Permissions

There are two complementary types of access control in HyDip:

Roles-based access to major features and functionality using System Groups;
Site Group and Tank Group access to grant access to designated Site and Tank Groups.

Roles-based Access Control using System Groups

System Groups typically come in pairs:

'Operator' groups have read only access to the views associated with any given System Group;
'Manager' groups have enhanced access to add, edit and in most cases delete objects within the associated views.

Users can be added to a System Group via the Users and Groups menu underneath Administration.

📘
Managing System Group membership requires 'Administrator' access
To manage users and permissions, ensure your user account is itself a member of the 'Administrators' System Group.

Below is a full list of System Groups and the access their membership confers:

System Group	System group Explained
Administrators	Administrators can create, manage and delete custom User Groups, and manage membership of System Groups. Users of this System Group are normally responsible for managing permissions and access to the HyDip system.
Inventory	Inventory Users can manage Device inventory, including adding and removing Devices, Sites and Tanks from your HyDip account. Users in this System Group will have access to the 'Inventory' page from within the 'Administration' menu.
Network Managers	Network Managers can add and edit Networks from 'Administration'/'Manage Networks'. Deleting a Network is a highly destructive operation. To delete a Network, you must contact HyDip support.
Network Operators	Network Managers can view Network settings from 'Administration'/'Manage Networks'.
Pricezone Managers	Users in this group can add, delete and edit pricing information in 'Networks'/'Price zones'.
Pricezone Operators	Users in this group may view Price zones.
Reports	Users in this group may access account-level reporting information from the "Reports" menu.
Site Group Managers	Users in this group can add, delete and configure Site Groups (including adding and removing Sites to Site Groups) from the 'Networks'/'Site Groups' menu. Site Group Managers have access to manage all Site Groups. To give a User access to specific Site Groups only, use Site Group access control instead.
Site Group Operators	Users in this group can view Site Groups from the 'Networks'/'Site Groups' menu. Site Group Operators have access to view all Site Groups. To give a User access to specific Site Groups only, use Site and Tank Group access control instead.
Tank Group Managers	Users in this group can add, delete and configure Tank Groups (including adding and removing Tanks to Tank Groups) from the 'Networks'/'Tank Groups' menu. Tank Group Managers have access to manage all Tank Groups. To give a User access to specific Tank Groups only, use Tank Group access control instead.
Tank Group Operators	Users in this group can view Tank Groups from the 'Networks'/'Tank Groups' menu. Tank Group Managers have access to view all Tank Groups. To give a User access to specific Tank Groups only, use Tank Group access control instead.

The following System Groups are deprecated, are not in current use, and will be removed in a future release:

Developers (no replacement)
Device Managers (replaced with Site and Tank Group access control)
Device Operators (replaced with Site and Tank Group access control)
Managers (no replacement)
Site Operators (replaced with Site Group access control)
Site Managers (replaced with Site Group access control)
Tank Operators (replaced with Tank Group access control)
Tank Managers (replaced with Tank Group access control)

Site and Tank Group Access Control

Custom groups of Users can be assigned either read or read-write access to groups of Sites and/or groups of Tanks.

Granting a User Group access to a Tank Group implies that all Users in that User Group can access all Tanks in that Tank Group. Granting a User Group access to a Site Group implies that all Users in that User Group can access all Sites in that Site Group.

Configuring Site or Tank Group Access Control

Create a User Group in 'Administration'/'Users and Groups' and add Users to this User Group from the same view.
Create a Site Group or Tank Group

For Site Group based access control, create a new Site Group in 'Networks'/'Site Groups' and add Sites to this Site Group from the same view.
For Tank Group based access control, create a new Tank Group in 'Networks'/'Tank Groups' and add Tanks to this Tank Group from the same view.

Add the Site or Tank Group to the User Group's access list from 'Administration'/'Users and Groups'. You may specify the level of access (read or read-write) here.

Split Site/Group Access Control

Site Groups represent a list of Sites, which in turn contain both Devices and Tanks. By comparison, Tank Groups contain only Tanks and can also include idle Tanks not presently attached to a Site.

In most cases where the objective is simply to grant a User Group access to a Site Group and any included Sites, Devices and Tanks, it is not necessary to add an overlapping Tank Group to the User Group. Such access to Site-connected Tanks is already implicit from the Site Group. However, this split-access approach is a common scenario used to allow certain internal staff full access to Sites while granting access only to Tank level data for third party fuel suppliers.