<?xml version="1.0"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
	<id>https://wiki.alkit.se/wice298/api.php?action=feedcontributions&amp;feedformat=atom&amp;user=Alkitjohan</id>
	<title>WICE Wiki v2.98 - User contributions [en]</title>
	<link rel="self" type="application/atom+xml" href="https://wiki.alkit.se/wice298/api.php?action=feedcontributions&amp;feedformat=atom&amp;user=Alkitjohan"/>
	<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php/Special:Contributions/Alkitjohan"/>
	<updated>2026-05-21T22:07:19Z</updated>
	<subtitle>User contributions</subtitle>
	<generator>MediaWiki 1.44.0</generator>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=New_features_in_v2.98&amp;diff=4199</id>
		<title>New features in v2.98</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=New_features_in_v2.98&amp;diff=4199"/>
		<updated>2026-05-20T14:17:37Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;== Show existing PINs for resource groups ==&lt;br /&gt;
&lt;br /&gt;
== Enable fetching PINs from PIE for individual vehicles ==&lt;br /&gt;
&lt;br /&gt;
== Resource group WMUs ==&lt;br /&gt;
&lt;br /&gt;
== Add reported WMU to WCU&#039;s WMU configuration ==&lt;br /&gt;
&lt;br /&gt;
== Permission to control edit of WCUs. ==&lt;br /&gt;
Starting from version 2.98.0, administrators can assign a new permission that determines whether a user can edit a WCU. Read more about it here.&lt;br /&gt;
&lt;br /&gt;
== Add or revoke permissions to existing tasks ==&lt;br /&gt;
The options to add or revoke permissions to existing tasks have been improved from version 2.98. In summary, when removing a WCU from a permission either by removing it as resource from the permission itself, or by removing it from the resource group used in the permission or by removing the permission label from the resource, access to existing tasks can also be removed. More information and example can be found in [[Roles and permissions#Permission for specific tasks]].&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=Roles_and_permissions&amp;diff=4198</id>
		<title>Roles and permissions</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=Roles_and_permissions&amp;diff=4198"/>
		<updated>2026-05-20T14:06:13Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: /* Permission for specific tasks */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;includeonly&amp;gt;====Roles and permissions====&amp;lt;/includeonly&amp;gt;&lt;br /&gt;
In order to restrict access to resources and functions in the portal, there is a framework using roles and permissions. Permissions are given on a set of resources. These permissions are grouped into roles, and roles are then attached to one or several users to be granted specific permissions.&lt;br /&gt;
&lt;br /&gt;
The “Edit roles and permission” dialog can be seen in Figure &amp;quot;Edit Roles and Permissions Dialog&amp;quot;. It consists of three tables. The top left table holds a list of the roles, the top right holds the user(s) for the selected role and the bottom one hold the selected role&#039;s permissions. Their size is adjustable and you can minimize them by clicking on the line between them.&lt;br /&gt;
[[File:Roles and permissions panel-20210217-144811.png|left|thumb|400x400px|Edit Roles and Permissions Dialog]]&lt;br /&gt;
&amp;lt;br clear=&amp;quot;all&amp;quot;&amp;gt;&lt;br /&gt;
You add a new role by pressing the button “Add role” and delete a role along with its permissions by pressing the red button next to it. When making a role you add a description and unique name. To edit an already existing role, double click the entry you wish to edit.&lt;br /&gt;
&lt;br /&gt;
When you select a role in the top left table, the lower table shows that specific role&#039;s permissions and the upper right table shows which users have that role. The permissions table consists of two columns, a string that is the actual permission and the set of resources that apply to that permission. &lt;br /&gt;
&lt;br /&gt;
=== Creating and editing roles and permissions ===&lt;br /&gt;
&lt;br /&gt;
[[File:Add permission.png|thumb|Creating New Permission]]&lt;br /&gt;
&lt;br /&gt;
To create a new permission press the “Add permission” button. It opens the following interaction depicted in Figure &amp;quot;Creating New Permission&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
[[File:Editing permissions.png|thumb|400x400px|Editing Task Permissions]]&lt;br /&gt;
&lt;br /&gt;
# Select what kind of permission you want. There are a number of different permissions, ten for WCUs and one to give permission to all tasks (the task permission can not be modified). The permissions are:&lt;br /&gt;
## &#039;&#039;&#039;Task&#039;&#039;&#039;. A special permission which is used to give users access to every existing task in the system. Typically only used for admins.&lt;br /&gt;
## &#039;&#039;&#039;Assignment Creator&#039;&#039;&#039;. This permission handles access to creating/editing/viewing assignments in the tab Assignment (see [[Signal Reader Assignment Wizard|signal reader]] and [[Area5 Assignment Wizard|Area5]]). Having a read-permission means that you can see a list of assignments but you cannot go ahead and edit or create them. A write-permission on the other hand makes you eligible to edit and create assignments. Currently, the permission is only relevant for signal reader and Area5. &lt;br /&gt;
## &#039;&#039;&#039;Vehicle Profile&#039;&#039;&#039; See [[#Vehicle Profile permission]]&lt;br /&gt;
## &#039;&#039;&#039;WCU Task&#039;&#039;&#039; Controls if a user is permitted to create/see tasks of a specific type on a WCU. More what this means is discussed below in &amp;quot;Permission to specific tasks&amp;quot;&lt;br /&gt;
## &#039;&#039;&#039;WCU Configuration.&#039;&#039;&#039; This permission controls whether you are allowed to work with a WCU&#039;s configuration.&lt;br /&gt;
## &#039;&#039;&#039;WCU Module&#039;&#039;&#039;. The permission controls the access to individual module configurations on a WCU. An example of a module is Signal reader.&lt;br /&gt;
## &#039;&#039;&#039;WCU Monitor&#039;&#039;&#039;. A task can have a monitor function to report data in real time. In order to see the real time data the user must have this permission.&lt;br /&gt;
## &#039;&#039;&#039;WCU Plot route&#039;&#039;&#039;. To see a historic GPS track of a WCU a user must have this permission.&lt;br /&gt;
## &#039;&#039;&#039;WCU Position&#039;&#039;&#039;. Allows a user to see a WCU&#039;s current position.&lt;br /&gt;
## &#039;&#039;&#039;WCU Shelving&#039;&#039;&#039;. Allows a user to handle any shelving, unshelving and refurbishing of a WCU.&lt;br /&gt;
## &#039;&#039;&#039;WCU View&#039;&#039;&#039;. This permission applies to the Vehicles tab. It has to do with whether you are allowed to list a WCU in the table. Selecting this subtype makes the subtype type part unnecessary and therefore, it is removed if you choose this resource type.&lt;br /&gt;
##&#039;&#039;&#039;WCU Connect&#039;&#039;&#039;. Allows a user to connect a WCU to a vehicle.&lt;br /&gt;
##&#039;&#039;&#039;Vehicle Create&#039;&#039;&#039; See [[Roles and permissions#Vehicle Create permission|#Vehicle Create permissions]]&lt;br /&gt;
##&#039;&#039;&#039;Resource Group Manage&#039;&#039;&#039; See [[#Resource Group Manage permission]]&lt;br /&gt;
##&#039;&#039;&#039;Resource Group Create&#039;&#039;&#039; See [[#Resource Group Create permission]]&lt;br /&gt;
##&#039;&#039;&#039;View Inactive WCU&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to view inactive WCUs.&lt;br /&gt;
##&#039;&#039;&#039;View Inactive Vehicle&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to view inactive vehicles.&lt;br /&gt;
##&#039;&#039;&#039;Vehicle Edit&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to edit vehicles.&lt;br /&gt;
# Choosing if the permission should be a read and/or write permission. One of these have to be selected or you will not be able to save changes.&lt;br /&gt;
# Selecting which resources that apply to the permission. The selection is made using the two tables you see in Figure &amp;quot;Editing Task Permissions&amp;quot;. To select a resource, which can be a resource group, you enter the name of the resource in the left table filter area. As you type, the table is automatically filled with resources matching the criteria. If a resource is part of a resource group the icon to the left is shown. If you hold the mouse over the resource name you will see which resource group it is part of. If you instead see the icon shown to the left, the resource is a resource group. Holding the mouse over the entry will show you which resources are part of the resource group. To select a resource, drag it over to the right table or select the resource and then press the right-arrow. To deselect a resource, drag it to the left table or press the left-arrow. There is a “Select all” option. It selects all current and future resources to which this permission should be applied. [[File:Labels in permissions1.png|thumb|Select resources by labels]][[File:Permission label2.png|thumb|Resource selected by label]]From version 2.93 of the WICE portal it is also possible to let labels select the resources that will be part of the permission. When a label is selected as in the screenshot to the right, the WCUs which are currently associated with the label are added to the set of selected resources. Multiple labels can also be used to either collect more resources or narrow down the resources depending on the chosen relation between the labels.  After the permission has been saved, any additional resources which get associated with the labels used in the permission will automatically be added to the permission. Since these labels now controls one or many permissions, only the users with the role admin can add or remove the labels from resources as long as they are part of any permission.&lt;br /&gt;
# Set what type of tasks the permission applies to. It is automatically set to have all selected but you can unselect all and selecting other tasks. This option is only available on the &#039;&#039;&#039;WCU task&#039;&#039;&#039;, &#039;&#039;&#039;assignment&#039;&#039;&#039; &#039;&#039;&#039;creator,&#039;&#039;&#039; &#039;&#039;&#039;monitor&#039;&#039;&#039; and &#039;&#039;&#039;module&#039;&#039;&#039; permissions. It corresponds to the set of available modules for a WCU.&lt;br /&gt;
When you are done press &amp;quot;Save changes&amp;quot; or &amp;quot;Reset changes&amp;quot; if you want to revert the changes. You can always edit the permission by selecting it in the table. The dialog described above will show  and you can make your changes, except that you can not change what type of task it is.&lt;br /&gt;
&lt;br /&gt;
==== Assignment Creator permission ====&lt;br /&gt;
This permission concerns the [[Signal Reader Assignment Editor|signal reader assignment editor]]. If you give the user a read permission they can look at already created assignments. If you give a user the write permission they will also be able to create and delete assignments.&lt;br /&gt;
&lt;br /&gt;
==== Vehicle Profile permission ====&lt;br /&gt;
With this permission you can delegate to individual users the possibility to view vehicle profiles if given the read permission. This makes the tab visible in the GUI but all buttons concerning editing/adding/removing are disabled. If a user has the write permission as well, the user will be able to edit/add and remove vehicle profiles. &lt;br /&gt;
&lt;br /&gt;
==== Vehicle Create permission ====&lt;br /&gt;
This permission enables a user to do [[The Portal Administrator View#Add Vehicle Dialog|Add Vehicle]]. This will also let a user view any disconnected vehicles in the vehicles tab.&lt;br /&gt;
&lt;br /&gt;
==== Resource Group Manage permission ====&lt;br /&gt;
This permission enables a user to [[The Portal Administrator View#Resource Groups|manage resource groups]]. Managing resource groups entails adding and removing WCUs from groups, editing groups, and removing groups. It will also enable access to the Resource groups panel.&lt;br /&gt;
&lt;br /&gt;
==== Resource Group Create permission ====&lt;br /&gt;
This permission enables a user to create resource groups by pressing Add New in the Resource groups panel of the Administration tab. It will also enable access to the Resource groups panel. Any permissions that may be needed to initially manage or edit the created resource group will be added to a role specific to the creator upon creating the group.&lt;br /&gt;
&lt;br /&gt;
=== Selecting resources using uploaded file ===&lt;br /&gt;
As described above, you can select resources in the select resources widget. In addition to this, you can upload a file containing the vehicles or WCUs that you would like to apply to a permission or a set of permissions. By pressing the button called &#039;Import vehicle file&#039; you will be presented with a dialog where you can upload a file containing multiple vehicles or WCUs. You can either upload an excel file or a CSV type of text file. What is important is that there is a header column saying what type of identifiers can be found in the file. Identifiers currently supported are: vin, plate or wcu. An example content of file (CSV):&lt;br /&gt;
&lt;br /&gt;
&amp;lt;kbd&amp;gt;&lt;br /&gt;
wcu&amp;lt;br&amp;gt;&lt;br /&gt;
04-1B-35-98&amp;lt;br&amp;gt;&lt;br /&gt;
90-80-AA&amp;lt;br&amp;gt;&lt;br /&gt;
&amp;lt;/kbd&amp;gt;&lt;br /&gt;
[[File:Import vehcile file-20210217-151236.png|thumb|Import a vehicle file for permission resource selection]]&lt;br /&gt;
Just by changing the heading to plate or vin you should reference such identifiers in the file. The dialog also presents the option to ignore resources not found and apply the changes for those found. The default is however to do nothing if any of the resources are not found. The checkbox &#039;Ignore unconnected vehicles&#039; is only applicable if you have plate or vin identifiers.&lt;br /&gt;
&lt;br /&gt;
If you have selected a permission in the permission table, the resources in the file will be applied to only the selected permission. If you have selected a role in the top leftmost table, the resources in the file will be applied to all permissions of the role.&lt;br /&gt;
&lt;br /&gt;
=== Changing a users roles and permissions ===&lt;br /&gt;
You can change a user&#039;s roles under in the edit user dialog if you press the button &amp;quot;Edit user roles&amp;quot;. The edit user dialog then gets extended as two boxes appear, a left one with available roles and a right one with current roles. In the left one you can search the role(s) you want and drag them to the right box or press the button pointing right. With the two buttons at the bottom corner(the paper and clipboard ones) you can copy the names of the roles and also insert the names of roles to add them.&lt;br /&gt;
&lt;br /&gt;
You can also change a users permission to view tasks in the tasks tab: By right-clicking the task(s) you want to change permissions for and hovering over &amp;quot;Permission&amp;quot; you will get the options &amp;quot;Show who can see task&amp;quot; and &amp;quot;Add who can see task&amp;quot;. &amp;quot;Show who can see task&amp;quot; will open a window with a left and a right box where the left contains users without permission to view the task and the right contains users who have permission. By moving users from the left to right and vice versa you can give or remove someones permission. You can also press the clipboard the the right bottom to copy the users who have permissions or add users by writing their name within parentheses. Users in the right box can be unselectable and that is if they have a role giving them the permission to view that task the only way to remove that is to remove that role from them. &amp;quot;Add who can see task&amp;quot; works the same way as &amp;quot;Show who can see task&amp;quot; except that the right box does not show users with permission so you can not remove permissions, this is so that with add you can add permissions for many tasks at the same time as the show can not show users from many tasks.&lt;br /&gt;
&lt;br /&gt;
[[File:Copy user assignment permissions.png|thumb|300x300px|Copy User Task Permissions Dialog]]&lt;br /&gt;
&lt;br /&gt;
You can also edit a users role by searching for user(s) and right clicking on them to get a window with different options. There are five different options where the three first can be used on multiple users at the same time while the bottom two can not.&lt;br /&gt;
* &amp;quot;Add user task permissions to this user&amp;quot; will open the dialog shown in Figure &amp;quot;Copy User Task Permissions Dialog&amp;quot;. With this button you take a user&#039;s task permissions and add them to the selected user(s). You do this by searching and selecting a user and then pressing &amp;quot;OK&amp;quot;.&lt;br /&gt;
* &amp;quot;Replace user task permissions with user&amp;quot; will open a similar dialog to the one in Figure &amp;quot;Copy User task Permissions Dialog&amp;quot;. This button is much like the one before except that instead of adding permissions to the current user this replaces the permissions that the selected user(s) have. Here you also search the user whose permissions you want to replace the select them and press &amp;quot;OK&amp;quot;.&lt;br /&gt;
* &amp;quot;Copy user roles to this user&amp;quot; will open a similar dialog to Figure &amp;quot;Copy User Task Permissions Dialog&amp;quot;. Instead of replacing permissions, this dialog replaces selected user(s) roles with the roles of a user who you chose. Search the user whose roles you want to copy for replacement and press &amp;quot;OK&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
[[File:Give permission on car.png|thumb|Give Permission on Vehicle Dialog]]&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
* &amp;quot;Give this user permission to all tasks on vehicle&amp;quot; gives task permission on one or many vehicles. The dialog will look like the dialog in Figure &amp;quot;Give Permission on Vehicle Dialog&amp;quot;. In the left box you select vehicles and move them to the right to give permission on them, you can also as you see below the left box select a file with vehicles to easily select a set of vehicles. Then you select which types of tasks it should give permission to (leaving this empty will not give any permissions). You can also check the checkbox &amp;quot;Reset user permission&amp;quot; to replace the roles of the selected user instead of adding new to the current ones.&lt;br /&gt;
* &amp;quot;Give this user permission to all tasks on WCU&amp;quot; is identical to the previous button except that it applies to WCUs instead of vehicles.&lt;br /&gt;
&lt;br /&gt;
==== User specific roles ====&lt;br /&gt;
A role may also be set to be specific to just one user. Doing this will remove the role from any other users that currently have it as well as prevent adding the role to any other users but the specified user.&lt;br /&gt;
&lt;br /&gt;
=== Permission for specific tasks ===&lt;br /&gt;
The above text discuss permissions as they are found from the User panel. There are also a set of &amp;quot;implicit&amp;quot; permissions created when a new task is created, based on the task type permission discussed above. Let us elaborate a bit on this to make it clear what it means. The use case is as follows; a user has a read task permission on a WCU (&amp;quot;wcu:assignment:soh:read:awcu&amp;quot;). (Observe that a task permission might contain the word &amp;quot;assignment&amp;quot; even if it is referring to a task. Look at the menu names instead to confirm that you are working with a task.) Let us say that a new state-of-health task is created on the WCU (&amp;quot;&#039;&#039;awcu&#039;&#039;&amp;quot;) while the user has the above permission. Regardless of who created the task, the user will now be able to list this task in the Tasks panel and download any data produced. Later, as time goes by, the WCU is no longer used in the particular project and an administrator removes the permission &amp;quot;wcu:assignment:soh:read:awcu&amp;quot; from the user. When new tasks are created on this WCU our user above will not be able to see the new tasks created in the Tasks panel. However, the user will be able to see the previous task, i.e. when the user had the correct permission. Thus, this solution enables users to retain the permission to see historical tasks, let us call this a &#039;&#039;&#039;historical task permission&#039;&#039;&#039;. This type of permission cannot be seen in the permission panel. To see who has access to which &#039;&#039;&#039;historical task&#039;&#039;&#039; you must turn to the Task panel.&lt;br /&gt;
&lt;br /&gt;
[[File:Task-panel-permission.png|thumb|Permission Choices in the Tasks Panel]]&lt;br /&gt;
&lt;br /&gt;
