Each Organisation may have several groups depending on the number of users and their requirements.

It is recommended that a system be set up with a minimum of one Admin group and one User group. Additional groups can be added at any time. The Admin group should contain just as many menu items as is necessary to maintain the system. The User group should be locked down to minimum functionality. There is no limit to the number of groups created for each org.

Once the organisation has been created, a group will need to be created and the user privileges to be decided. There is no particular order when creating users and groups. If Users are created first, then multiple users can be selected and added to groups (see below); if Groups are created first, then users can be added to a group when the user details are entered.

Existing groups can be filtered by using the search feature in the headers.

The Group Administration screen will display any group currently in the system for the organisation.

Existing groups can be edited by selecting the group and clicking the button labelled "Edit Selected" or double clicking on the selected group.

If used for the first time, it should only contain the SuperUser group.

1. Select the "New Group" button to start adding new groups.
   
2. Select the Organisation that was created previously from the drop-down menu.
   
3. Enter a name for the group.
   • The SuperUser Group box is unchecked as default. Create a SuperUser group when the Group needs to maintain systems across multiple Organisations.
4. Press the "Save" button to store the group.
5. This will enable the following options:
   1. Site Access - If a group is a non-super user group then the sites a user has access to can be managed at group level. These actions become available after a new group is saved. See separate “Site Access” section below for further details.
   2. Users - Users whom are members of the group. If no users have been created yet, the box will be empty until users are added. Actions can still be added to a group that contain no users.
   3. Add User to Group - Users from the current organisation, whom are currently members of another group (within the same organisation). Double-click a user from this table will move the user to the current group.
   4. Group Actions - The permissions to individual elements of the system. Check the boxes that the users of the group will have access to. Descriptions for each permission are given below.
   5. The changes to permissions are saved automatically, and will take effect the next time the user logs in.
      

If there are any "Users" assigned to the group, then the "Delete" button is disabled. Any assigned users need to be removed, before the group can be deleted. With no users are assigned to the group, the "Delete" button is enabled.

