Role-Based Access Control

Configure fine-grained permissions with RBAC.

RBAC Overview

FabConnect uses Role-Based Access Control for authorization.

Built-in Roles

Role	Equipment	Alarms	Settings	Users
admin	full	full	full	full
engineer	full	full	read	none
operator	read/execute	acknowledge	none	none
viewer	read	read	none	none

Custom Roles

yaml

roles:
  - name: shift-supervisor
    permissions:
      equipment:
        - read
        - execute
      alarms:
        - read
        - acknowledge
        - clear
      users:
        - read

Permission Scopes

read: View data
write: Create/modify data
execute: Run commands
delete: Remove data
admin: Full control