As an administrator you have the possibility to both see and modify who has access to individual tasks. There are two options presented if you right-click an task in the Tasks panel. To the right you see the two choices available. The top choice is only available if you have selected a single row in the table. The bottom one is always available, also if electing multiple rows.&lt;br /&gt;
&lt;br /&gt;
==== Top selection &amp;quot;Show who can see task&amp;quot; ====&lt;br /&gt;
By selecting the top selection you will be presented with a dialog where on the left hand side you have all available users that do not have the permission to see the task. On the right hand side you have the users that have the permission to do so. On the right hand side you might see that some users are grayed. Those users have the &#039;&#039;task permission,&#039;&#039; not to be confused with the WCU task permission&#039;&#039;,&#039;&#039; described above. Also, the users visible are enabled, disabled users will not be displayed.&lt;br /&gt;
&lt;br /&gt;
[[File:Users-with-read-permission-tasks-panel.png|thumb|Users with Permission on a Specific Task]]&lt;br /&gt;
&lt;br /&gt;
To give a user the permission to see the task, simply move the user from the left side to the right side. This is accomplished by selecting one or more users and then click the right-arrow. Conversely, to remove a user from the permission select the users from the right side and click the left-arrow. At the top of the left side you can search for users by typing and as you go the users will be filtered to match what you type.&lt;br /&gt;
&lt;br /&gt;
In the picture &amp;quot;Users with Permission on a Specific Task&amp;quot; to the right you see the user &#039;serverTriggerUser&#039; which is an enabled user which do not yet have the permission to see the task.&lt;br /&gt;
&lt;br /&gt;
==== Bottom selection &amp;quot;Add who can see task&amp;quot; ====&lt;br /&gt;
The bottom selection from above &#039;Add who can see task&#039; will not list who already has access to the task, but rather just list all users available regardless whether they already have permission or not to the task.&lt;br /&gt;
&lt;br /&gt;
You can also give a user permission to all running tasks on WCUs whose task types that user has access to. See [[The Portal Administrator View#The New User Dialog|The new user dialog]] (the portal administrator view).&amp;lt;gallery&amp;gt;&lt;br /&gt;
&amp;lt;/gallery&amp;gt;&lt;br /&gt;
&lt;br /&gt;
==== Add permission to historical tasks on permission update ====&lt;br /&gt;
[[File:Add permission to existing tasks on permission update.png|thumb|Add permission to existing tasks on permission update]]&lt;br /&gt;
From version 2.98 of the WICE portal it is possible to give users access to existing tasks when updating the WCU Task permission. See screenshot &amp;quot;Add permission to existing tasks on permission update&amp;quot;. In &amp;quot;Apply updated permission&amp;quot; it is possible to select the desired task statuses (for example only running tasks, stopped tasks etc) to apply the permission update to. For some environments all, or a subset of, statuses are preselected as default values. When saving this permission with &amp;quot;Selected resources&amp;quot; checked, any existing task having the the desired statuses on the WCUs in the list of &#039;Selected resources&#039; will be accessible for the users with the current permission. This is the same as searching for the WCUs of interest in the Tasks tab and manually adding permissions to these tasks via &amp;quot;Show who can see task&amp;quot; discussed in [[#Top selection &amp;quot;Show who can see task&amp;quot;]].&lt;br /&gt;
&lt;br /&gt;
Note that applying updated permission to tasks always applies to all resources in &#039;Selected resources&#039; so it is not possible to a subset of the resources.&lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Remove permission to historical tasks on permission update&#039;&#039;&#039; ====&lt;br /&gt;
As discussed in [[Roles and permissions#Permission for specific tasks|Permission for specific tasks]] a user has access to a historical task on a WCU even if that WCU is removed from the WCU Task permission. To remove the permission for historical tasks one have to lists the tasks in the Tasks tab, use &amp;quot;Show who can see task&amp;quot; and remove the users manually. &lt;br /&gt;
[[File:Remove permission for existing tasks.png|thumb|Remove permission for existing tasks when updating a WCU Task permission]]&lt;br /&gt;
Similar to &amp;quot;Add permission to historical tasks on permission update&amp;quot; discussed above, this can from version 2.98 be done when updating a WCU Task permission. In the screenshot &amp;quot;Remove permission for existing tasks when updating a WCU Task permission&amp;quot; the WCU &amp;quot;johan4&amp;quot;is removed from the permission. In &amp;quot;Apply updated permission&amp;quot; &#039;Remove resources&amp;quot; is selected along with all existing Task statuses. This will remove access to any existing tasks on &#039;johan4&#039; for the users having the role the current permission is part of.  &lt;br /&gt;
&lt;br /&gt;
Like for &amp;quot;Add permission to historical tasks on permission update&amp;quot; the list of desired Tasks statuses might be preselected as default values. &lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Add permission to historical tasks when WCU is added to resource group&#039;&#039;&#039; ====&lt;br /&gt;
If a resource group is used in a WCU Task permission (WTP) (like the group &#039;johan1_grupp&#039; in the screenshots mentioned before) any resource part of the group is also included in the permission. When adding a new WCU to a group that is part of a WTP users will from version 2.98 have the option to give access to any existing tasks on the WCU when the WCU is added to the group. The logic is the same as when a WCU is added to a permission described in [[#Add permission to historical tasks on permission update]]. An example of this can be seen screenshot &amp;quot;Add WCU to group used in WCU Task permission&amp;quot; where all users having the mentioned role will be given access to any &#039;Pending&#039; or &#039;Running&#039; tasks matching the individual WCU Task permission defined in the role.  &lt;br /&gt;
&lt;br /&gt;
So in this case, if the role &#039;assignment_task&#039; defines a WTP with read access to SoH tasks and the WCU johan4 has a task of type SoH with the status Pending or Running, all users with the role &#039;assignment_task&#039; will be given access to these SoH tasks. &lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Remove permission to historical tasks when WCU is removed from resource group&#039;&#039;&#039; ====&lt;br /&gt;
Similar to when adding a WCU to a resource group used in a WCU Task permission (WTP) mentioned above, access to tasks on WCUs can be revoked when the WCUs are removed from the resource group. In the screenshot &amp;quot;Remove WCU from resource group used in WCU Task permission&amp;quot; a WCU is removed from the group &#039;johan1_grupp&#039; and all Tasks status types are selected which means that all access to any tasks on the WCU will be revoked for the users having the mentioned roles. &lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Add permission to historical tasks when WCU is associated with permission controlled label&#039;&#039;&#039; ====&lt;br /&gt;
[[File:Add WCU to group used in WCU Task permission.png|thumb|Add WCU to group used in WCU Task permission]]&lt;br /&gt;
[[File:Remove WCU from resource group used in WCU Task permission2.png|thumb|Remove WCU from resource group used in WCU Task permission]]&lt;br /&gt;
[[File:Add label used in WAP to WCU.png|thumb|Associate label used in WCU Task permission with a WCU]]&lt;br /&gt;
As mentioned in [[#Creating and editing roles and permissions]], labels can be used in permissions to define the resources that are part of the permission. So when association WCU with a label that is used in a permission the WCU is added to the permissions resources. When associating a label used in a WCU Task permission (WTP) with a WCU it is from version 2.98 possible to give users of the related roles access to any existing tasks on the WCU similar to when adding a WCU to resource group described in [[#Add permission to historical tasks when WCU is added to resource group]]. An example of this can be seen in screenshot &amp;quot;Associate label used in WCU Task permission with a WCU&amp;quot;. &lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Remove permission to historical tasks when permission controlled label is removed from WCU&#039;&#039;&#039; ====&lt;br /&gt;
[[File:Remove label used in WCU Task permission from WCU.png|thumb|Remove label used in WCU Task permission from WCU]]&lt;br /&gt;
Similar to when removing a WCU from a resource group used in a WCU Task permission described in [[#Remove permission to historical tasks when WCU is removed from resource group]] it is possible to remove access to any existing tasks on the WCU the label is removed from. In screenshot &amp;quot;Remove label used in WCU Task permission from WCU&amp;quot; the label TP2 is removed from the WCU and all Task status types are selected. This means that all users with the role &#039;&#039;&#039;task_permission_label&#039;&#039;&#039; will have the access revoked on all historical tasks matching the task types defined in the permission for this WCU. So, if the permission defines access to SoH tasks for resources with the label TP2, then the access to all SoH tasks on WCU will be revoked. &lt;br /&gt;
&lt;br /&gt;
{{DEFAULTSORT:Rolas and Permissions}}&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=File:Remove_label_used_in_WCU_Task_permission_from_WCU.png&amp;diff=4197</id>
		<title>File:Remove label used in WCU Task permission from WCU.png</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=File:Remove_label_used_in_WCU_Task_permission_from_WCU.png&amp;diff=4197"/>
		<updated>2026-05-20T13:59:17Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;Remove label used in WCU Task permission from WCU&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=Roles_and_permissions&amp;diff=4196</id>
		<title>Roles and permissions</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=Roles_and_permissions&amp;diff=4196"/>
		<updated>2026-05-20T13:49:23Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: /* Add permission to historical tasks when WCU is associated with permission controlled label */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;includeonly&amp;gt;====Roles and permissions====&amp;lt;/includeonly&amp;gt;&lt;br /&gt;
In order to restrict access to resources and functions in the portal, there is a framework using roles and permissions. Permissions are given on a set of resources. These permissions are grouped into roles, and roles are then attached to one or several users to be granted specific permissions.&lt;br /&gt;
&lt;br /&gt;
The “Edit roles and permission” dialog can be seen in Figure &amp;quot;Edit Roles and Permissions Dialog&amp;quot;. It consists of three tables. The top left table holds a list of the roles, the top right holds the user(s) for the selected role and the bottom one hold the selected role&#039;s permissions. Their size is adjustable and you can minimize them by clicking on the line between them.&lt;br /&gt;
[[File:Roles and permissions panel-20210217-144811.png|left|thumb|400x400px|Edit Roles and Permissions Dialog]]&lt;br /&gt;
&amp;lt;br clear=&amp;quot;all&amp;quot;&amp;gt;&lt;br /&gt;
You add a new role by pressing the button “Add role” and delete a role along with its permissions by pressing the red button next to it. When making a role you add a description and unique name. To edit an already existing role, double click the entry you wish to edit.&lt;br /&gt;
&lt;br /&gt;
When you select a role in the top left table, the lower table shows that specific role&#039;s permissions and the upper right table shows which users have that role. The permissions table consists of two columns, a string that is the actual permission and the set of resources that apply to that permission. &lt;br /&gt;
&lt;br /&gt;
=== Creating and editing roles and permissions ===&lt;br /&gt;
&lt;br /&gt;
[[File:Add permission.png|thumb|Creating New Permission]]&lt;br /&gt;
&lt;br /&gt;
To create a new permission press the “Add permission” button. It opens the following interaction depicted in Figure &amp;quot;Creating New Permission&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
[[File:Editing permissions.png|thumb|400x400px|Editing Task Permissions]]&lt;br /&gt;
&lt;br /&gt;
# Select what kind of permission you want. There are a number of different permissions, ten for WCUs and one to give permission to all tasks (the task permission can not be modified). The permissions are:&lt;br /&gt;
## &#039;&#039;&#039;Task&#039;&#039;&#039;. A special permission which is used to give users access to every existing task in the system. Typically only used for admins.&lt;br /&gt;
## &#039;&#039;&#039;Assignment Creator&#039;&#039;&#039;. This permission handles access to creating/editing/viewing assignments in the tab Assignment (see [[Signal Reader Assignment Wizard|signal reader]] and [[Area5 Assignment Wizard|Area5]]). Having a read-permission means that you can see a list of assignments but you cannot go ahead and edit or create them. A write-permission on the other hand makes you eligible to edit and create assignments. Currently, the permission is only relevant for signal reader and Area5. &lt;br /&gt;
## &#039;&#039;&#039;Vehicle Profile&#039;&#039;&#039; See [[#Vehicle Profile permission]]&lt;br /&gt;
## &#039;&#039;&#039;WCU Task&#039;&#039;&#039; Controls if a user is permitted to create/see tasks of a specific type on a WCU. More what this means is discussed below in &amp;quot;Permission to specific tasks&amp;quot;&lt;br /&gt;
## &#039;&#039;&#039;WCU Configuration.&#039;&#039;&#039; This permission controls whether you are allowed to work with a WCU&#039;s configuration.&lt;br /&gt;
## &#039;&#039;&#039;WCU Module&#039;&#039;&#039;. The permission controls the access to individual module configurations on a WCU. An example of a module is Signal reader.&lt;br /&gt;
## &#039;&#039;&#039;WCU Monitor&#039;&#039;&#039;. A task can have a monitor function to report data in real time. In order to see the real time data the user must have this permission.&lt;br /&gt;
## &#039;&#039;&#039;WCU Plot route&#039;&#039;&#039;. To see a historic GPS track of a WCU a user must have this permission.&lt;br /&gt;
## &#039;&#039;&#039;WCU Position&#039;&#039;&#039;. Allows a user to see a WCU&#039;s current position.&lt;br /&gt;
## &#039;&#039;&#039;WCU Shelving&#039;&#039;&#039;. Allows a user to handle any shelving, unshelving and refurbishing of a WCU.&lt;br /&gt;
## &#039;&#039;&#039;WCU View&#039;&#039;&#039;. This permission applies to the Vehicles tab. It has to do with whether you are allowed to list a WCU in the table. Selecting this subtype makes the subtype type part unnecessary and therefore, it is removed if you choose this resource type.&lt;br /&gt;
##&#039;&#039;&#039;WCU Connect&#039;&#039;&#039;. Allows a user to connect a WCU to a vehicle.&lt;br /&gt;
##&#039;&#039;&#039;Vehicle Create&#039;&#039;&#039; See [[Roles and permissions#Vehicle Create permission|#Vehicle Create permissions]]&lt;br /&gt;
##&#039;&#039;&#039;Resource Group Manage&#039;&#039;&#039; See [[#Resource Group Manage permission]]&lt;br /&gt;
##&#039;&#039;&#039;Resource Group Create&#039;&#039;&#039; See [[#Resource Group Create permission]]&lt;br /&gt;
##&#039;&#039;&#039;View Inactive WCU&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to view inactive WCUs.&lt;br /&gt;
##&#039;&#039;&#039;View Inactive Vehicle&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to view inactive vehicles.&lt;br /&gt;
##&#039;&#039;&#039;Vehicle Edit&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to edit vehicles.&lt;br /&gt;
# Choosing if the permission should be a read and/or write permission. One of these have to be selected or you will not be able to save changes.&lt;br /&gt;
# Selecting which resources that apply to the permission. The selection is made using the two tables you see in Figure &amp;quot;Editing Task Permissions&amp;quot;. To select a resource, which can be a resource group, you enter the name of the resource in the left table filter area. As you type, the table is automatically filled with resources matching the criteria. If a resource is part of a resource group the icon to the left is shown. If you hold the mouse over the resource name you will see which resource group it is part of. If you instead see the icon shown to the left, the resource is a resource group. Holding the mouse over the entry will show you which resources are part of the resource group. To select a resource, drag it over to the right table or select the resource and then press the right-arrow. To deselect a resource, drag it to the left table or press the left-arrow. There is a “Select all” option. It selects all current and future resources to which this permission should be applied. [[File:Labels in permissions1.png|thumb|Select resources by labels]][[File:Permission label2.png|thumb|Resource selected by label]]From version 2.93 of the WICE portal it is also possible to let labels select the resources that will be part of the permission. When a label is selected as in the screenshot to the right, the WCUs which are currently associated with the label are added to the set of selected resources. Multiple labels can also be used to either collect more resources or narrow down the resources depending on the chosen relation between the labels.  After the permission has been saved, any additional resources which get associated with the labels used in the permission will automatically be added to the permission. Since these labels now controls one or many permissions, only the users with the role admin can add or remove the labels from resources as long as they are part of any permission.&lt;br /&gt;
# Set what type of tasks the permission applies to. It is automatically set to have all selected but you can unselect all and selecting other tasks. This option is only available on the &#039;&#039;&#039;WCU task&#039;&#039;&#039;, &#039;&#039;&#039;assignment&#039;&#039;&#039; &#039;&#039;&#039;creator,&#039;&#039;&#039; &#039;&#039;&#039;monitor&#039;&#039;&#039; and &#039;&#039;&#039;module&#039;&#039;&#039; permissions. It corresponds to the set of available modules for a WCU.&lt;br /&gt;
When you are done press &amp;quot;Save changes&amp;quot; or &amp;quot;Reset changes&amp;quot; if you want to revert the changes. You can always edit the permission by selecting it in the table. The dialog described above will show  and you can make your changes, except that you can not change what type of task it is.&lt;br /&gt;
&lt;br /&gt;
==== Assignment Creator permission ====&lt;br /&gt;
This permission concerns the [[Signal Reader Assignment Editor|signal reader assignment editor]]. If you give the user a read permission they can look at already created assignments. If you give a user the write permission they will also be able to create and delete assignments.&lt;br /&gt;
&lt;br /&gt;
==== Vehicle Profile permission ====&lt;br /&gt;
With this permission you can delegate to individual users the possibility to view vehicle profiles if given the read permission. This makes the tab visible in the GUI but all buttons concerning editing/adding/removing are disabled. If a user has the write permission as well, the user will be able to edit/add and remove vehicle profiles. &lt;br /&gt;
&lt;br /&gt;
==== Vehicle Create permission ====&lt;br /&gt;
This permission enables a user to do [[The Portal Administrator View#Add Vehicle Dialog|Add Vehicle]]. This will also let a user view any disconnected vehicles in the vehicles tab.&lt;br /&gt;
&lt;br /&gt;
==== Resource Group Manage permission ====&lt;br /&gt;
This permission enables a user to [[The Portal Administrator View#Resource Groups|manage resource groups]]. Managing resource groups entails adding and removing WCUs from groups, editing groups, and removing groups. It will also enable access to the Resource groups panel.&lt;br /&gt;
&lt;br /&gt;
==== Resource Group Create permission ====&lt;br /&gt;
This permission enables a user to create resource groups by pressing Add New in the Resource groups panel of the Administration tab. It will also enable access to the Resource groups panel. Any permissions that may be needed to initially manage or edit the created resource group will be added to a role specific to the creator upon creating the group.&lt;br /&gt;
&lt;br /&gt;
=== Selecting resources using uploaded file ===&lt;br /&gt;