Group Permissions

Category	Item	This permission enables / disables access to the following functionality:
Alarms	Alarm Config	The "Alarm Config" option within Digital Twin Explorer.
	Alarm Management	Menu>Alarms>Alarm Management.
	Alarm Triggers	The "Alarm Trigger Definition" tab within the "Alarm Config" section of Digital Twin Explorer.
	Alarm Triggers - Edit All Peoples Triggers	With this option enabled, a user can edit all Alarm Trigger Definitions. This option overrides alarm triggers marked "Only Creator can Edit" in the "Alarm Trigger Definition" page.
	Manage Alarm Contacts	Menu>Administration>Manage Alarm Contacts.
Attributes	Attribute Assignment	The "Attributes" and "Bulk Attributes" options within Digital Twin Explorer.
	Attribute Group	Menu>Assets>Attribute Group.
	Attribute Library	Menu>Assets>Attribute Library.
	Attribute Value Assignment	Disabling this permission turns the "Attributes" page read-only, and the "Bulk Attributes" option is disabled completely.
Data Entry	Create New Data Form	The "Create New Data Form" option within Administration>Data Entry Form Management.
	Data Entry Form Management	Menu>Administration>Data Entry Form Management.
	Message Board Admin	Menu>Administration>Message Board Admin.
	Data Workpack Generation	Menu>Administration>Data Workpack Generation
	Edit Workpack Definitions	Disabling this permission turns the "Data Workpack Generation" page read-only.
	Machine Learning Definition	Menu>Administration>Machine Learning Definition
	Edit Machine Learning Definitions	Disabling this permission turns the "Machine Learning Definition" page read-only.
	Properties Query Tool	Menu>Reports>Properties Query Tool
Data Tools	Regression Analysis	Menu>Data Tools>Regression Analysis
DTE Data	Data Delete	The "Data Delete" option within Digital Twin Explorer. The "Delete" button within the "Data Workbook" section of Digital Twin Explorer.
	Data Insert	The "Add Row" button, and the "Import New Values Only" radio button in the "Data Workbook" within Digital Twin Explorer. This will enable/disable the ability to add data manually or via CSV import. Can be used in conjunction with "Data Update" to further restrict access. With both "Data Insert" and "Data Update" disabled, the "Data Workbook" has no "Save" button, or "Import" section.
	Data Update	The "Overwrite Existing Values" radio button in the "Data Workbook" within Digital Twin Explorer. This will enable/disable the ability to update/amend existing values and/or timestamps, manually or via CSV import. Can be used in conjunction with "Data Insert" to further restrict access. With both "Data Insert" and "Data Update" disabled, the "Data Workbook" has no "Save" button, or "Import" section.
	Workbook Read Only Calcs	The ability to add new, or edit existing values / timestamps of calculated points in Data Workbook.
DTE Hierarchy	Copy Container or Point	The "Copy Container" and "Copy Point" options from within the right-click context menu of the Digital Twin Explorer treeview.
	Create Container or Point	The "Create Container" and "Create Point" options from within the right-click context menu of the Digital Twin Explorer treeview.
	Delete Container or Point	The "Delete Container" and "Delete Point" options from within the right-click context menu of the Digital Twin Explorer treeview.
	Move Container or Point	The "Move Container" and "Move Point" options from within the right-click context menu of the Digital Twin Explorer treeview.
	Rename Container or Point	The "Rename Container" and "Rename Point" options from within the right-click context menu of the Digital Twin Explorer treeview.
DTE Tools	Calculation Designer	The "Calculator Designer" option within the Digital Twin Explorer.
	Calculation Designer Edit	The ability to create and edit calculations within "Calculation Designer".
	Calculator Executor	The "Calculation Executor" option within the Digital Twin Explorer.
	Configure Point	The "Configure Point" option within the Digital Twin Explorer.
	Digital Twin Explorer	Menu>Assets>Digital Twin Explorer.
	Data Workbook	The "Data Workbook" option within the Digital Twin Explorer.
	R Integration	The "R" option within the Digital Twin Explorer.
	Tree Manager	The "Tree Manager" option within Digital Twin Explorer.
	XY Charts	"XY Charts" functionality within Digital Twin Explorer.
Data Tools	Regression Analysis	Menu>Data Tools>Regression Analysis
Reports	Edit Custom Table Cells	With this set, on a Custom Table in "interactive mode", a user will be able to edit 'Attribute' cells only. All other cells will not be editable. This editable feature applies to Fixed and Iterative tables only - it will not be available when using a view.
	Report Config	Menu>Reports>Report Config. The "Report Configuration" button within "Reports".
	Report Table Editor	Menu>Reports>Report Table Editor. The "TableID" link within the "Custom Table" widget configuration.
	Reports	Menu>Reports>Reports. The "Reports" button within "Report Configuration".
	View Login Attempts	Menu>Reports>View Login Attempts.
Setup	System Configuration	Menu>Settings>System Configuration. This permission is required to access any of the pages that hang off the "System Configuration" tree: Organisations Groups Users Web Config
	Groups	Menu>System Configuration>Groups.
	Organisations	Menu>System Configuration>Organisations.
	Users	Menu>System Configuration>Users.
	Web Config	Menu>System Configuration>Web Config.
System Admin	Copy Widgets and Dashboards	Enable the "Copy Widgets and Dashboards" functionality from Dashboard Edit page.
	Create Main PDF	The "Convert to PDF" icon on all dashboards. Note: The ability to enable / disable the "Convert to PDF" icon on an individual dashboard basis is controlled from the Menu>Administration>Dashboard Manager page.
	Can access Web Service	Backend configuration, not applicable for standard users.
	Contracts Allocation	Menu>Administration>Contracts Allocation
	Contracts Definition	Menu>Administration>Contracts Definition
	Dashboard Manager	Menu>Administration>Dashboard Manager.
	Data Collection Framework	Menu>Assets>Data Collection Framework.
	Enumeration Admin	Menu>Administration>Enumeration Admin.
	Episode Administration	Menu>Administration>Episode Administration.
	Feedback Office	Backend configuration, not applicable for standard users.
	File Manager	Menu>Assets>File Manager.
	Find Input Params	The "Find Input Params" and "Find All Input Params" options within the Digital Twin Explorer.
	Find Subsequent Calcs	The "Find Subsequent Calcs" options within the Digital Twin Explorer.
	Logbook Add/Edit	The ability to Add / Edit log book entries from the "Logbook" widget.
	Logbook Delete	The ability to Remove log book entries from the "Logbook" widget.
	My Configuration Page	My Configuration Page, accessible via the icon on the top banner.
	Perspective Application	Menu>Assets>Perspective Application.
	Perspective Management	Menu>Assets>Perspective Management.
	Phrase Admin	Menu>Administration>Phrase Admin.
	Site Info Edit	The ability to edit site details on the "Site Info" widget.
	Version Manager	Menu>Administration>Version Manager. Even with this permission enabled, the user must also be a member of a SuperUser group to be able to access the "Version Manager" page.
	Widget Groups	Menu>Administration>Widget Groups.