Permissions and Roles

Source file: permissions-and-roles.htm

BlastLogic enables multiple user roles to be created. Each role can be assigned with specific permissions. There are four types of permissions:

  • Global Only. Permission related to global operations and therefore only has an effect when granted in a global context. Assigning a role with this permission to a site-specific context will not grant access to these global operations.

  • Site Only. Permission only has effect on site-specific operations. Assigning a role with this permission to a site-specific context will grant access to these operations for that site only.

  • Context Specific. Permission relates to operations that can be both global and site-specific. Having the permission granted in a site-specific context grants access to the site-specific operations for that site only. It also grants access to the read-only global operations with this permission but not to the editing global operations. The permission needs to be granted in the global context to access the global editing operations. Limiting key functions to technical staff enables greater control of data entered and limits accidental editing by untrained users.

  • Universal. Permission relates to global operations but can be enabled by assigning the permission in any context. Assigning a role with this permission to a either a site-specific context or global context will grant access to the global operation.

The table below lists the permissions and their scope, along with recommended additional permissions that should be granted together.

Permission Permission scope Other recommended permissions
View attachments Retrieving and searching attachment metadata, downloading attachment content.  
Edit attachments Creating and editing attachments, uploading files, creating links between attachments and blasts or sheets.

  • View attachments

  • View blasts

Edit blast products Adding and editing blast products in the site's blast product catalogue.  
Create blasts Creating new empty blasts.

  • View blasts

  • Edit blasts

  • Create holes

View blasts Viewing blasts, tie-ups, sheets, holes, entries, events, and charge rules.  
Edit blasts Editing properties of existing blasts. View blasts
Edit charge rules Creating and editing non-standard charge rules.  
Edit charging events Entering data about individual charging events, such as loading of an individual deck or primer.

  • View blasts

  • Optionally:

    • Edit hole comments

    • Edit hole designs

    • Create holes

Edit drilling events Viewing and editing drilling events.

  • View blasts

  • Optionally:

    • Edit hole comments

    • Edit hole designs

    • Create holes

Edit entries

Entering data to existing entries on sheets.

Note:  To add new entries to a sheet, users must be also granted the Edit sheets permission.

 View blasts
Edit hole comments Adding and editing comments for a hole. View blasts
Edit hole designs Editing the hole design parameters of existing holes. This includes moving holes between blasts, changing the hole ID, abandoning holes, editing custom hole properties, as well as editing holes drill and charge designs. View blasts
Create holes Adding new holes to a blast or pattern. This also includes creating ad hoc and redrill holes.

  • View blasts (to retrieve holes after creation)

  • Edit hole designs (to modify hole designs after creation)

  • Edit patterns

Edit inventory Editing inventory and related comments.

  • View inventory

  • View blasts (to link usage to a blast)
View inventory Viewing and searching inventory records. View blasts (to retrieve relevant blast data for inventory usage)
Manage licensing Editing Maptek Account credentials, establishing and terminating Maptek Account sessions, allocating tablet licences between sites and the shared pool.  
Edit patterns Creating and editing patterns of holes. View blasts
Edit process tolerances Editing site process tolerances, contained within site settings. Edit site settings
Edit roles Defining new roles and editing permissions for a role.  
Edit sheets Creating and updating dip, backfill, charge, and survey sheets. This also includes permission to create and edit entries on those sheets. View blasts
Edit site resources Editing the lists of personnel, crews, drill machines and loading trucks, as well as colour maps.  
Edit site settings Editing site parameters, including colours, glyphs, process tolerances, pattern properties, and custom property schemas.  
Delete sites Permanently deleting sites from the database.  
Create sites Creating new sites in the database.  
Administer sites Activating, deactivating, and renaming sites.  
Edit spatial measurements Creating, updating, and deleting spatial measurements.  
Edit standard charge rule Creating and editing standard charge rules and marking whether charge rules are standard rules or not. Edit charge rules
Edit tenants Creating Microsoft Entra ID tenants, inviting directories to onboard, and deleting tenants.  
Edit tie-up Viewing and editing design and actual tie-ups. View blasts
Edit user roles Granting or revoking roles for other users.

  • List users

  • List user roles
List user roles

Viewing the list of roles assigned to users on each site.

Note:  If the permission is granted globally, the user can view all roles assigned to all users. If the permission is granted per site, the user can only view roles assigned to users on the sites where they have this permission.

 List users
Edit users Adding, editing, and deactivating user accounts in the system. List users
List users Obtaining a list of all users in the database.