As described above, you can select resources in the select resources widget. In addition to this, you can upload a file containing the vehicles or WCUs that you would like to apply to a permission or a set of permissions. By pressing the button called &#039;Import vehicle file&#039; you will be presented with a dialog where you can upload a file containing multiple vehicles or WCUs. You can either upload an excel file or a CSV type of text file. What is important is that there is a header column saying what type of identifiers can be found in the file. Identifiers currently supported are: vin, plate or wcu. An example content of file (CSV):&lt;br /&gt;
&lt;br /&gt;
&amp;lt;kbd&amp;gt;&lt;br /&gt;
wcu&amp;lt;br&amp;gt;&lt;br /&gt;
04-1B-35-98&amp;lt;br&amp;gt;&lt;br /&gt;
90-80-AA&amp;lt;br&amp;gt;&lt;br /&gt;
&amp;lt;/kbd&amp;gt;&lt;br /&gt;
[[File:Import vehcile file-20210217-151236.png|thumb|Import a vehicle file for permission resource selection]]&lt;br /&gt;
Just by changing the heading to plate or vin you should reference such identifiers in the file. The dialog also presents the option to ignore resources not found and apply the changes for those found. The default is however to do nothing if any of the resources are not found. The checkbox &#039;Ignore unconnected vehicles&#039; is only applicable if you have plate or vin identifiers.&lt;br /&gt;
&lt;br /&gt;
If you have selected a permission in the permission table, the resources in the file will be applied to only the selected permission. If you have selected a role in the top leftmost table, the resources in the file will be applied to all permissions of the role.&lt;br /&gt;
&lt;br /&gt;
=== Changing a users roles and permissions ===&lt;br /&gt;
You can change a user&#039;s roles under in the edit user dialog if you press the button &amp;quot;Edit user roles&amp;quot;. The edit user dialog then gets extended as two boxes appear, a left one with available roles and a right one with current roles. In the left one you can search the role(s) you want and drag them to the right box or press the button pointing right. With the two buttons at the bottom corner(the paper and clipboard ones) you can copy the names of the roles and also insert the names of roles to add them.&lt;br /&gt;
&lt;br /&gt;
You can also change a users permission to view tasks in the tasks tab: By right-clicking the task(s) you want to change permissions for and hovering over &amp;quot;Permission&amp;quot; you will get the options &amp;quot;Show who can see task&amp;quot; and &amp;quot;Add who can see task&amp;quot;. &amp;quot;Show who can see task&amp;quot; will open a window with a left and a right box where the left contains users without permission to view the task and the right contains users who have permission. By moving users from the left to right and vice versa you can give or remove someones permission. You can also press the clipboard the the right bottom to copy the users who have permissions or add users by writing their name within parentheses. Users in the right box can be unselectable and that is if they have a role giving them the permission to view that task the only way to remove that is to remove that role from them. &amp;quot;Add who can see task&amp;quot; works the same way as &amp;quot;Show who can see task&amp;quot; except that the right box does not show users with permission so you can not remove permissions, this is so that with add you can add permissions for many tasks at the same time as the show can not show users from many tasks.&lt;br /&gt;
&lt;br /&gt;
[[File:Copy user assignment permissions.png|thumb|300x300px|Copy User Task Permissions Dialog]]&lt;br /&gt;
&lt;br /&gt;
You can also edit a users role by searching for user(s) and right clicking on them to get a window with different options. There are five different options where the three first can be used on multiple users at the same time while the bottom two can not.&lt;br /&gt;
* &amp;quot;Add user task permissions to this user&amp;quot; will open the dialog shown in Figure &amp;quot;Copy User Task Permissions Dialog&amp;quot;. With this button you take a user&#039;s task permissions and add them to the selected user(s). You do this by searching and selecting a user and then pressing &amp;quot;OK&amp;quot;.&lt;br /&gt;
* &amp;quot;Replace user task permissions with user&amp;quot; will open a similar dialog to the one in Figure &amp;quot;Copy User task Permissions Dialog&amp;quot;. This button is much like the one before except that instead of adding permissions to the current user this replaces the permissions that the selected user(s) have. Here you also search the user whose permissions you want to replace the select them and press &amp;quot;OK&amp;quot;.&lt;br /&gt;
* &amp;quot;Copy user roles to this user&amp;quot; will open a similar dialog to Figure &amp;quot;Copy User Task Permissions Dialog&amp;quot;. Instead of replacing permissions, this dialog replaces selected user(s) roles with the roles of a user who you chose. Search the user whose roles you want to copy for replacement and press &amp;quot;OK&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
[[File:Give permission on car.png|thumb|Give Permission on Vehicle Dialog]]&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
* &amp;quot;Give this user permission to all tasks on vehicle&amp;quot; gives task permission on one or many vehicles. The dialog will look like the dialog in Figure &amp;quot;Give Permission on Vehicle Dialog&amp;quot;. In the left box you select vehicles and move them to the right to give permission on them, you can also as you see below the left box select a file with vehicles to easily select a set of vehicles. Then you select which types of tasks it should give permission to (leaving this empty will not give any permissions). You can also check the checkbox &amp;quot;Reset user permission&amp;quot; to replace the roles of the selected user instead of adding new to the current ones.&lt;br /&gt;
* &amp;quot;Give this user permission to all tasks on WCU&amp;quot; is identical to the previous button except that it applies to WCUs instead of vehicles.&lt;br /&gt;
&lt;br /&gt;
==== User specific roles ====&lt;br /&gt;
A role may also be set to be specific to just one user. Doing this will remove the role from any other users that currently have it as well as prevent adding the role to any other users but the specified user.&lt;br /&gt;
&lt;br /&gt;
=== Permission for specific tasks ===&lt;br /&gt;
The above text discuss permissions as they are found from the User panel. There are also a set of &amp;quot;implicit&amp;quot; permissions created when a new task is created, based on the task type permission discussed above. Let us elaborate a bit on this to make it clear what it means. The use case is as follows; a user has a read task permission on a WCU (&amp;quot;wcu:assignment:soh:read:awcu&amp;quot;). (Observe that a task permission might contain the word &amp;quot;assignment&amp;quot; even if it is referring to a task. Look at the menu names instead to confirm that you are working with a task.) Let us say that a new state-of-health task is created on the WCU (&amp;quot;&#039;&#039;awcu&#039;&#039;&amp;quot;) while the user has the above permission. Regardless of who created the task, the user will now be able to list this task in the Tasks panel and download any data produced. Later, as time goes by, the WCU is no longer used in the particular project and an administrator removes the permission &amp;quot;wcu:assignment:soh:read:awcu&amp;quot; from the user. When new tasks are created on this WCU our user above will not be able to see the new tasks created in the Tasks panel. However, the user will be able to see the previous task, i.e. when the user had the correct permission. Thus, this solution enables users to retain the permission to see historical tasks, let us call this a &#039;&#039;&#039;historical task permission&#039;&#039;&#039;. This type of permission cannot be seen in the permission panel. To see who has access to which &#039;&#039;&#039;historical task&#039;&#039;&#039; you must turn to the Task panel.&lt;br /&gt;
&lt;br /&gt;
[[File:Task-panel-permission.png|thumb|Permission Choices in the Tasks Panel]]&lt;br /&gt;
&lt;br /&gt;
As an administrator you have the possibility to both see and modify who has access to individual tasks. There are two options presented if you right-click an task in the Tasks panel. To the right you see the two choices available. The top choice is only available if you have selected a single row in the table. The bottom one is always available, also if electing multiple rows.&lt;br /&gt;
&lt;br /&gt;
==== Top selection &amp;quot;Show who can see task&amp;quot; ====&lt;br /&gt;
By selecting the top selection you will be presented with a dialog where on the left hand side you have all available users that do not have the permission to see the task. On the right hand side you have the users that have the permission to do so. On the right hand side you might see that some users are grayed. Those users have the &#039;&#039;task permission,&#039;&#039; not to be confused with the WCU task permission&#039;&#039;,&#039;&#039; described above. Also, the users visible are enabled, disabled users will not be displayed.&lt;br /&gt;
&lt;br /&gt;
[[File:Users-with-read-permission-tasks-panel.png|thumb|Users with Permission on a Specific Task]]&lt;br /&gt;
&lt;br /&gt;
To give a user the permission to see the task, simply move the user from the left side to the right side. This is accomplished by selecting one or more users and then click the right-arrow. Conversely, to remove a user from the permission select the users from the right side and click the left-arrow. At the top of the left side you can search for users by typing and as you go the users will be filtered to match what you type.&lt;br /&gt;
&lt;br /&gt;
In the picture &amp;quot;Users with Permission on a Specific Task&amp;quot; to the right you see the user &#039;serverTriggerUser&#039; which is an enabled user which do not yet have the permission to see the task.&lt;br /&gt;
&lt;br /&gt;
==== Bottom selection &amp;quot;Add who can see task&amp;quot; ====&lt;br /&gt;
The bottom selection from above &#039;Add who can see task&#039; will not list who already has access to the task, but rather just list all users available regardless whether they already have permission or not to the task.&lt;br /&gt;
&lt;br /&gt;
You can also give a user permission to all running tasks on WCUs whose task types that user has access to. See [[The Portal Administrator View#The New User Dialog|The new user dialog]] (the portal administrator view).&amp;lt;gallery&amp;gt;&lt;br /&gt;
&amp;lt;/gallery&amp;gt;&lt;br /&gt;
&lt;br /&gt;
==== Add permission to historical tasks on permission update ====&lt;br /&gt;
[[File:Add permission to existing tasks on permission update.png|thumb|Add permission to existing tasks on permission update]]&lt;br /&gt;
From version 2.98 of the WICE portal it is possible to give users access to existing tasks when updating the WCU Task permission. See screenshot &amp;quot;Add permission to existing tasks on permission update&amp;quot;. In &amp;quot;Apply updated permission&amp;quot; it is possible to select the desired task statuses (for example only running tasks, stopped tasks etc) to apply the permission update to. For some environments all, or a subset of, statuses are preselected as default values. When saving this permission with &amp;quot;Selected resources&amp;quot; checked, any existing task having the the desired statuses on the WCUs in the list of &#039;Selected resources&#039; will be accessible for the users with the current permission. This is the same as searching for the WCUs of interest in the Tasks tab and manually adding permissions to these tasks via &amp;quot;Show who can see task&amp;quot; discussed in [[#Top selection &amp;quot;Show who can see task&amp;quot;]].&lt;br /&gt;
&lt;br /&gt;
Note that applying updated permission to tasks always applies to all resources in &#039;Selected resources&#039; so it is not possible to a subset of the resources.&lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Remove permission to historical tasks on permission update&#039;&#039;&#039; ====&lt;br /&gt;
As discussed in [[Roles and permissions#Permission for specific tasks|Permission for specific tasks]] a user has access to a historical task on a WCU even if that WCU is removed from the WCU Task permission. To remove the permission for historical tasks one have to lists the tasks in the Tasks tab, use &amp;quot;Show who can see task&amp;quot; and remove the users manually. &lt;br /&gt;
[[File:Remove permission for existing tasks.png|thumb|Remove permission for existing tasks when updating a WCU Task permission]]&lt;br /&gt;
Similar to &amp;quot;Add permission to historical tasks on permission update&amp;quot; discussed above, this can from version 2.98 be done when updating a WCU Task permission. In the screenshot &amp;quot;Remove permission for existing tasks when updating a WCU Task permission&amp;quot; the WCU &amp;quot;johan4&amp;quot;is removed from the permission. In &amp;quot;Apply updated permission&amp;quot; &#039;Remove resources&amp;quot; is selected along with all existing Task statuses. This will remove access to any existing tasks on &#039;johan4&#039; for the users having the role the current permission is part of.  &lt;br /&gt;
&lt;br /&gt;
Like for &amp;quot;Add permission to historical tasks on permission update&amp;quot; the list of desired Tasks statuses might be preselected as default values. &lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Add permission to historical tasks when WCU is added to resource group&#039;&#039;&#039; ====&lt;br /&gt;
If a resource group is used in a WCU Task permission (WTP) (like the group &#039;johan1_grupp&#039; in the screenshots mentioned before) any resource part of the group is also included in the permission. When adding a new WCU to a group that is part of a WTP users will from version 2.98 have the option to give access to any existing tasks on the WCU when the WCU is added to the group. The logic is the same as when a WCU is added to a permission described in [[#Add permission to historical tasks on permission update]]. An example of this can be seen screenshot &amp;quot;Add WCU to group used in WCU Task permission&amp;quot; where all users having the mentioned role will be given access to any &#039;Pending&#039; or &#039;Running&#039; tasks matching the individual WCU Task permission defined in the role.  &lt;br /&gt;
&lt;br /&gt;
So in this case, if the role &#039;assignment_task&#039; defines a WTP with read access to SoH tasks and the WCU johan4 has a task of type SoH with the status Pending or Running, all users with the role &#039;assignment_task&#039; will be given access to these SoH tasks. &lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Remove permission to historical tasks when WCU is removed from resource group&#039;&#039;&#039; ====&lt;br /&gt;
Similar to when adding a WCU to a resource group used in a WCU Task permission (WTP) mentioned above, access to tasks on WCUs can be revoked when the WCUs are removed from the resource group. In the screenshot &amp;quot;Remove WCU from resource group used in WCU Task permission&amp;quot; a WCU is removed from the group &#039;johan1_grupp&#039; and all Tasks status types are selected which means that all access to any tasks on the WCU will be revoked for the users having the mentioned roles. &lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Add permission to historical tasks when WCU is associated with permission controlled label&#039;&#039;&#039; ====&lt;br /&gt;
[[File:Add WCU to group used in WCU Task permission.png|thumb|Add WCU to group used in WCU Task permission]]&lt;br /&gt;
[[File:Remove WCU from resource group used in WCU Task permission2.png|thumb|Remove WCU from resource group used in WCU Task permission]]&lt;br /&gt;
[[File:Add label used in WAP to WCU.png|thumb|Associate label used in WCU Task permission with a WCU]]&lt;br /&gt;
As mentioned in [[#Creating and editing roles and permissions]], labels can be used in permissions to define the resources that are part of the permission. So when association WCU with a label that is used in a permission the WCU is added to the permissions resources. When associating a label used in a WCU Task permission (WTP) with a WCU it is from version 2.98 possible to give users of the related roles access to any existing tasks on the WCU similar to when adding a WCU to resource group described in [[#Add permission to historical tasks when WCU is added to resource group]]. An example of this can be seen in screenshot &amp;quot;Associate label used in WCU Task permission with a WCU&amp;quot;. &lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Remove permission to historical tasks when permission controlled label is removed from WCU&#039;&#039;&#039; ====&lt;br /&gt;
TODO &lt;br /&gt;
&lt;br /&gt;
{{DEFAULTSORT:Rolas and Permissions}}&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=File:Add_label_used_in_WAP_to_WCU.png&amp;diff=4195</id>
		<title>File:Add label used in WAP to WCU.png</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=File:Add_label_used_in_WAP_to_WCU.png&amp;diff=4195"/>
		<updated>2026-05-20T13:47:51Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;Add label used in WAP to WCU&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=Roles_and_permissions&amp;diff=4194</id>
		<title>Roles and permissions</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=Roles_and_permissions&amp;diff=4194"/>
		<updated>2026-05-20T13:25:53Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: /* Bottom selection &amp;quot;Add who can see task&amp;quot; */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;includeonly&amp;gt;====Roles and permissions====&amp;lt;/includeonly&amp;gt;&lt;br /&gt;
In order to restrict access to resources and functions in the portal, there is a framework using roles and permissions. Permissions are given on a set of resources. These permissions are grouped into roles, and roles are then attached to one or several users to be granted specific permissions.&lt;br /&gt;
&lt;br /&gt;
The “Edit roles and permission” dialog can be seen in Figure &amp;quot;Edit Roles and Permissions Dialog&amp;quot;. It consists of three tables. The top left table holds a list of the roles, the top right holds the user(s) for the selected role and the bottom one hold the selected role&#039;s permissions. Their size is adjustable and you can minimize them by clicking on the line between them.&lt;br /&gt;
[[File:Roles and permissions panel-20210217-144811.png|left|thumb|400x400px|Edit Roles and Permissions Dialog]]&lt;br /&gt;
&amp;lt;br clear=&amp;quot;all&amp;quot;&amp;gt;&lt;br /&gt;
You add a new role by pressing the button “Add role” and delete a role along with its permissions by pressing the red button next to it. When making a role you add a description and unique name. To edit an already existing role, double click the entry you wish to edit.&lt;br /&gt;
&lt;br /&gt;
When you select a role in the top left table, the lower table shows that specific role&#039;s permissions and the upper right table shows which users have that role. The permissions table consists of two columns, a string that is the actual permission and the set of resources that apply to that permission. &lt;br /&gt;
&lt;br /&gt;
=== Creating and editing roles and permissions ===&lt;br /&gt;
&lt;br /&gt;
[[File:Add permission.png|thumb|Creating New Permission]]&lt;br /&gt;
&lt;br /&gt;
To create a new permission press the “Add permission” button. It opens the following interaction depicted in Figure &amp;quot;Creating New Permission&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
[[File:Editing permissions.png|thumb|400x400px|Editing Task Permissions]]&lt;br /&gt;
&lt;br /&gt;
