| Role | Description |
|---|
| None | None Or unknown |
| Admin | Allows editing of administrative settings and access to IWA tools |
| BrowseFiles | Allows browsing And downloading any file in IDEP.WEB using the logs 'browser’ |
| ViewLogs | Allows browsing And downloading the logs using the logs 'browser’ |
| Login | Allow (quick, CVR Or SE) login to IDEP.WEB with the CVR numbers defined in <ids> |
| Query | Allows read-only access to the database |
| RestartApplication | Allows restarting of the application |
| StopServices | Allows stopping and starting the application's Windows Services |
| Control | Combination of:
• RestartApplication / Allows restarting of the application
• StopServices / Allows stopping and starting the application's Windows Services |
| UploadMetadata | Allows uploading of metadata |
| UploadQueries | Allows uploading of database queries file |
| UploadUsers | Allows uploading of application users configuration files |
| UploadRates | Allows uploading of exchange rates – [20130094] |
| Upload | Combination of:
• UploadMetadata / Allows uploading of metadata
• UploadQueries / Allows uploading of database queries file
• UploadUsers / Allows uploading of application users configuration files
• UploadRates /Allows uploading of exchange rates – [20130094] |
| GrantAccess | Allows granting temporary login access to other IWA users |
| EditWebUsers | Allows editing the application users – [20130095] |
| UploadWebUsers | Allows batch upload of application Users – [20130095] |
| UploadMessages | Allows batch upload of provider messages – [20130095] |
| ManageUsers | Combination of:
• EditWebUsers / Allows editing the application users – [20130095]
• UploadWebUsers / Allows batch upload of application users – [20130095]
• UploadMessages / Allows batch upload of provider messages – [20130095] |
| Archive | Allows archival (deletion) of declarations – see [20130049] |
| DeleteUsers | Allows deletion of users – [20130049] |
| ChangePassword | Allows changing the password – [20130111] |
| Operations | Various operations |
| ListUsers | Allow listing logged in end-users - [20150098] |
| PrivilegedLogin | Allows logging in with Absence & Earnings privilege - [20150098] |
| Eject | Allows ejecting a session - [20150107] |
| JustQuery | Only allows running the predefined queries. Not included in Everything - [20160078] |
| SessionMonitoring | Allow real time monitoring of end users sessions |
| SensitiveData | Allow access to Absence and Earnings 'sentive' data |
| Everything | All of the above = administrator |
| AccessUserWebService | [20140102], not included in Everything |