteView, Update, Insert, DeleteView, Update, Insert, DeleteView
AMS Asset EventView, Update, Insert, DeleteView, Update, Insert, DeleteView, Update, Insert, DeleteView

AMS Asset Recommendation

View, Update, Insert, Delete

View, Update, Insert

View, Update, Insert

View

Equipment

View, Update, Insert, Delete

View, Update, Insert

View

View

Functional Location

View, Update, Insert, Delete

View, Update, Insert

View

View

Tag

View, Update, Insert, Delete

View, Update

View

View

Tag Alert

View, Update, Insert, Delete

View, Update

View

View

Tag Data Source

View, Update, Insert, Delete

View

View

View

Tag Event

View, Update, Insert, Delete

View, Update

View

View

Tag Folder

View, Update, Insert, Delete

View, Update, Insert

View

View
Relationship Families

Equipment Has Equipment

View, Update, Insert, Delete

View, Update, Insert

View

View

Functional Location Has Equipment

View, Update, Insert, Delete

View, Update, Insert

View

View

Functional Location Has Functional Location

View, Update, Insert, Delete

View, Update, Insert

View

View

Has Consolidated EventsView, Update, Insert, DeleteView, Update, Insert, DeleteView, Update, Insert, DeleteView

Has Recommendations

View, Update, Insert, Delete

View, Update, Insert

View, Update, Insert

View

Has Tag

View, Update, Insert, Delete

View, Update, Insert

View

View

Has Tag Alert

View, Update, Insert, Delete

View, Update, Insert

View

View

Has Tag Data Source

View, Update, Insert, Delete

View, Update, Insert

View

View

Has Tag Event

View, Update, Insert, Delete

View, Update, Insert

View

View

Tag Folder Has Tag Folder

View, Update, Insert, Delete

View, Update, Insert

View

View

Copyright © 2018 General Electric Company. All rights reserved.