# Select what kind of permission you want. There are a number of different permissions, ten for WCUs and one to give permission to all tasks (the task permission can not be modified). The permissions are:&lt;br /&gt;
## &#039;&#039;&#039;Task&#039;&#039;&#039;. A special permission which is used to give users access to every existing task in the system. Typically only used for admins.&lt;br /&gt;
## &#039;&#039;&#039;Assignment Creator&#039;&#039;&#039;. This permission handles access to creating/editing/viewing assignments in the tab Assignment (see [[Signal Reader Assignment Wizard|signal reader]] and [[Area5 Assignment Wizard|Area5]]). Having a read-permission means that you can see a list of assignments but you cannot go ahead and edit or create them. A write-permission on the other hand makes you eligible to edit and create assignments. Currently, the permission is only relevant for signal reader and Area5. &lt;br /&gt;
## &#039;&#039;&#039;Vehicle Profile&#039;&#039;&#039; See [[#Vehicle Profile permission]]&lt;br /&gt;
## &#039;&#039;&#039;WCU Task&#039;&#039;&#039; Controls if a user is permitted to create/see tasks of a specific type on a WCU. More what this means is discussed below in &amp;quot;Permission to specific tasks&amp;quot;&lt;br /&gt;
## &#039;&#039;&#039;WCU Configuration.&#039;&#039;&#039; This permission controls whether you are allowed to work with a WCU&#039;s configuration.&lt;br /&gt;
## &#039;&#039;&#039;WCU Module&#039;&#039;&#039;. The permission controls the access to individual module configurations on a WCU. An example of a module is Signal reader.&lt;br /&gt;
## &#039;&#039;&#039;WCU Monitor&#039;&#039;&#039;. A task can have a monitor function to report data in real time. In order to see the real time data the user must have this permission.&lt;br /&gt;
## &#039;&#039;&#039;WCU Plot route&#039;&#039;&#039;. To see a historic GPS track of a WCU a user must have this permission.&lt;br /&gt;
## &#039;&#039;&#039;WCU Position&#039;&#039;&#039;. Allows a user to see a WCU&#039;s current position.&lt;br /&gt;
## &#039;&#039;&#039;WCU Shelving&#039;&#039;&#039;. Allows a user to handle any shelving, unshelving and refurbishing of a WCU.&lt;br /&gt;
## &#039;&#039;&#039;WCU View&#039;&#039;&#039;. This permission applies to the Vehicles tab. It has to do with whether you are allowed to list a WCU in the table. Selecting this subtype makes the subtype type part unnecessary and therefore, it is removed if you choose this resource type.&lt;br /&gt;
##&#039;&#039;&#039;WCU Connect&#039;&#039;&#039;. Allows a user to connect a WCU to a vehicle.&lt;br /&gt;
##&#039;&#039;&#039;Vehicle Create&#039;&#039;&#039; See [[Roles and permissions#Vehicle Create permission|#Vehicle Create permissions]]&lt;br /&gt;
##&#039;&#039;&#039;Resource Group Manage&#039;&#039;&#039; See [[#Resource Group Manage permission]]&lt;br /&gt;
##&#039;&#039;&#039;Resource Group Create&#039;&#039;&#039; See [[#Resource Group Create permission]]&lt;br /&gt;
##&#039;&#039;&#039;View Inactive WCU&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to view inactive WCUs.&lt;br /&gt;
##&#039;&#039;&#039;View Inactive Vehicle&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to view inactive vehicles.&lt;br /&gt;
##&#039;&#039;&#039;Vehicle Edit&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to edit vehicles.&lt;br /&gt;
# Choosing if the permission should be a read and/or write permission. One of these have to be selected or you will not be able to save changes.&lt;br /&gt;
# Selecting which resources that apply to the permission. The selection is made using the two tables you see in Figure &amp;quot;Editing Task Permissions&amp;quot;. To select a resource, which can be a resource group, you enter the name of the resource in the left table filter area. As you type, the table is automatically filled with resources matching the criteria. If a resource is part of a resource group the icon to the left is shown. If you hold the mouse over the resource name you will see which resource group it is part of. If you instead see the icon shown to the left, the resource is a resource group. Holding the mouse over the entry will show you which resources are part of the resource group. To select a resource, drag it over to the right table or select the resource and then press the right-arrow. To deselect a resource, drag it to the left table or press the left-arrow. There is a “Select all” option. It selects all current and future resources to which this permission should be applied. [[File:Labels in permissions1.png|thumb|Select resources by labels]][[File:Permission label2.png|thumb|Resource selected by label]]From version 2.93 of the WICE portal it is also possible to let labels select the resources that will be part of the permission. When a label is selected as in the screenshot to the right, the WCUs which are currently associated with the label are added to the set of selected resources. Multiple labels can also be used to either collect more resources or narrow down the resources depending on the chosen relation between the labels.  After the permission has been saved, any additional resources which get associated with the labels used in the permission will automatically be added to the permission. Since these labels now controls one or many permissions, only the users with the role admin can add or remove the labels from resources as long as they are part of any permission.&lt;br /&gt;
# Set what type of tasks the permission applies to. It is automatically set to have all selected but you can unselect all and selecting other tasks. This option is only available on the &#039;&#039;&#039;WCU task&#039;&#039;&#039;, &#039;&#039;&#039;assignment&#039;&#039;&#039; &#039;&#039;&#039;creator,&#039;&#039;&#039; &#039;&#039;&#039;monitor&#039;&#039;&#039; and &#039;&#039;&#039;module&#039;&#039;&#039; permissions. It corresponds to the set of available modules for a WCU.&lt;br /&gt;
When you are done press &amp;quot;Save changes&amp;quot; or &amp;quot;Reset changes&amp;quot; if you want to revert the changes. You can always edit the permission by selecting it in the table. The dialog described above will show  and you can make your changes, except that you can not change what type of task it is.&lt;br /&gt;
&lt;br /&gt;
==== Assignment Creator permission ====&lt;br /&gt;
This permission concerns the [[Signal Reader Assignment Editor|signal reader assignment editor]]. If you give the user a read permission they can look at already created assignments. If you give a user the write permission they will also be able to create and delete assignments.&lt;br /&gt;
&lt;br /&gt;
==== Vehicle Profile permission ====&lt;br /&gt;
With this permission you can delegate to individual users the possibility to view vehicle profiles if given the read permission. This makes the tab visible in the GUI but all buttons concerning editing/adding/removing are disabled. If a user has the write permission as well, the user will be able to edit/add and remove vehicle profiles. &lt;br /&gt;
&lt;br /&gt;
==== Vehicle Create permission ====&lt;br /&gt;
This permission enables a user to do [[The Portal Administrator View#Add Vehicle Dialog|Add Vehicle]]. This will also let a user view any disconnected vehicles in the vehicles tab.&lt;br /&gt;
&lt;br /&gt;
==== Resource Group Manage permission ====&lt;br /&gt;
This permission enables a user to [[The Portal Administrator View#Resource Groups|manage resource groups]]. Managing resource groups entails adding and removing WCUs from groups, editing groups, and removing groups. It will also enable access to the Resource groups panel.&lt;br /&gt;
&lt;br /&gt;
==== Resource Group Create permission ====&lt;br /&gt;
This permission enables a user to create resource groups by pressing Add New in the Resource groups panel of the Administration tab. It will also enable access to the Resource groups panel. Any permissions that may be needed to initially manage or edit the created resource group will be added to a role specific to the creator upon creating the group.&lt;br /&gt;
&lt;br /&gt;
=== Selecting resources using uploaded file ===&lt;br /&gt;
As described above, you can select resources in the select resources widget. In addition to this, you can upload a file containing the vehicles or WCUs that you would like to apply to a permission or a set of permissions. By pressing the button called &#039;Import vehicle file&#039; you will be presented with a dialog where you can upload a file containing multiple vehicles or WCUs. You can either upload an excel file or a CSV type of text file. What is important is that there is a header column saying what type of identifiers can be found in the file. Identifiers currently supported are: vin, plate or wcu. An example content of file (CSV):&lt;br /&gt;
&lt;br /&gt;
&amp;lt;kbd&amp;gt;&lt;br /&gt;
wcu&amp;lt;br&amp;gt;&lt;br /&gt;
04-1B-35-98&amp;lt;br&amp;gt;&lt;br /&gt;
90-80-AA&amp;lt;br&amp;gt;&lt;br /&gt;
&amp;lt;/kbd&amp;gt;&lt;br /&gt;
[[File:Import vehcile file-20210217-151236.png|thumb|Import a vehicle file for permission resource selection]]&lt;br /&gt;
Just by changing the heading to plate or vin you should reference such identifiers in the file. The dialog also presents the option to ignore resources not found and apply the changes for those found. The default is however to do nothing if any of the resources are not found. The checkbox &#039;Ignore unconnected vehicles&#039; is only applicable if you have plate or vin identifiers.&lt;br /&gt;
&lt;br /&gt;
If you have selected a permission in the permission table, the resources in the file will be applied to only the selected permission. If you have selected a role in the top leftmost table, the resources in the file will be applied to all permissions of the role.&lt;br /&gt;
&lt;br /&gt;
=== Changing a users roles and permissions ===&lt;br /&gt;
You can change a user&#039;s roles under in the edit user dialog if you press the button &amp;quot;Edit user roles&amp;quot;. The edit user dialog then gets extended as two boxes appear, a left one with available roles and a right one with current roles. In the left one you can search the role(s) you want and drag them to the right box or press the button pointing right. With the two buttons at the bottom corner(the paper and clipboard ones) you can copy the names of the roles and also insert the names of roles to add them.&lt;br /&gt;
&lt;br /&gt;
You can also change a users permission to view tasks in the tasks tab: By right-clicking the task(s) you want to change permissions for and hovering over &amp;quot;Permission&amp;quot; you will get the options &amp;quot;Show who can see task&amp;quot; and &amp;quot;Add who can see task&amp;quot;. &amp;quot;Show who can see task&amp;quot; will open a window with a left and a right box where the left contains users without permission to view the task and the right contains users who have permission. By moving users from the left to right and vice versa you can give or remove someones permission. You can also press the clipboard the the right bottom to copy the users who have permissions or add users by writing their name within parentheses. Users in the right box can be unselectable and that is if they have a role giving them the permission to view that task the only way to remove that is to remove that role from them. &amp;quot;Add who can see task&amp;quot; works the same way as &amp;quot;Show who can see task&amp;quot; except that the right box does not show users with permission so you can not remove permissions, this is so that with add you can add permissions for many tasks at the same time as the show can not show users from many tasks.&lt;br /&gt;
&lt;br /&gt;
[[File:Copy user assignment permissions.png|thumb|300x300px|Copy User Task Permissions Dialog]]&lt;br /&gt;
&lt;br /&gt;
You can also edit a users role by searching for user(s) and right clicking on them to get a window with different options. There are five different options where the three first can be used on multiple users at the same time while the bottom two can not.&lt;br /&gt;
* &amp;quot;Add user task permissions to this user&amp;quot; will open the dialog shown in Figure &amp;quot;Copy User Task Permissions Dialog&amp;quot;. With this button you take a user&#039;s task permissions and add them to the selected user(s). You do this by searching and selecting a user and then pressing &amp;quot;OK&amp;quot;.&lt;br /&gt;
* &amp;quot;Replace user task permissions with user&amp;quot; will open a similar dialog to the one in Figure &amp;quot;Copy User task Permissions Dialog&amp;quot;. This button is much like the one before except that instead of adding permissions to the current user this replaces the permissions that the selected user(s) have. Here you also search the user whose permissions you want to replace the select them and press &amp;quot;OK&amp;quot;.&lt;br /&gt;
* &amp;quot;Copy user roles to this user&amp;quot; will open a similar dialog to Figure &amp;quot;Copy User Task Permissions Dialog&amp;quot;. Instead of replacing permissions, this dialog replaces selected user(s) roles with the roles of a user who you chose. Search the user whose roles you want to copy for replacement and press &amp;quot;OK&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
[[File:Give permission on car.png|thumb|Give Permission on Vehicle Dialog]]&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
* &amp;quot;Give this user permission to all tasks on vehicle&amp;quot; gives task permission on one or many vehicles. The dialog will look like the dialog in Figure &amp;quot;Give Permission on Vehicle Dialog&amp;quot;. In the left box you select vehicles and move them to the right to give permission on them, you can also as you see below the left box select a file with vehicles to easily select a set of vehicles. Then you select which types of tasks it should give permission to (leaving this empty will not give any permissions). You can also check the checkbox &amp;quot;Reset user permission&amp;quot; to replace the roles of the selected user instead of adding new to the current ones.&lt;br /&gt;
* &amp;quot;Give this user permission to all tasks on WCU&amp;quot; is identical to the previous button except that it applies to WCUs instead of vehicles.&lt;br /&gt;
&lt;br /&gt;
==== User specific roles ====&lt;br /&gt;
A role may also be set to be specific to just one user. Doing this will remove the role from any other users that currently have it as well as prevent adding the role to any other users but the specified user.&lt;br /&gt;
&lt;br /&gt;
=== Permission for specific tasks ===&lt;br /&gt;
The above text discuss permissions as they are found from the User panel. There are also a set of &amp;quot;implicit&amp;quot; permissions created when a new task is created, based on the task type permission discussed above. Let us elaborate a bit on this to make it clear what it means. The use case is as follows; a user has a read task permission on a WCU (&amp;quot;wcu:assignment:soh:read:awcu&amp;quot;). (Observe that a task permission might contain the word &amp;quot;assignment&amp;quot; even if it is referring to a task. Look at the menu names instead to confirm that you are working with a task.) Let us say that a new state-of-health task is created on the WCU (&amp;quot;&#039;&#039;awcu&#039;&#039;&amp;quot;) while the user has the above permission. Regardless of who created the task, the user will now be able to list this task in the Tasks panel and download any data produced. Later, as time goes by, the WCU is no longer used in the particular project and an administrator removes the permission &amp;quot;wcu:assignment:soh:read:awcu&amp;quot; from the user. When new tasks are created on this WCU our user above will not be able to see the new tasks created in the Tasks panel. However, the user will be able to see the previous task, i.e. when the user had the correct permission. Thus, this solution enables users to retain the permission to see historical tasks, let us call this a &#039;&#039;&#039;historical task permission&#039;&#039;&#039;. This type of permission cannot be seen in the permission panel. To see who has access to which &#039;&#039;&#039;historical task&#039;&#039;&#039; you must turn to the Task panel.&lt;br /&gt;
&lt;br /&gt;
[[File:Task-panel-permission.png|thumb|Permission Choices in the Tasks Panel]]&lt;br /&gt;
&lt;br /&gt;
As an administrator you have the possibility to both see and modify who has access to individual tasks. There are two options presented if you right-click an task in the Tasks panel. To the right you see the two choices available. The top choice is only available if you have selected a single row in the table. The bottom one is always available, also if electing multiple rows.&lt;br /&gt;
&lt;br /&gt;
==== Top selection &amp;quot;Show who can see task&amp;quot; ====&lt;br /&gt;
By selecting the top selection you will be presented with a dialog where on the left hand side you have all available users that do not have the permission to see the task. On the right hand side you have the users that have the permission to do so. On the right hand side you might see that some users are grayed. Those users have the &#039;&#039;task permission,&#039;&#039; not to be confused with the WCU task permission&#039;&#039;,&#039;&#039; described above. Also, the users visible are enabled, disabled users will not be displayed.&lt;br /&gt;
&lt;br /&gt;
[[File:Users-with-read-permission-tasks-panel.png|thumb|Users with Permission on a Specific Task]]&lt;br /&gt;
&lt;br /&gt;
To give a user the permission to see the task, simply move the user from the left side to the right side. This is accomplished by selecting one or more users and then click the right-arrow. Conversely, to remove a user from the permission select the users from the right side and click the left-arrow. At the top of the left side you can search for users by typing and as you go the users will be filtered to match what you type.&lt;br /&gt;
&lt;br /&gt;
In the picture &amp;quot;Users with Permission on a Specific Task&amp;quot; to the right you see the user &#039;serverTriggerUser&#039; which is an enabled user which do not yet have the permission to see the task.&lt;br /&gt;
&lt;br /&gt;
==== Bottom selection &amp;quot;Add who can see task&amp;quot; ====&lt;br /&gt;
The bottom selection from above &#039;Add who can see task&#039; will not list who already has access to the task, but rather just list all users available regardless whether they already have permission or not to the task.&lt;br /&gt;
&lt;br /&gt;
You can also give a user permission to all running tasks on WCUs whose task types that user has access to. See [[The Portal Administrator View#The New User Dialog|The new user dialog]] (the portal administrator view).&amp;lt;gallery&amp;gt;&lt;br /&gt;
&amp;lt;/gallery&amp;gt;&lt;br /&gt;
&lt;br /&gt;
==== Add permission to historical tasks on permission update ====&lt;br /&gt;
[[File:Add permission to existing tasks on permission update.png|thumb|Add permission to existing tasks on permission update]]&lt;br /&gt;
From version 2.98 of the WICE portal it is possible to give users access to existing tasks when updating the WCU Task permission. See screenshot &amp;quot;Add permission to existing tasks on permission update&amp;quot;. In &amp;quot;Apply updated permission&amp;quot; it is possible to select the desired task statuses (for example only running tasks, stopped tasks etc) to apply the permission update to. For some environments all, or a subset of, statuses are preselected as default values. When saving this permission with &amp;quot;Selected resources&amp;quot; checked, any existing task having the the desired statuses on the WCUs in the list of &#039;Selected resources&#039; will be accessible for the users with the current permission. This is the same as searching for the WCUs of interest in the Tasks tab and manually adding permissions to these tasks via &amp;quot;Show who can see task&amp;quot; discussed in [[#Top selection &amp;quot;Show who can see task&amp;quot;]].&lt;br /&gt;
&lt;br /&gt;
Note that applying updated permission to tasks always applies to all resources in &#039;Selected resources&#039; so it is not possible to a subset of the resources.&lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Remove permission to historical tasks on permission update&#039;&#039;&#039; ====&lt;br /&gt;
As discussed in [[Roles and permissions#Permission for specific tasks|Permission for specific tasks]] a user has access to a historical task on a WCU even if that WCU is removed from the WCU Task permission. To remove the permission for historical tasks one have to lists the tasks in the Tasks tab, use &amp;quot;Show who can see task&amp;quot; and remove the users manually. &lt;br /&gt;
[[File:Remove permission for existing tasks.png|thumb|Remove permission for existing tasks when updating a WCU Task permission]]&lt;br /&gt;
Similar to &amp;quot;Add permission to historical tasks on permission update&amp;quot; discussed above, this can from version 2.98 be done when updating a WCU Task permission. In the screenshot &amp;quot;Remove permission for existing tasks when updating a WCU Task permission&amp;quot; the WCU &amp;quot;johan4&amp;quot;is removed from the permission. In &amp;quot;Apply updated permission&amp;quot; &#039;Remove resources&amp;quot; is selected along with all existing Task statuses. This will remove access to any existing tasks on &#039;johan4&#039; for the users having the role the current permission is part of.  &lt;br /&gt;
&lt;br /&gt;
Like for &amp;quot;Add permission to historical tasks on permission update&amp;quot; the list of desired Tasks statuses might be preselected as default values. &lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Add permission to historical tasks when WCU is added to resource group&#039;&#039;&#039; ====&lt;br /&gt;
