Skip to content

User Roles🔗

Access within Impact is controlled by RBAC (role based access control) rules. These rules are managed through the IAM component of Impact by a user with administrator privileges.

Note

On Modelon Impact on Cloud these settings are managed by Modelon. Please contact Modelon support to request changes.

Authorization🔗

Please note that many roles have requirements on licenses being available. If licenses are exhausted or over-provisioned the roles may not be applied.

Roles🔗

impact-pro🔗

Allows full access to all impact features as well as Impact Modelica Libraries.

If the number of users with this role assigned exceeds the number of purchased pro licenses the system is considered overprovisioned and the role will be denied.

impact-base🔗

Allows full access to all impact features but does not allow access to Impact Modelica Libraries.

If the number of users with this role assigned exceeds the number of purchased base licenses the system is considered over-provisioned and the role will be denied

impact-deployment🔗

Allows limited access to Impact in order to consume and extract value from models that has been provided by other users.

  • Allows access through REST API, Python client, Javascrip client, Jupyter notebooks and similar scripting environments.
  • Does not allow access to the modeling user interface and other means of creating models.
  • Allows access to the user interface for experimentation if the workspace is intended for App Mode.

If the number of logged in users with this role (at any given time) exceeds the number of purchased deployment licenses the system is considered over-provisioned and the role will be denied

Limitations🔗

  • Both Impact-pro and Impact-base roles may not exist in the same installation.

Inspection🔗

A user can, once authenticated, navigate to /api/users/me to get information about the assigned roles. The response will be in JSON format.

Note: This data may also contain additional sub-roles provided as a consequence of holding the listed roles. These can not be manually controlled.

Example: 

{
"data": {
  "id": "9504758f-11e9-4cec-a3a7-27b8d19beafb",
  "username": "mikael.hernrup@modelon.com",

  "externalUsers": [
    {
    "id": "john@doe.se"
    }
  ],
  "firstName": "John",
  "lastName": "Doe",
  "email": "john@doe.se",
  "license": "impact-pro",
  "roles": [
    "impact-editor",
    "offline_access",
    "uma_authorization",
    "default-roles-modelon",
    "impact-pro",
    "impact-executor"
  ]
}
}

Setup User Accounts🔗

For more information about how to configure these roles as a company administrator we refer to the operations manual that is distributed with your installation material.