If a resource group is used in a WCU Task permission (WTP) (like the group &#039;johan1_grupp&#039; in the screenshots mentioned before) any resource part of the group is also included in the permission. When adding a new WCU to a group that is part of a WTP users will from version 2.98 have the option to give access to any existing tasks on the WCU when the WCU is added to the group. The logic is the same as when a WCU is added to a permission described in [[#Add permission to historical tasks on permission update]]. An example of this can be seen screenshot &amp;quot;Add WCU to group used in WCU Task permission&amp;quot; where all users having the mentioned role will be given access to any &#039;Pending&#039; or &#039;Running&#039; tasks matching the individual WCU Task permission defined in the role.  &lt;br /&gt;
&lt;br /&gt;
So in this case, if the role &#039;assignment_task&#039; defines a WTP with read access to SoH tasks and the WCU johan4 has a task of type SoH with the status Pending or Running, all users with the role &#039;assignment_task&#039; will be given access to these SoH tasks. &lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Remove permission to historical tasks when WCU is removed from resource group&#039;&#039;&#039; ====&lt;br /&gt;
Similar to when adding a WCU to a resource group used in a WCU Task permission (WTP) mentioned above, access to tasks on WCUs can be revoked when the WCUs are removed from the resource group. In the screenshot &amp;quot;Remove WCU from resource group used in WCU Task permission&amp;quot; a WCU is removed from the group &#039;johan1_grupp&#039; and all Tasks status types are selected which means that all access to any tasks on the WCU will be revoked for the users having the mentioned roles. &lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Add permission to historical tasks when WCU is associated with permission controlled label&#039;&#039;&#039; ====&lt;br /&gt;
[[File:Add WCU to group used in WCU Task permission.png|thumb|Add WCU to group used in WCU Task permission]]&lt;br /&gt;
[[File:Remove WCU from resource group used in WCU Task permission2.png|thumb|Remove WCU from resource group used in WCU Task permission]]&lt;br /&gt;
TODO &lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Remove permission to historical tasks when permission controlled label is removed from WCU&#039;&#039;&#039; ====&lt;br /&gt;
TODO &lt;br /&gt;
&lt;br /&gt;
{{DEFAULTSORT:Rolas and Permissions}}&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=File:Remove_WCU_from_resource_group_used_in_WCU_Task_permission2.png&amp;diff=4193</id>
		<title>File:Remove WCU from resource group used in WCU Task permission2.png</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=File:Remove_WCU_from_resource_group_used_in_WCU_Task_permission2.png&amp;diff=4193"/>
		<updated>2026-05-20T13:23:03Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;Remove WCU from resource group used in WCU Task permission&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=Roles_and_permissions&amp;diff=4192</id>
		<title>Roles and permissions</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=Roles_and_permissions&amp;diff=4192"/>
		<updated>2026-05-20T13:14:32Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: /* Permission for specific tasks */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;includeonly&amp;gt;====Roles and permissions====&amp;lt;/includeonly&amp;gt;&lt;br /&gt;
In order to restrict access to resources and functions in the portal, there is a framework using roles and permissions. Permissions are given on a set of resources. These permissions are grouped into roles, and roles are then attached to one or several users to be granted specific permissions.&lt;br /&gt;
&lt;br /&gt;
The “Edit roles and permission” dialog can be seen in Figure &amp;quot;Edit Roles and Permissions Dialog&amp;quot;. It consists of three tables. The top left table holds a list of the roles, the top right holds the user(s) for the selected role and the bottom one hold the selected role&#039;s permissions. Their size is adjustable and you can minimize them by clicking on the line between them.&lt;br /&gt;
[[File:Roles and permissions panel-20210217-144811.png|left|thumb|400x400px|Edit Roles and Permissions Dialog]]&lt;br /&gt;
&amp;lt;br clear=&amp;quot;all&amp;quot;&amp;gt;&lt;br /&gt;
You add a new role by pressing the button “Add role” and delete a role along with its permissions by pressing the red button next to it. When making a role you add a description and unique name. To edit an already existing role, double click the entry you wish to edit.&lt;br /&gt;
&lt;br /&gt;
When you select a role in the top left table, the lower table shows that specific role&#039;s permissions and the upper right table shows which users have that role. The permissions table consists of two columns, a string that is the actual permission and the set of resources that apply to that permission. &lt;br /&gt;
&lt;br /&gt;
=== Creating and editing roles and permissions ===&lt;br /&gt;
&lt;br /&gt;
[[File:Add permission.png|thumb|Creating New Permission]]&lt;br /&gt;
&lt;br /&gt;
To create a new permission press the “Add permission” button. It opens the following interaction depicted in Figure &amp;quot;Creating New Permission&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
[[File:Editing permissions.png|thumb|400x400px|Editing Task Permissions]]&lt;br /&gt;
&lt;br /&gt;
# Select what kind of permission you want. There are a number of different permissions, ten for WCUs and one to give permission to all tasks (the task permission can not be modified). The permissions are:&lt;br /&gt;
## &#039;&#039;&#039;Task&#039;&#039;&#039;. A special permission which is used to give users access to every existing task in the system. Typically only used for admins.&lt;br /&gt;
## &#039;&#039;&#039;Assignment Creator&#039;&#039;&#039;. This permission handles access to creating/editing/viewing assignments in the tab Assignment (see [[Signal Reader Assignment Wizard|signal reader]] and [[Area5 Assignment Wizard|Area5]]). Having a read-permission means that you can see a list of assignments but you cannot go ahead and edit or create them. A write-permission on the other hand makes you eligible to edit and create assignments. Currently, the permission is only relevant for signal reader and Area5. &lt;br /&gt;
## &#039;&#039;&#039;Vehicle Profile&#039;&#039;&#039; See [[#Vehicle Profile permission]]&lt;br /&gt;
## &#039;&#039;&#039;WCU Task&#039;&#039;&#039; Controls if a user is permitted to create/see tasks of a specific type on a WCU. More what this means is discussed below in &amp;quot;Permission to specific tasks&amp;quot;&lt;br /&gt;
## &#039;&#039;&#039;WCU Configuration.&#039;&#039;&#039; This permission controls whether you are allowed to work with a WCU&#039;s configuration.&lt;br /&gt;
## &#039;&#039;&#039;WCU Module&#039;&#039;&#039;. The permission controls the access to individual module configurations on a WCU. An example of a module is Signal reader.&lt;br /&gt;
## &#039;&#039;&#039;WCU Monitor&#039;&#039;&#039;. A task can have a monitor function to report data in real time. In order to see the real time data the user must have this permission.&lt;br /&gt;
## &#039;&#039;&#039;WCU Plot route&#039;&#039;&#039;. To see a historic GPS track of a WCU a user must have this permission.&lt;br /&gt;
## &#039;&#039;&#039;WCU Position&#039;&#039;&#039;. Allows a user to see a WCU&#039;s current position.&lt;br /&gt;
## &#039;&#039;&#039;WCU Shelving&#039;&#039;&#039;. Allows a user to handle any shelving, unshelving and refurbishing of a WCU.&lt;br /&gt;
## &#039;&#039;&#039;WCU View&#039;&#039;&#039;. This permission applies to the Vehicles tab. It has to do with whether you are allowed to list a WCU in the table. Selecting this subtype makes the subtype type part unnecessary and therefore, it is removed if you choose this resource type.&lt;br /&gt;
##&#039;&#039;&#039;WCU Connect&#039;&#039;&#039;. Allows a user to connect a WCU to a vehicle.&lt;br /&gt;
##&#039;&#039;&#039;Vehicle Create&#039;&#039;&#039; See [[Roles and permissions#Vehicle Create permission|#Vehicle Create permissions]]&lt;br /&gt;
##&#039;&#039;&#039;Resource Group Manage&#039;&#039;&#039; See [[#Resource Group Manage permission]]&lt;br /&gt;
##&#039;&#039;&#039;Resource Group Create&#039;&#039;&#039; See [[#Resource Group Create permission]]&lt;br /&gt;
##&#039;&#039;&#039;View Inactive WCU&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to view inactive WCUs.&lt;br /&gt;
##&#039;&#039;&#039;View Inactive Vehicle&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to view inactive vehicles.&lt;br /&gt;
##&#039;&#039;&#039;Vehicle Edit&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to edit vehicles.&lt;br /&gt;
# Choosing if the permission should be a read and/or write permission. One of these have to be selected or you will not be able to save changes.&lt;br /&gt;
# Selecting which resources that apply to the permission. The selection is made using the two tables you see in Figure &amp;quot;Editing Task Permissions&amp;quot;. To select a resource, which can be a resource group, you enter the name of the resource in the left table filter area. As you type, the table is automatically filled with resources matching the criteria. If a resource is part of a resource group the icon to the left is shown. If you hold the mouse over the resource name you will see which resource group it is part of. If you instead see the icon shown to the left, the resource is a resource group. Holding the mouse over the entry will show you which resources are part of the resource group. To select a resource, drag it over to the right table or select the resource and then press the right-arrow. To deselect a resource, drag it to the left table or press the left-arrow. There is a “Select all” option. It selects all current and future resources to which this permission should be applied. [[File:Labels in permissions1.png|thumb|Select resources by labels]][[File:Permission label2.png|thumb|Resource selected by label]]From version 2.93 of the WICE portal it is also possible to let labels select the resources that will be part of the permission. When a label is selected as in the screenshot to the right, the WCUs which are currently associated with the label are added to the set of selected resources. Multiple labels can also be used to either collect more resources or narrow down the resources depending on the chosen relation between the labels.  After the permission has been saved, any additional resources which get associated with the labels used in the permission will automatically be added to the permission. Since these labels now controls one or many permissions, only the users with the role admin can add or remove the labels from resources as long as they are part of any permission.&lt;br /&gt;
# Set what type of tasks the permission applies to. It is automatically set to have all selected but you can unselect all and selecting other tasks. This option is only available on the &#039;&#039;&#039;WCU task&#039;&#039;&#039;, &#039;&#039;&#039;assignment&#039;&#039;&#039; &#039;&#039;&#039;creator,&#039;&#039;&#039; &#039;&#039;&#039;monitor&#039;&#039;&#039; and &#039;&#039;&#039;module&#039;&#039;&#039; permissions. It corresponds to the set of available modules for a WCU.&lt;br /&gt;
When you are done press &amp;quot;Save changes&amp;quot; or &amp;quot;Reset changes&amp;quot; if you want to revert the changes. You can always edit the permission by selecting it in the table. The dialog described above will show  and you can make your changes, except that you can not change what type of task it is.&lt;br /&gt;
&lt;br /&gt;
==== Assignment Creator permission ====&lt;br /&gt;
This permission concerns the [[Signal Reader Assignment Editor|signal reader assignment editor]]. If you give the user a read permission they can look at already created assignments. If you give a user the write permission they will also be able to create and delete assignments.&lt;br /&gt;
&lt;br /&gt;
==== Vehicle Profile permission ====&lt;br /&gt;
With this permission you can delegate to individual users the possibility to view vehicle profiles if given the read permission. This makes the tab visible in the GUI but all buttons concerning editing/adding/removing are disabled. If a user has the write permission as well, the user will be able to edit/add and remove vehicle profiles. &lt;br /&gt;
&lt;br /&gt;
==== Vehicle Create permission ====&lt;br /&gt;
This permission enables a user to do [[The Portal Administrator View#Add Vehicle Dialog|Add Vehicle]]. This will also let a user view any disconnected vehicles in the vehicles tab.&lt;br /&gt;
&lt;br /&gt;
==== Resource Group Manage permission ====&lt;br /&gt;
This permission enables a user to [[The Portal Administrator View#Resource Groups|manage resource groups]]. Managing resource groups entails adding and removing WCUs from groups, editing groups, and removing groups. It will also enable access to the Resource groups panel.&lt;br /&gt;
&lt;br /&gt;
==== Resource Group Create permission ====&lt;br /&gt;
This permission enables a user to create resource groups by pressing Add New in the Resource groups panel of the Administration tab. It will also enable access to the Resource groups panel. Any permissions that may be needed to initially manage or edit the created resource group will be added to a role specific to the creator upon creating the group.&lt;br /&gt;
&lt;br /&gt;
=== Selecting resources using uploaded file ===&lt;br /&gt;
As described above, you can select resources in the select resources widget. In addition to this, you can upload a file containing the vehicles or WCUs that you would like to apply to a permission or a set of permissions. By pressing the button called &#039;Import vehicle file&#039; you will be presented with a dialog where you can upload a file containing multiple vehicles or WCUs. You can either upload an excel file or a CSV type of text file. What is important is that there is a header column saying what type of identifiers can be found in the file. Identifiers currently supported are: vin, plate or wcu. An example content of file (CSV):&lt;br /&gt;
&lt;br /&gt;
&amp;lt;kbd&amp;gt;&lt;br /&gt;
wcu&amp;lt;br&amp;gt;&lt;br /&gt;
04-1B-35-98&amp;lt;br&amp;gt;&lt;br /&gt;
90-80-AA&amp;lt;br&amp;gt;&lt;br /&gt;
&amp;lt;/kbd&amp;gt;&lt;br /&gt;
[[File:Import vehcile file-20210217-151236.png|thumb|Import a vehicle file for permission resource selection]]&lt;br /&gt;
Just by changing the heading to plate or vin you should reference such identifiers in the file. The dialog also presents the option to ignore resources not found and apply the changes for those found. The default is however to do nothing if any of the resources are not found. The checkbox &#039;Ignore unconnected vehicles&#039; is only applicable if you have plate or vin identifiers.&lt;br /&gt;
&lt;br /&gt;
If you have selected a permission in the permission table, the resources in the file will be applied to only the selected permission. If you have selected a role in the top leftmost table, the resources in the file will be applied to all permissions of the role.&lt;br /&gt;
&lt;br /&gt;
=== Changing a users roles and permissions ===&lt;br /&gt;
You can change a user&#039;s roles under in the edit user dialog if you press the button &amp;quot;Edit user roles&amp;quot;. The edit user dialog then gets extended as two boxes appear, a left one with available roles and a right one with current roles. In the left one you can search the role(s) you want and drag them to the right box or press the button pointing right. With the two buttons at the bottom corner(the paper and clipboard ones) you can copy the names of the roles and also insert the names of roles to add them.&lt;br /&gt;
&lt;br /&gt;
You can also change a users permission to view tasks in the tasks tab: By right-clicking the task(s) you want to change permissions for and hovering over &amp;quot;Permission&amp;quot; you will get the options &amp;quot;Show who can see task&amp;quot; and &amp;quot;Add who can see task&amp;quot;. &amp;quot;Show who can see task&amp;quot; will open a window with a left and a right box where the left contains users without permission to view the task and the right contains users who have permission. By moving users from the left to right and vice versa you can give or remove someones permission. You can also press the clipboard the the right bottom to copy the users who have permissions or add users by writing their name within parentheses. Users in the right box can be unselectable and that is if they have a role giving them the permission to view that task the only way to remove that is to remove that role from them. &amp;quot;Add who can see task&amp;quot; works the same way as &amp;quot;Show who can see task&amp;quot; except that the right box does not show users with permission so you can not remove permissions, this is so that with add you can add permissions for many tasks at the same time as the show can not show users from many tasks.&lt;br /&gt;
&lt;br /&gt;
[[File:Copy user assignment permissions.png|thumb|300x300px|Copy User Task Permissions Dialog]]&lt;br /&gt;
&lt;br /&gt;
You can also edit a users role by searching for user(s) and right clicking on them to get a window with different options. There are five different options where the three first can be used on multiple users at the same time while the bottom two can not.&lt;br /&gt;
* &amp;quot;Add user task permissions to this user&amp;quot; will open the dialog shown in Figure &amp;quot;Copy User Task Permissions Dialog&amp;quot;. With this button you take a user&#039;s task permissions and add them to the selected user(s). You do this by searching and selecting a user and then pressing &amp;quot;OK&amp;quot;.&lt;br /&gt;
* &amp;quot;Replace user task permissions with user&amp;quot; will open a similar dialog to the one in Figure &amp;quot;Copy User task Permissions Dialog&amp;quot;. This button is much like the one before except that instead of adding permissions to the current user this replaces the permissions that the selected user(s) have. Here you also search the user whose permissions you want to replace the select them and press &amp;quot;OK&amp;quot;.&lt;br /&gt;
* &amp;quot;Copy user roles to this user&amp;quot; will open a similar dialog to Figure &amp;quot;Copy User Task Permissions Dialog&amp;quot;. Instead of replacing permissions, this dialog replaces selected user(s) roles with the roles of a user who you chose. Search the user whose roles you want to copy for replacement and press &amp;quot;OK&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
[[File:Give permission on car.png|thumb|Give Permission on Vehicle Dialog]]&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
* &amp;quot;Give this user permission to all tasks on vehicle&amp;quot; gives task permission on one or many vehicles. The dialog will look like the dialog in Figure &amp;quot;Give Permission on Vehicle Dialog&amp;quot;. In the left box you select vehicles and move them to the right to give permission on them, you can also as you see below the left box select a file with vehicles to easily select a set of vehicles. Then you select which types of tasks it should give permission to (leaving this empty will not give any permissions). You can also check the checkbox &amp;quot;Reset user permission&amp;quot; to replace the roles of the selected user instead of adding new to the current ones.&lt;br /&gt;
* &amp;quot;Give this user permission to all tasks on WCU&amp;quot; is identical to the previous button except that it applies to WCUs instead of vehicles.&lt;br /&gt;
&lt;br /&gt;
==== User specific roles ====&lt;br /&gt;
A role may also be set to be specific to just one user. Doing this will remove the role from any other users that currently have it as well as prevent adding the role to any other users but the specified user.&lt;br /&gt;
&lt;br /&gt;
=== Permission for specific tasks ===&lt;br /&gt;
The above text discuss permissions as they are found from the User panel. There are also a set of &amp;quot;implicit&amp;quot; permissions created when a new task is created, based on the task type permission discussed above. Let us elaborate a bit on this to make it clear what it means. The use case is as follows; a user has a read task permission on a WCU (&amp;quot;wcu:assignment:soh:read:awcu&amp;quot;). (Observe that a task permission might contain the word &amp;quot;assignment&amp;quot; even if it is referring to a task. Look at the menu names instead to confirm that you are working with a task.) Let us say that a new state-of-health task is created on the WCU (&amp;quot;&#039;&#039;awcu&#039;&#039;&amp;quot;) while the user has the above permission. Regardless of who created the task, the user will now be able to list this task in the Tasks panel and download any data produced. Later, as time goes by, the WCU is no longer used in the particular project and an administrator removes the permission &amp;quot;wcu:assignment:soh:read:awcu&amp;quot; from the user. When new tasks are created on this WCU our user above will not be able to see the new tasks created in the Tasks panel. However, the user will be able to see the previous task, i.e. when the user had the correct permission. Thus, this solution enables users to retain the permission to see historical tasks, let us call this a &#039;&#039;&#039;historical task permission&#039;&#039;&#039;. This type of permission cannot be seen in the permission panel. To see who has access to which &#039;&#039;&#039;historical task&#039;&#039;&#039; you must turn to the Task panel.&lt;br /&gt;
&lt;br /&gt;
[[File:Task-panel-permission.png|thumb|Permission Choices in the Tasks Panel]]&lt;br /&gt;
&lt;br /&gt;
As an administrator you have the possibility to both see and modify who has access to individual tasks. There are two options presented if you right-click an task in the Tasks panel. To the right you see the two choices available. The top choice is only available if you have selected a single row in the table. The bottom one is always available, also if electing multiple rows.&lt;br /&gt;
&lt;br /&gt;
==== Top selection &amp;quot;Show who can see task&amp;quot; ====&lt;br /&gt;
By selecting the top selection you will be presented with a dialog where on the left hand side you have all available users that do not have the permission to see the task. On the right hand side you have the users that have the permission to do so. On the right hand side you might see that some users are grayed. Those users have the &#039;&#039;task permission,&#039;&#039; not to be confused with the WCU task permission&#039;&#039;,&#039;&#039; described above. Also, the users visible are enabled, disabled users will not be displayed.&lt;br /&gt;
&lt;br /&gt;
[[File:Users-with-read-permission-tasks-panel.png|thumb|Users with Permission on a Specific Task]]&lt;br /&gt;
&lt;br /&gt;
To give a user the permission to see the task, simply move the user from the left side to the right side. This is accomplished by selecting one or more users and then click the right-arrow. Conversely, to remove a user from the permission select the users from the right side and click the left-arrow. At the top of the left side you can search for users by typing and as you go the users will be filtered to match what you type.&lt;br /&gt;
&lt;br /&gt;
In the picture &amp;quot;Users with Permission on a Specific Task&amp;quot; to the right you see the user &#039;serverTriggerUser&#039; which is an enabled user which do not yet have the permission to see the task.&lt;br /&gt;
&lt;br /&gt;
==== Bottom selection &amp;quot;Add who can see task&amp;quot; ====&lt;br /&gt;
The bottom selection from above &#039;Add who can see task&#039; will not list who already has access to the task, but rather just list all users available regardless whether they already have permission or not to the task.&lt;br /&gt;
&lt;br /&gt;
You can also give a user permission to all running tasks on WCUs whose task types that user has access to. See [[The Portal Administrator View#The New User Dialog|The new user dialog]] (the portal administrator view).&amp;lt;gallery&amp;gt;&lt;br /&gt;
File:Add permission to existing tasks on permission update.png&lt;br /&gt;
File:Remove permission for existing tasks.png|TODO&lt;br /&gt;
File:Add WCU to group used in WCU Task permission.png&lt;br /&gt;
File:Remove WCU from resource group used in WCU Task permission.png&lt;br /&gt;
&amp;lt;/gallery&amp;gt;&lt;br /&gt;
&lt;br /&gt;
==== Add permission to historical tasks on permission update ====&lt;br /&gt;
[[File:Add permission to existing tasks on permission update.png|thumb|Add permission to existing tasks on permission update]]&lt;br /&gt;
From version 2.98 of the WICE portal it is possible to give users access to existing tasks when updating the WCU Task permission. See screenshot &amp;quot;Add permission to existing tasks on permission update&amp;quot;. In &amp;quot;Apply updated permission&amp;quot; it is possible to select the desired task statuses (for example only running tasks, stopped tasks etc) to apply the permission update to. For some environments all, or a subset of, statuses are preselected as default values. When saving this permission with &amp;quot;Selected resources&amp;quot; checked, any existing task having the the desired statuses on the WCUs in the list of &#039;Selected resources&#039; will be accessible for the users with the current permission. This is the same as searching for the WCUs of interest in the Tasks tab and manually adding permissions to these tasks via &amp;quot;Show who can see task&amp;quot; discussed in [[#Top selection &amp;quot;Show who can see task&amp;quot;]].&lt;br /&gt;
&lt;br /&gt;
Note that applying updated permission to tasks always applies to all resources in &#039;Selected resources&#039; so it is not possible to a subset of the resources.&lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Remove permission to historical tasks on permission update&#039;&#039;&#039; ====&lt;br /&gt;
As discussed in [[Roles and permissions#Permission for specific tasks|Permission for specific tasks]] a user has access to a historical task on a WCU even if that WCU is removed from the WCU Task permission. To remove the permission for historical tasks one have to lists the tasks in the Tasks tab, use &amp;quot;Show who can see task&amp;quot; and remove the users manually. &lt;br /&gt;
[[File:Remove permission for existing tasks.png|thumb|Remove permission for existing tasks when updating a WCU Task permission]]&lt;br /&gt;
Similar to &amp;quot;Add permission to historical tasks on permission update&amp;quot; discussed above, this can from version 2.98 be done when updating a WCU Task permission. In the screenshot &amp;quot;Remove permission for existing tasks when updating a WCU Task permission&amp;quot; the WCU &amp;quot;johan4&amp;quot;is removed from the permission. In &amp;quot;Apply updated permission&amp;quot; &#039;Remove resources&amp;quot; is selected along with all existing Task statuses. This will remove access to any existing tasks on &#039;johan4&#039; for the users having the role the current permission is part of.  &lt;br /&gt;
&lt;br /&gt;
Like for &amp;quot;Add permission to historical tasks on permission update&amp;quot; the list of desired Tasks statuses might be preselected as default values. &lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Add permission to historical tasks when WCU is added to resource group&#039;&#039;&#039; ====&lt;br /&gt;
If a resource group is used in a WCU Task permission (WTP) (like the group &#039;johan1_grupp&#039; in the screenshots mentioned before) any resource part of the group is also included in the permission. When adding a new WCU to a group that is part of a WTP users will from version 2.98 have the option to give access to any existing tasks on the WCU when the WCU is added to the group. The logic is the same as when a WCU is added to a permission described in [[#Add permission to historical tasks on permission update]]. An example of this can be seen screenshot &amp;quot;Add WCU to group used in WCU Task permission&amp;quot; where all users having the mentioned role will be given access to any &#039;Pending&#039; or &#039;Running&#039; tasks matching the individual WCU Task permission defined in the role.  &lt;br /&gt;
&lt;br /&gt;
So in this case, if the role &#039;assignment_task&#039; defines a WTP with read access to SoH tasks and the WCU johan4 has a task of type SoH with the status Pending or Running, all users with the role &#039;assignment_task&#039; will be given access to these SoH tasks. &lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Remove permission to historical tasks when WCU is removed from resource group&#039;&#039;&#039; ====&lt;br /&gt;
TODO &lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Add permission to historical tasks when WCU is associated with permission controlled label&#039;&#039;&#039; ====&lt;br /&gt;
[[File:Add WCU to group used in WCU Task permission.png|thumb|Add WCU to group used in WCU Task permission]]&lt;br /&gt;
[[File:Remove WCU from resource group used in WCU Task permission.png|thumb|Remove WCU from resource group used in WCU Task permission]]&lt;br /&gt;
TODO &lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Remove permission to historical tasks when permission controlled label is removed from WCU&#039;&#039;&#039; ====&lt;br /&gt;
TODO &lt;br /&gt;
&lt;br /&gt;
{{DEFAULTSORT:Rolas and Permissions}}&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=File:Remove_WCU_from_resource_group_used_in_WCU_Task_permission.png&amp;diff=4191</id>
		<title>File:Remove WCU from resource group used in WCU Task permission.png</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=File:Remove_WCU_from_resource_group_used_in_WCU_Task_permission.png&amp;diff=4191"/>
		<updated>2026-05-20T13:12:18Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;Remove WCU from resource group used in WCU Task permission&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=Roles_and_permissions&amp;diff=4190</id>
		<title>Roles and permissions</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=Roles_and_permissions&amp;diff=4190"/>
		<updated>2026-05-20T13:10:21Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: /* Add permission to historical tasks when WCU is added to resource group */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;includeonly&amp;gt;====Roles and permissions====&amp;lt;/includeonly&amp;gt;&lt;br /&gt;
In order to restrict access to resources and functions in the portal, there is a framework using roles and permissions. Permissions are given on a set of resources. These permissions are grouped into roles, and roles are then attached to one or several users to be granted specific permissions.&lt;br /&gt;
&lt;br /&gt;
The “Edit roles and permission” dialog can be seen in Figure &amp;quot;Edit Roles and Permissions Dialog&amp;quot;. It consists of three tables. The top left table holds a list of the roles, the top right holds the user(s) for the selected role and the bottom one hold the selected role&#039;s permissions. Their size is adjustable and you can minimize them by clicking on the line between them.&lt;br /&gt;
[[File:Roles and permissions panel-20210217-144811.png|left|thumb|400x400px|Edit Roles and Permissions Dialog]]&lt;br /&gt;
&amp;lt;br clear=&amp;quot;all&amp;quot;&amp;gt;&lt;br /&gt;
You add a new role by pressing the button “Add role” and delete a role along with its permissions by pressing the red button next to it. When making a role you add a description and unique name. To edit an already existing role, double click the entry you wish to edit.&lt;br /&gt;
&lt;br /&gt;
When you select a role in the top left table, the lower table shows that specific role&#039;s permissions and the upper right table shows which users have that role. The permissions table consists of two columns, a string that is the actual permission and the set of resources that apply to that permission. &lt;br /&gt;
&lt;br /&gt;
=== Creating and editing roles and permissions ===&lt;br /&gt;
&lt;br /&gt;
[[File:Add permission.png|thumb|Creating New Permission]]&lt;br /&gt;
&lt;br /&gt;
To create a new permission press the “Add permission” button. It opens the following interaction depicted in Figure &amp;quot;Creating New Permission&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
[[File:Editing permissions.png|thumb|400x400px|Editing Task Permissions]]&lt;br /&gt;
&lt;br /&gt;
# Select what kind of permission you want. There are a number of different permissions, ten for WCUs and one to give permission to all tasks (the task permission can not be modified). The permissions are:&lt;br /&gt;
## &#039;&#039;&#039;Task&#039;&#039;&#039;. A special permission which is used to give users access to every existing task in the system. Typically only used for admins.&lt;br /&gt;
## &#039;&#039;&#039;Assignment Creator&#039;&#039;&#039;. This permission handles access to creating/editing/viewing assignments in the tab Assignment (see [[Signal Reader Assignment Wizard|signal reader]] and [[Area5 Assignment Wizard|Area5]]). Having a read-permission means that you can see a list of assignments but you cannot go ahead and edit or create them. A write-permission on the other hand makes you eligible to edit and create assignments. Currently, the permission is only relevant for signal reader and Area5. &lt;br /&gt;
## &#039;&#039;&#039;Vehicle Profile&#039;&#039;&#039; See [[#Vehicle Profile permission]]&lt;br /&gt;
## &#039;&#039;&#039;WCU Task&#039;&#039;&#039; Controls if a user is permitted to create/see tasks of a specific type on a WCU. More what this means is discussed below in &amp;quot;Permission to specific tasks&amp;quot;&lt;br /&gt;
## &#039;&#039;&#039;WCU Configuration.&#039;&#039;&#039; This permission controls whether you are allowed to work with a WCU&#039;s configuration.&lt;br /&gt;
## &#039;&#039;&#039;WCU Module&#039;&#039;&#039;. The permission controls the access to individual module configurations on a WCU. An example of a module is Signal reader.&lt;br /&gt;
## &#039;&#039;&#039;WCU Monitor&#039;&#039;&#039;. A task can have a monitor function to report data in real time. In order to see the real time data the user must have this permission.&lt;br /&gt;
## &#039;&#039;&#039;WCU Plot route&#039;&#039;&#039;. To see a historic GPS track of a WCU a user must have this permission.&lt;br /&gt;
## &#039;&#039;&#039;WCU Position&#039;&#039;&#039;. Allows a user to see a WCU&#039;s current position.&lt;br /&gt;
## &#039;&#039;&#039;WCU Shelving&#039;&#039;&#039;. Allows a user to handle any shelving, unshelving and refurbishing of a WCU.&lt;br /&gt;
## &#039;&#039;&#039;WCU View&#039;&#039;&#039;. This permission applies to the Vehicles tab. It has to do with whether you are allowed to list a WCU in the table. Selecting this subtype makes the subtype type part unnecessary and therefore, it is removed if you choose this resource type.&lt;br /&gt;
##&#039;&#039;&#039;WCU Connect&#039;&#039;&#039;. Allows a user to connect a WCU to a vehicle.&lt;br /&gt;
##&#039;&#039;&#039;Vehicle Create&#039;&#039;&#039; See [[Roles and permissions#Vehicle Create permission|#Vehicle Create permissions]]&lt;br /&gt;
##&#039;&#039;&#039;Resource Group Manage&#039;&#039;&#039; See [[#Resource Group Manage permission]]&lt;br /&gt;
##&#039;&#039;&#039;Resource Group Create&#039;&#039;&#039; See [[#Resource Group Create permission]]&lt;br /&gt;
##&#039;&#039;&#039;View Inactive WCU&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to view inactive WCUs.&lt;br /&gt;
##&#039;&#039;&#039;View Inactive Vehicle&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to view inactive vehicles.&lt;br /&gt;
##&#039;&#039;&#039;Vehicle Edit&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to edit vehicles.&lt;br /&gt;
# Choosing if the permission should be a read and/or write permission. One of these have to be selected or you will not be able to save changes.&lt;br /&gt;
# Selecting which resources that apply to the permission. The selection is made using the two tables you see in Figure &amp;quot;Editing Task Permissions&amp;quot;. To select a resource, which can be a resource group, you enter the name of the resource in the left table filter area. As you type, the table is automatically filled with resources matching the criteria. If a resource is part of a resource group the icon to the left is shown. If you hold the mouse over the resource name you will see which resource group it is part of. If you instead see the icon shown to the left, the resource is a resource group. Holding the mouse over the entry will show you which resources are part of the resource group. To select a resource, drag it over to the right table or select the resource and then press the right-arrow. To deselect a resource, drag it to the left table or press the left-arrow. There is a “Select all” option. It selects all current and future resources to which this permission should be applied. [[File:Labels in permissions1.png|thumb|Select resources by labels]][[File:Permission label2.png|thumb|Resource selected by label]]From version 2.93 of the WICE portal it is also possible to let labels select the resources that will be part of the permission. When a label is selected as in the screenshot to the right, the WCUs which are currently associated with the label are added to the set of selected resources. Multiple labels can also be used to either collect more resources or narrow down the resources depending on the chosen relation between the labels.  After the permission has been saved, any additional resources which get associated with the labels used in the permission will automatically be added to the permission. Since these labels now controls one or many permissions, only the users with the role admin can add or remove the labels from resources as long as they are part of any permission.&lt;br /&gt;
# Set what type of tasks the permission applies to. It is automatically set to have all selected but you can unselect all and selecting other tasks. This option is only available on the &#039;&#039;&#039;WCU task&#039;&#039;&#039;, &#039;&#039;&#039;assignment&#039;&#039;&#039; &#039;&#039;&#039;creator,&#039;&#039;&#039; &#039;&#039;&#039;monitor&#039;&#039;&#039; and &#039;&#039;&#039;module&#039;&#039;&#039; permissions. It corresponds to the set of available modules for a WCU.&lt;br /&gt;
When you are done press &amp;quot;Save changes&amp;quot; or &amp;quot;Reset changes&amp;quot; if you want to revert the changes. You can always edit the permission by selecting it in the table. The dialog described above will show  and you can make your changes, except that you can not change what type of task it is.&lt;br /&gt;
&lt;br /&gt;
==== Assignment Creator permission ====&lt;br /&gt;
This permission concerns the [[Signal Reader Assignment Editor|signal reader assignment editor]]. If you give the user a read permission they can look at already created assignments. If you give a user the write permission they will also be able to create and delete assignments.&lt;br /&gt;
&lt;br /&gt;
==== Vehicle Profile permission ====&lt;br /&gt;
With this permission you can delegate to individual users the possibility to view vehicle profiles if given the read permission. This makes the tab visible in the GUI but all buttons concerning editing/adding/removing are disabled. If a user has the write permission as well, the user will be able to edit/add and remove vehicle profiles. &lt;br /&gt;
&lt;br /&gt;
==== Vehicle Create permission ====&lt;br /&gt;
This permission enables a user to do [[The Portal Administrator View#Add Vehicle Dialog|Add Vehicle]]. This will also let a user view any disconnected vehicles in the vehicles tab.&lt;br /&gt;
&lt;br /&gt;
==== Resource Group Manage permission ====&lt;br /&gt;
This permission enables a user to [[The Portal Administrator View#Resource Groups|manage resource groups]]. Managing resource groups entails adding and removing WCUs from groups, editing groups, and removing groups. It will also enable access to the Resource groups panel.&lt;br /&gt;
&lt;br /&gt;
==== Resource Group Create permission ====&lt;br /&gt;
This permission enables a user to create resource groups by pressing Add New in the Resource groups panel of the Administration tab. It will also enable access to the Resource groups panel. Any permissions that may be needed to initially manage or edit the created resource group will be added to a role specific to the creator upon creating the group.&lt;br /&gt;
&lt;br /&gt;
=== Selecting resources using uploaded file ===&lt;br /&gt;
As described above, you can select resources in the select resources widget. In addition to this, you can upload a file containing the vehicles or WCUs that you would like to apply to a permission or a set of permissions. By pressing the button called &#039;Import vehicle file&#039; you will be presented with a dialog where you can upload a file containing multiple vehicles or WCUs. You can either upload an excel file or a CSV type of text file. What is important is that there is a header column saying what type of identifiers can be found in the file. Identifiers currently supported are: vin, plate or wcu. An example content of file (CSV):&lt;br /&gt;
&lt;br /&gt;
&amp;lt;kbd&amp;gt;&lt;br /&gt;
wcu&amp;lt;br&amp;gt;&lt;br /&gt;
04-1B-35-98&amp;lt;br&amp;gt;&lt;br /&gt;
90-80-AA&amp;lt;br&amp;gt;&lt;br /&gt;
&amp;lt;/kbd&amp;gt;&lt;br /&gt;
[[File:Import vehcile file-20210217-151236.png|thumb|Import a vehicle file for permission resource selection]]&lt;br /&gt;
Just by changing the heading to plate or vin you should reference such identifiers in the file. The dialog also presents the option to ignore resources not found and apply the changes for those found. The default is however to do nothing if any of the resources are not found. The checkbox &#039;Ignore unconnected vehicles&#039; is only applicable if you have plate or vin identifiers.&lt;br /&gt;
&lt;br /&gt;
If you have selected a permission in the permission table, the resources in the file will be applied to only the selected permission. If you have selected a role in the top leftmost table, the resources in the file will be applied to all permissions of the role.&lt;br /&gt;
&lt;br /&gt;
=== Changing a users roles and permissions ===&lt;br /&gt;
You can change a user&#039;s roles under in the edit user dialog if you press the button &amp;quot;Edit user roles&amp;quot;. The edit user dialog then gets extended as two boxes appear, a left one with available roles and a right one with current roles. In the left one you can search the role(s) you want and drag them to the right box or press the button pointing right. With the two buttons at the bottom corner(the paper and clipboard ones) you can copy the names of the roles and also insert the names of roles to add them.&lt;br /&gt;
&lt;br /&gt;
You can also change a users permission to view tasks in the tasks tab: By right-clicking the task(s) you want to change permissions for and hovering over &amp;quot;Permission&amp;quot; you will get the options &amp;quot;Show who can see task&amp;quot; and &amp;quot;Add who can see task&amp;quot;. &amp;quot;Show who can see task&amp;quot; will open a window with a left and a right box where the left contains users without permission to view the task and the right contains users who have permission. By moving users from the left to right and vice versa you can give or remove someones permission. You can also press the clipboard the the right bottom to copy the users who have permissions or add users by writing their name within parentheses. Users in the right box can be unselectable and that is if they have a role giving them the permission to view that task the only way to remove that is to remove that role from them. &amp;quot;Add who can see task&amp;quot; works the same way as &amp;quot;Show who can see task&amp;quot; except that the right box does not show users with permission so you can not remove permissions, this is so that with add you can add permissions for many tasks at the same time as the show can not show users from many tasks.&lt;br /&gt;
&lt;br /&gt;
[[File:Copy user assignment permissions.png|thumb|300x300px|Copy User Task Permissions Dialog]]&lt;br /&gt;
&lt;br /&gt;
You can also edit a users role by searching for user(s) and right clicking on them to get a window with different options. There are five different options where the three first can be used on multiple users at the same time while the bottom two can not.&lt;br /&gt;
* &amp;quot;Add user task permissions to this user&amp;quot; will open the dialog shown in Figure &amp;quot;Copy User Task Permissions Dialog&amp;quot;. With this button you take a user&#039;s task permissions and add them to the selected user(s). You do this by searching and selecting a user and then pressing &amp;quot;OK&amp;quot;.&lt;br /&gt;
* &amp;quot;Replace user task permissions with user&amp;quot; will open a similar dialog to the one in Figure &amp;quot;Copy User task Permissions Dialog&amp;quot;. This button is much like the one before except that instead of adding permissions to the current user this replaces the permissions that the selected user(s) have. Here you also search the user whose permissions you want to replace the select them and press &amp;quot;OK&amp;quot;.&lt;br /&gt;
* &amp;quot;Copy user roles to this user&amp;quot; will open a similar dialog to Figure &amp;quot;Copy User Task Permissions Dialog&amp;quot;. Instead of replacing permissions, this dialog replaces selected user(s) roles with the roles of a user who you chose. Search the user whose roles you want to copy for replacement and press &amp;quot;OK&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
[[File:Give permission on car.png|thumb|Give Permission on Vehicle Dialog]]&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
* &amp;quot;Give this user permission to all tasks on vehicle&amp;quot; gives task permission on one or many vehicles. The dialog will look like the dialog in Figure &amp;quot;Give Permission on Vehicle Dialog&amp;quot;. In the left box you select vehicles and move them to the right to give permission on them, you can also as you see below the left box select a file with vehicles to easily select a set of vehicles. Then you select which types of tasks it should give permission to (leaving this empty will not give any permissions). You can also check the checkbox &amp;quot;Reset user permission&amp;quot; to replace the roles of the selected user instead of adding new to the current ones.&lt;br /&gt;
* &amp;quot;Give this user permission to all tasks on WCU&amp;quot; is identical to the previous button except that it applies to WCUs instead of vehicles.&lt;br /&gt;
&lt;br /&gt;
==== User specific roles ====&lt;br /&gt;
A role may also be set to be specific to just one user. Doing this will remove the role from any other users that currently have it as well as prevent adding the role to any other users but the specified user.&lt;br /&gt;
&lt;br /&gt;
=== Permission for specific tasks ===&lt;br /&gt;
The above text discuss permissions as they are found from the User panel. There are also a set of &amp;quot;implicit&amp;quot; permissions created when a new task is created, based on the task type permission discussed above. Let us elaborate a bit on this to make it clear what it means. The use case is as follows; a user has a read task permission on a WCU (&amp;quot;wcu:assignment:soh:read:awcu&amp;quot;). (Observe that a task permission might contain the word &amp;quot;assignment&amp;quot; even if it is referring to a task. Look at the menu names instead to confirm that you are working with a task.) Let us say that a new state-of-health task is created on the WCU (&amp;quot;&#039;&#039;awcu&#039;&#039;&amp;quot;) while the user has the above permission. Regardless of who created the task, the user will now be able to list this task in the Tasks panel and download any data produced. Later, as time goes by, the WCU is no longer used in the particular project and an administrator removes the permission &amp;quot;wcu:assignment:soh:read:awcu&amp;quot; from the user. When new tasks are created on this WCU our user above will not be able to see the new tasks created in the Tasks panel. However, the user will be able to see the previous task, i.e. when the user had the correct permission. Thus, this solution enables users to retain the permission to see historical tasks, let us call this a &#039;&#039;&#039;historical task permission&#039;&#039;&#039;. This type of permission cannot be seen in the permission panel. To see who has access to which &#039;&#039;&#039;historical task&#039;&#039;&#039; you must turn to the Task panel.&lt;br /&gt;
&lt;br /&gt;
[[File:Task-panel-permission.png|thumb|Permission Choices in the Tasks Panel]]&lt;br /&gt;
&lt;br /&gt;
As an administrator you have the possibility to both see and modify who has access to individual tasks. There are two options presented if you right-click an task in the Tasks panel. To the right you see the two choices available. The top choice is only available if you have selected a single row in the table. The bottom one is always available, also if electing multiple rows.&lt;br /&gt;
&lt;br /&gt;
==== Top selection &amp;quot;Show who can see task&amp;quot; ====&lt;br /&gt;
By selecting the top selection you will be presented with a dialog where on the left hand side you have all available users that do not have the permission to see the task. On the right hand side you have the users that have the permission to do so. On the right hand side you might see that some users are grayed. Those users have the &#039;&#039;task permission,&#039;&#039; not to be confused with the WCU task permission&#039;&#039;,&#039;&#039; described above. Also, the users visible are enabled, disabled users will not be displayed.&lt;br /&gt;
&lt;br /&gt;
[[File:Users-with-read-permission-tasks-panel.png|thumb|Users with Permission on a Specific Task]]&lt;br /&gt;
&lt;br /&gt;
To give a user the permission to see the task, simply move the user from the left side to the right side. This is accomplished by selecting one or more users and then click the right-arrow. Conversely, to remove a user from the permission select the users from the right side and click the left-arrow. At the top of the left side you can search for users by typing and as you go the users will be filtered to match what you type.&lt;br /&gt;
&lt;br /&gt;
In the picture &amp;quot;Users with Permission on a Specific Task&amp;quot; to the right you see the user &#039;serverTriggerUser&#039; which is an enabled user which do not yet have the permission to see the task.&lt;br /&gt;
&lt;br /&gt;
==== Bottom selection &amp;quot;Add who can see task&amp;quot; ====&lt;br /&gt;
The bottom selection from above &#039;Add who can see task&#039; will not list who already has access to the task, but rather just list all users available regardless whether they already have permission or not to the task.&lt;br /&gt;
&lt;br /&gt;
You can also give a user permission to all running tasks on WCUs whose task types that user has access to. See [[The Portal Administrator View#The New User Dialog|The new user dialog]] (the portal administrator view).&lt;br /&gt;
&lt;br /&gt;
==== Add permission to historical tasks on permission update ====&lt;br /&gt;
[[File:Add permission to existing tasks on permission update.png|thumb|Add permission to existing tasks on permission update]]&lt;br /&gt;
From version 2.98 of the WICE portal it is possible to give users access to existing tasks when updating the WCU Task permission. See screenshot &amp;quot;Add permission to existing tasks on permission update&amp;quot;. In &amp;quot;Apply updated permission&amp;quot; it is possible to select the desired task statuses (for example only running tasks, stopped tasks etc) to apply the permission update to. For some environments all, or a subset of, statuses are preselected as default values. When saving this permission with &amp;quot;Selected resources&amp;quot; checked, any existing task having the the desired statuses on the WCUs in the list of &#039;Selected resources&#039; will be accessible for the users with the current permission. This is the same as searching for the WCUs of interest in the Tasks tab and manually adding permissions to these tasks via &amp;quot;Show who can see task&amp;quot; discussed in [[#Top selection &amp;quot;Show who can see task&amp;quot;]].&lt;br /&gt;
&lt;br /&gt;
Note that applying updated permission to tasks always applies to all resources in &#039;Selected resources&#039; so it is not possible to a subset of the resources.&lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Remove permission to historical tasks on permission update&#039;&#039;&#039; ====&lt;br /&gt;
As discussed in [[Roles and permissions#Permission for specific tasks|Permission for specific tasks]] a user has access to a historical task on a WCU even if that WCU is removed from the WCU Task permission. To remove the permission for historical tasks one have to lists the tasks in the Tasks tab, use &amp;quot;Show who can see task&amp;quot; and remove the users manually. &lt;br /&gt;
[[File:Remove permission for existing tasks.png|thumb|Remove permission for existing tasks when updating a WCU Task permission]]&lt;br /&gt;
Similar to &amp;quot;Add permission to historical tasks on permission update&amp;quot; discussed above, this can from version 2.98 be done when updating a WCU Task permission. In the screenshot &amp;quot;Remove permission for existing tasks when updating a WCU Task permission&amp;quot; the WCU &amp;quot;johan4&amp;quot;is removed from the permission. In &amp;quot;Apply updated permission&amp;quot; &#039;Remove resources&amp;quot; is selected along with all existing Task statuses. This will remove access to any existing tasks on &#039;johan4&#039; for the users having the role the current permission is part of.  &lt;br /&gt;
&lt;br /&gt;
Like for &amp;quot;Add permission to historical tasks on permission update&amp;quot; the list of desired Tasks statuses might be preselected as default values. &lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Add permission to historical tasks when WCU is added to resource group&#039;&#039;&#039; ====&lt;br /&gt;
If a resource group is used in a WCU Task permission (WTP) (like the group &#039;johan1_grupp&#039; in the screenshots mentioned before) any resource part of the group is also included in the permission. When adding a new WCU to a group that is part of a WTP users will from version 2.98 have the option to give access to any existing tasks on the WCU when the WCU is added to the group. The logic is the same as when a WCU is added to a permission described in [[#Add permission to historical tasks on permission update]]. An example of this can be seen screenshot &amp;quot;Add WCU to group used in WCU Task permission&amp;quot; where all users having the mentioned role will be given access to any &#039;Pending&#039; or &#039;Running&#039; tasks matching the individual WCU Task permission defined in the role.  &lt;br /&gt;
&lt;br /&gt;
So in this case, if the role &#039;assignment_task&#039; defines a WTP with read access to SoH tasks and the WCU johan4 has a task of type SoH with the status Pending or Running, all users with the role &#039;assignment_task&#039; will be given access to these SoH tasks. &lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Remove permission to historical tasks when WCU is removed from resource group&#039;&#039;&#039; ====&lt;br /&gt;
TODO &lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Add permission to historical tasks when WCU is associated with permission controlled label&#039;&#039;&#039; ====&lt;br /&gt;
[[File:Add WCU to group used in WCU Task permission.png|thumb|Add WCU to group used in WCU Task permission]]&lt;br /&gt;
TODO &lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Remove permission to historical tasks when permission controlled label is removed from WCU&#039;&#039;&#039; ====&lt;br /&gt;
TODO &lt;br /&gt;
&lt;br /&gt;
{{DEFAULTSORT:Rolas and Permissions}}&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=File:Add_WCU_to_group_used_in_WCU_Task_permission.png&amp;diff=4189</id>
		<title>File:Add WCU to group used in WCU Task permission.png</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=File:Add_WCU_to_group_used_in_WCU_Task_permission.png&amp;diff=4189"/>
		<updated>2026-05-20T12:56:56Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;Add WCU to group used in WCU Task permission&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=Roles_and_permissions&amp;diff=4184</id>
		<title>Roles and permissions</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=Roles_and_permissions&amp;diff=4184"/>
		<updated>2026-05-20T09:20:16Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: /* Permission for specific tasks */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;includeonly&amp;gt;====Roles and permissions====&amp;lt;/includeonly&amp;gt;&lt;br /&gt;
In order to restrict access to resources and functions in the portal, there is a framework using roles and permissions. Permissions are given on a set of resources. These permissions are grouped into roles, and roles are then attached to one or several users to be granted specific permissions.&lt;br /&gt;
&lt;br /&gt;
The “Edit roles and permission” dialog can be seen in Figure &amp;quot;Edit Roles and Permissions Dialog&amp;quot;. It consists of three tables. The top left table holds a list of the roles, the top right holds the user(s) for the selected role and the bottom one hold the selected role&#039;s permissions. Their size is adjustable and you can minimize them by clicking on the line between them.&lt;br /&gt;
[[File:Roles and permissions panel-20210217-144811.png|left|thumb|400x400px|Edit Roles and Permissions Dialog]]&lt;br /&gt;
&amp;lt;br clear=&amp;quot;all&amp;quot;&amp;gt;&lt;br /&gt;
You add a new role by pressing the button “Add role” and delete a role along with its permissions by pressing the red button next to it. When making a role you add a description and unique name. To edit an already existing role, double click the entry you wish to edit.&lt;br /&gt;
&lt;br /&gt;
When you select a role in the top left table, the lower table shows that specific role&#039;s permissions and the upper right table shows which users have that role. The permissions table consists of two columns, a string that is the actual permission and the set of resources that apply to that permission. &lt;br /&gt;
&lt;br /&gt;
=== Creating and editing roles and permissions ===&lt;br /&gt;
&lt;br /&gt;
[[File:Add permission.png|thumb|Creating New Permission]]&lt;br /&gt;
&lt;br /&gt;
To create a new permission press the “Add permission” button. It opens the following interaction depicted in Figure &amp;quot;Creating New Permission&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
[[File:Editing permissions.png|thumb|400x400px|Editing Task Permissions]]&lt;br /&gt;
&lt;br /&gt;
# Select what kind of permission you want. There are a number of different permissions, ten for WCUs and one to give permission to all tasks (the task permission can not be modified). The permissions are:&lt;br /&gt;
## &#039;&#039;&#039;Task&#039;&#039;&#039;. A special permission which is used to give users access to every existing task in the system. Typically only used for admins.&lt;br /&gt;
## &#039;&#039;&#039;Assignment Creator&#039;&#039;&#039;. This permission handles access to creating/editing/viewing assignments in the tab Assignment (see [[Signal Reader Assignment Wizard|signal reader]] and [[Area5 Assignment Wizard|Area5]]). Having a read-permission means that you can see a list of assignments but you cannot go ahead and edit or create them. A write-permission on the other hand makes you eligible to edit and create assignments. Currently, the permission is only relevant for signal reader and Area5. &lt;br /&gt;
## &#039;&#039;&#039;Vehicle Profile&#039;&#039;&#039; See [[#Vehicle Profile permission]]&lt;br /&gt;
## &#039;&#039;&#039;WCU Task&#039;&#039;&#039; Controls if a user is permitted to create/see tasks of a specific type on a WCU. More what this means is discussed below in &amp;quot;Permission to specific tasks&amp;quot;&lt;br /&gt;
## &#039;&#039;&#039;WCU Configuration.&#039;&#039;&#039; This permission controls whether you are allowed to work with a WCU&#039;s configuration.&lt;br /&gt;
## &#039;&#039;&#039;WCU Module&#039;&#039;&#039;. The permission controls the access to individual module configurations on a WCU. An example of a module is Signal reader.&lt;br /&gt;
## &#039;&#039;&#039;WCU Monitor&#039;&#039;&#039;. A task can have a monitor function to report data in real time. In order to see the real time data the user must have this permission.&lt;br /&gt;
## &#039;&#039;&#039;WCU Plot route&#039;&#039;&#039;. To see a historic GPS track of a WCU a user must have this permission.&lt;br /&gt;
## &#039;&#039;&#039;WCU Position&#039;&#039;&#039;. Allows a user to see a WCU&#039;s current position.&lt;br /&gt;
## &#039;&#039;&#039;WCU Shelving&#039;&#039;&#039;. Allows a user to handle any shelving, unshelving and refurbishing of a WCU.&lt;br /&gt;
## &#039;&#039;&#039;WCU View&#039;&#039;&#039;. This permission applies to the Vehicles tab. It has to do with whether you are allowed to list a WCU in the table. Selecting this subtype makes the subtype type part unnecessary and therefore, it is removed if you choose this resource type.&lt;br /&gt;
##&#039;&#039;&#039;WCU Connect&#039;&#039;&#039;. Allows a user to connect a WCU to a vehicle.&lt;br /&gt;
##&#039;&#039;&#039;Vehicle Create&#039;&#039;&#039; See [[Roles and permissions#Vehicle Create permission|#Vehicle Create permissions]]&lt;br /&gt;
##&#039;&#039;&#039;Resource Group Manage&#039;&#039;&#039; See [[#Resource Group Manage permission]]&lt;br /&gt;
##&#039;&#039;&#039;Resource Group Create&#039;&#039;&#039; See [[#Resource Group Create permission]]&lt;br /&gt;
##&#039;&#039;&#039;View Inactive WCU&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to view inactive WCUs.&lt;br /&gt;
##&#039;&#039;&#039;View Inactive Vehicle&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to view inactive vehicles.&lt;br /&gt;
##&#039;&#039;&#039;Vehicle Edit&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to edit vehicles.&lt;br /&gt;
# Choosing if the permission should be a read and/or write permission. One of these have to be selected or you will not be able to save changes.&lt;br /&gt;
# Selecting which resources that apply to the permission. The selection is made using the two tables you see in Figure &amp;quot;Editing Task Permissions&amp;quot;. To select a resource, which can be a resource group, you enter the name of the resource in the left table filter area. As you type, the table is automatically filled with resources matching the criteria. If a resource is part of a resource group the icon to the left is shown. If you hold the mouse over the resource name you will see which resource group it is part of. If you instead see the icon shown to the left, the resource is a resource group. Holding the mouse over the entry will show you which resources are part of the resource group. To select a resource, drag it over to the right table or select the resource and then press the right-arrow. To deselect a resource, drag it to the left table or press the left-arrow. There is a “Select all” option. It selects all current and future resources to which this permission should be applied. [[File:Labels in permissions1.png|thumb|Select resources by labels]][[File:Permission label2.png|thumb|Resource selected by label]]From version 2.93 of the WICE portal it is also possible to let labels select the resources that will be part of the permission. When a label is selected as in the screenshot to the right, the WCUs which are currently associated with the label are added to the set of selected resources. Multiple labels can also be used to either collect more resources or narrow down the resources depending on the chosen relation between the labels.  After the permission has been saved, any additional resources which get associated with the labels used in the permission will automatically be added to the permission. Since these labels now controls one or many permissions, only the users with the role admin can add or remove the labels from resources as long as they are part of any permission.&lt;br /&gt;
# Set what type of tasks the permission applies to. It is automatically set to have all selected but you can unselect all and selecting other tasks. This option is only available on the &#039;&#039;&#039;WCU task&#039;&#039;&#039;, &#039;&#039;&#039;assignment&#039;&#039;&#039; &#039;&#039;&#039;creator,&#039;&#039;&#039; &#039;&#039;&#039;monitor&#039;&#039;&#039; and &#039;&#039;&#039;module&#039;&#039;&#039; permissions. It corresponds to the set of available modules for a WCU.&lt;br /&gt;
When you are done press &amp;quot;Save changes&amp;quot; or &amp;quot;Reset changes&amp;quot; if you want to revert the changes. You can always edit the permission by selecting it in the table. The dialog described above will show  and you can make your changes, except that you can not change what type of task it is.&lt;br /&gt;
&lt;br /&gt;
==== Assignment Creator permission ====&lt;br /&gt;
This permission concerns the [[Signal Reader Assignment Editor|signal reader assignment editor]]. If you give the user a read permission they can look at already created assignments. If you give a user the write permission they will also be able to create and delete assignments.&lt;br /&gt;
&lt;br /&gt;
==== Vehicle Profile permission ====&lt;br /&gt;
With this permission you can delegate to individual users the possibility to view vehicle profiles if given the read permission. This makes the tab visible in the GUI but all buttons concerning editing/adding/removing are disabled. If a user has the write permission as well, the user will be able to edit/add and remove vehicle profiles. &lt;br /&gt;
&lt;br /&gt;
==== Vehicle Create permission ====&lt;br /&gt;
This permission enables a user to do [[The Portal Administrator View#Add Vehicle Dialog|Add Vehicle]]. This will also let a user view any disconnected vehicles in the vehicles tab.&lt;br /&gt;
&lt;br /&gt;
==== Resource Group Manage permission ====&lt;br /&gt;
This permission enables a user to [[The Portal Administrator View#Resource Groups|manage resource groups]]. Managing resource groups entails adding and removing WCUs from groups, editing groups, and removing groups. It will also enable access to the Resource groups panel.&lt;br /&gt;
&lt;br /&gt;
==== Resource Group Create permission ====&lt;br /&gt;
This permission enables a user to create resource groups by pressing Add New in the Resource groups panel of the Administration tab. It will also enable access to the Resource groups panel. Any permissions that may be needed to initially manage or edit the created resource group will be added to a role specific to the creator upon creating the group.&lt;br /&gt;
&lt;br /&gt;
=== Selecting resources using uploaded file ===&lt;br /&gt;
As described above, you can select resources in the select resources widget. In addition to this, you can upload a file containing the vehicles or WCUs that you would like to apply to a permission or a set of permissions. By pressing the button called &#039;Import vehicle file&#039; you will be presented with a dialog where you can upload a file containing multiple vehicles or WCUs. You can either upload an excel file or a CSV type of text file. What is important is that there is a header column saying what type of identifiers can be found in the file. Identifiers currently supported are: vin, plate or wcu. An example content of file (CSV):&lt;br /&gt;
&lt;br /&gt;
&amp;lt;kbd&amp;gt;&lt;br /&gt;
wcu&amp;lt;br&amp;gt;&lt;br /&gt;
04-1B-35-98&amp;lt;br&amp;gt;&lt;br /&gt;
90-80-AA&amp;lt;br&amp;gt;&lt;br /&gt;
&amp;lt;/kbd&amp;gt;&lt;br /&gt;
[[File:Import vehcile file-20210217-151236.png|thumb|Import a vehicle file for permission resource selection]]&lt;br /&gt;
Just by changing the heading to plate or vin you should reference such identifiers in the file. The dialog also presents the option to ignore resources not found and apply the changes for those found. The default is however to do nothing if any of the resources are not found. The checkbox &#039;Ignore unconnected vehicles&#039; is only applicable if you have plate or vin identifiers.&lt;br /&gt;
&lt;br /&gt;
If you have selected a permission in the permission table, the resources in the file will be applied to only the selected permission. If you have selected a role in the top leftmost table, the resources in the file will be applied to all permissions of the role.&lt;br /&gt;
&lt;br /&gt;
=== Changing a users roles and permissions ===&lt;br /&gt;
You can change a user&#039;s roles under in the edit user dialog if you press the button &amp;quot;Edit user roles&amp;quot;. The edit user dialog then gets extended as two boxes appear, a left one with available roles and a right one with current roles. In the left one you can search the role(s) you want and drag them to the right box or press the button pointing right. With the two buttons at the bottom corner(the paper and clipboard ones) you can copy the names of the roles and also insert the names of roles to add them.&lt;br /&gt;
&lt;br /&gt;
You can also change a users permission to view tasks in the tasks tab: By right-clicking the task(s) you want to change permissions for and hovering over &amp;quot;Permission&amp;quot; you will get the options &amp;quot;Show who can see task&amp;quot; and &amp;quot;Add who can see task&amp;quot;. &amp;quot;Show who can see task&amp;quot; will open a window with a left and a right box where the left contains users without permission to view the task and the right contains users who have permission. By moving users from the left to right and vice versa you can give or remove someones permission. You can also press the clipboard the the right bottom to copy the users who have permissions or add users by writing their name within parentheses. Users in the right box can be unselectable and that is if they have a role giving them the permission to view that task the only way to remove that is to remove that role from them. &amp;quot;Add who can see task&amp;quot; works the same way as &amp;quot;Show who can see task&amp;quot; except that the right box does not show users with permission so you can not remove permissions, this is so that with add you can add permissions for many tasks at the same time as the show can not show users from many tasks.&lt;br /&gt;
&lt;br /&gt;
[[File:Copy user assignment permissions.png|thumb|300x300px|Copy User Task Permissions Dialog]]&lt;br /&gt;
&lt;br /&gt;
You can also edit a users role by searching for user(s) and right clicking on them to get a window with different options. There are five different options where the three first can be used on multiple users at the same time while the bottom two can not.&lt;br /&gt;
* &amp;quot;Add user task permissions to this user&amp;quot; will open the dialog shown in Figure &amp;quot;Copy User Task Permissions Dialog&amp;quot;. With this button you take a user&#039;s task permissions and add them to the selected user(s). You do this by searching and selecting a user and then pressing &amp;quot;OK&amp;quot;.&lt;br /&gt;
* &amp;quot;Replace user task permissions with user&amp;quot; will open a similar dialog to the one in Figure &amp;quot;Copy User task Permissions Dialog&amp;quot;. This button is much like the one before except that instead of adding permissions to the current user this replaces the permissions that the selected user(s) have. Here you also search the user whose permissions you want to replace the select them and press &amp;quot;OK&amp;quot;.&lt;br /&gt;
* &amp;quot;Copy user roles to this user&amp;quot; will open a similar dialog to Figure &amp;quot;Copy User Task Permissions Dialog&amp;quot;. Instead of replacing permissions, this dialog replaces selected user(s) roles with the roles of a user who you chose. Search the user whose roles you want to copy for replacement and press &amp;quot;OK&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
[[File:Give permission on car.png|thumb|Give Permission on Vehicle Dialog]]&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
* &amp;quot;Give this user permission to all tasks on vehicle&amp;quot; gives task permission on one or many vehicles. The dialog will look like the dialog in Figure &amp;quot;Give Permission on Vehicle Dialog&amp;quot;. In the left box you select vehicles and move them to the right to give permission on them, you can also as you see below the left box select a file with vehicles to easily select a set of vehicles. Then you select which types of tasks it should give permission to (leaving this empty will not give any permissions). You can also check the checkbox &amp;quot;Reset user permission&amp;quot; to replace the roles of the selected user instead of adding new to the current ones.&lt;br /&gt;
* &amp;quot;Give this user permission to all tasks on WCU&amp;quot; is identical to the previous button except that it applies to WCUs instead of vehicles.&lt;br /&gt;
&lt;br /&gt;
==== User specific roles ====&lt;br /&gt;
A role may also be set to be specific to just one user. Doing this will remove the role from any other users that currently have it as well as prevent adding the role to any other users but the specified user.&lt;br /&gt;
&lt;br /&gt;
=== Permission for specific tasks ===&lt;br /&gt;
The above text discuss permissions as they are found from the User panel. There are also a set of &amp;quot;implicit&amp;quot; permissions created when a new task is created, based on the task type permission discussed above. Let us elaborate a bit on this to make it clear what it means. The use case is as follows; a user has a read task permission on a WCU (&amp;quot;wcu:assignment:soh:read:awcu&amp;quot;). (Observe that a task permission might contain the word &amp;quot;assignment&amp;quot; even if it is referring to a task. Look at the menu names instead to confirm that you are working with a task.) Let us say that a new state-of-health task is created on the WCU (&amp;quot;&#039;&#039;awcu&#039;&#039;&amp;quot;) while the user has the above permission. Regardless of who created the task, the user will now be able to list this task in the Tasks panel and download any data produced. Later, as time goes by, the WCU is no longer used in the particular project and an administrator removes the permission &amp;quot;wcu:assignment:soh:read:awcu&amp;quot; from the user. When new tasks are created on this WCU our user above will not be able to see the new tasks created in the Tasks panel. However, the user will be able to see the previous task, i.e. when the user had the correct permission. Thus, this solution enables users to retain the permission to see historical tasks, let us call this a &#039;&#039;&#039;historical task permission&#039;&#039;&#039;. This type of permission cannot be seen in the permission panel. To see who has access to which &#039;&#039;&#039;historical task&#039;&#039;&#039; you must turn to the Task panel.&lt;br /&gt;
&lt;br /&gt;
[[File:Task-panel-permission.png|thumb|Permission Choices in the Tasks Panel]]&lt;br /&gt;
&lt;br /&gt;
As an administrator you have the possibility to both see and modify who has access to individual tasks. There are two options presented if you right-click an task in the Tasks panel. To the right you see the two choices available. The top choice is only available if you have selected a single row in the table. The bottom one is always available, also if electing multiple rows.&lt;br /&gt;
&lt;br /&gt;
==== Top selection &amp;quot;Show who can see task&amp;quot; ====&lt;br /&gt;
By selecting the top selection you will be presented with a dialog where on the left hand side you have all available users that do not have the permission to see the task. On the right hand side you have the users that have the permission to do so. On the right hand side you might see that some users are grayed. Those users have the &#039;&#039;task permission,&#039;&#039; not to be confused with the WCU task permission&#039;&#039;,&#039;&#039; described above. Also, the users visible are enabled, disabled users will not be displayed.&lt;br /&gt;
&lt;br /&gt;
[[File:Users-with-read-permission-tasks-panel.png|thumb|Users with Permission on a Specific Task]]&lt;br /&gt;
&lt;br /&gt;
To give a user the permission to see the task, simply move the user from the left side to the right side. This is accomplished by selecting one or more users and then click the right-arrow. Conversely, to remove a user from the permission select the users from the right side and click the left-arrow. At the top of the left side you can search for users by typing and as you go the users will be filtered to match what you type.&lt;br /&gt;
&lt;br /&gt;
In the picture &amp;quot;Users with Permission on a Specific Task&amp;quot; to the right you see the user &#039;serverTriggerUser&#039; which is an enabled user which do not yet have the permission to see the task.&lt;br /&gt;
&lt;br /&gt;
==== Bottom selection &amp;quot;Add who can see task&amp;quot; ====&lt;br /&gt;
The bottom selection from above &#039;Add who can see task&#039; will not list who already has access to the task, but rather just list all users available regardless whether they already have permission or not to the task.&lt;br /&gt;
&lt;br /&gt;
You can also give a user permission to all running tasks on WCUs whose task types that user has access to. See [[The Portal Administrator View#The New User Dialog|The new user dialog]] (the portal administrator view).&lt;br /&gt;
&lt;br /&gt;
==== Add permission to historical tasks on permission update ====&lt;br /&gt;
[[File:Add permission to existing tasks on permission update.png|thumb|Add permission to existing tasks on permission update]]&lt;br /&gt;
From version 2.98 of the WICE portal it is possible to give users access to existing tasks when updating the WCU Task permission. See screenshot &amp;quot;Add permission to existing tasks on permission update&amp;quot;. In &amp;quot;Apply updated permission&amp;quot; it is possible to select the desired task statuses (for example only running tasks, stopped tasks etc) to apply the permission update to. For some environments all, or a subset of, statuses are preselected as default values. When saving this permission with &amp;quot;Selected resources&amp;quot; checked, any existing task having the the desired statuses on the WCUs in the list of &#039;Selected resources&#039; will be accessible for the users with the current permission. This is the same as searching for the WCUs of interest in the Tasks tab and manually adding permissions to these tasks via &amp;quot;Show who can see task&amp;quot; discussed in [[#Top selection &amp;quot;Show who can see task&amp;quot;]].&lt;br /&gt;
&lt;br /&gt;
Note that applying updated permission to tasks always applies to all resources in &#039;Selected resources&#039; so it is not possible to a subset of the resources.&lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Remove permission to historical tasks on permission update&#039;&#039;&#039; ====&lt;br /&gt;
As discussed in [[Roles and permissions#Permission for specific tasks|Permission for specific tasks]] a user has access to a historical task on a WCU even if that WCU is removed from the WCU Task permission. To remove the permission for historical tasks one have to lists the tasks in the Tasks tab, use &amp;quot;Show who can see task&amp;quot; and remove the users manually. &lt;br /&gt;
[[File:Remove permission for existing tasks.png|thumb|Remove permission for existing tasks when updating a WCU Task permission]]&lt;br /&gt;
Similar to &amp;quot;Add permission to historical tasks on permission update&amp;quot; discussed above, this can from version 2.98 be done when updating a WCU Task permission. In the screenshot &amp;quot;Remove permission for existing tasks when updating a WCU Task permission&amp;quot; the WCU &amp;quot;johan4&amp;quot;is removed from the permission. In &amp;quot;Apply updated permission&amp;quot; &#039;Remove resources&amp;quot; is selected along with all existing Task statuses. This will remove access to any existing tasks on &#039;johan4&#039; for the users having the role the current permission is part of.  &lt;br /&gt;
&lt;br /&gt;
Like for &amp;quot;Add permission to historical tasks on permission update&amp;quot; the list of desired Tasks statuses might be preselected as default values. &lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Add permission to historical tasks when WCU is added to resource group&#039;&#039;&#039; ====&lt;br /&gt;
TODO &lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Remove permission to historical tasks when WCU is removed from resource group&#039;&#039;&#039; ====&lt;br /&gt;
TODO &lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Add permission to historical tasks when WCU is associated with permission controlled label&#039;&#039;&#039; ====&lt;br /&gt;
TODO &lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Remove permission to historical tasks when permission controlled label is removed from WCU&#039;&#039;&#039; ====&lt;br /&gt;
TODO &lt;br /&gt;
&lt;br /&gt;
{{DEFAULTSORT:Rolas and Permissions}}&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=Roles_and_permissions&amp;diff=4183</id>
		<title>Roles and permissions</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=Roles_and_permissions&amp;diff=4183"/>
		<updated>2026-05-20T09:16:24Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: /* Add permission to historical tasks on permission update */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;includeonly&amp;gt;====Roles and permissions====&amp;lt;/includeonly&amp;gt;&lt;br /&gt;
In order to restrict access to resources and functions in the portal, there is a framework using roles and permissions. Permissions are given on a set of resources. These permissions are grouped into roles, and roles are then attached to one or several users to be granted specific permissions.&lt;br /&gt;
&lt;br /&gt;
The “Edit roles and permission” dialog can be seen in Figure &amp;quot;Edit Roles and Permissions Dialog&amp;quot;. It consists of three tables. The top left table holds a list of the roles, the top right holds the user(s) for the selected role and the bottom one hold the selected role&#039;s permissions. Their size is adjustable and you can minimize them by clicking on the line between them.&lt;br /&gt;
[[File:Roles and permissions panel-20210217-144811.png|left|thumb|400x400px|Edit Roles and Permissions Dialog]]&lt;br /&gt;
&amp;lt;br clear=&amp;quot;all&amp;quot;&amp;gt;&lt;br /&gt;
You add a new role by pressing the button “Add role” and delete a role along with its permissions by pressing the red button next to it. When making a role you add a description and unique name. To edit an already existing role, double click the entry you wish to edit.&lt;br /&gt;
&lt;br /&gt;
When you select a role in the top left table, the lower table shows that specific role&#039;s permissions and the upper right table shows which users have that role. The permissions table consists of two columns, a string that is the actual permission and the set of resources that apply to that permission. &lt;br /&gt;
&lt;br /&gt;
=== Creating and editing roles and permissions ===&lt;br /&gt;
&lt;br /&gt;
[[File:Add permission.png|thumb|Creating New Permission]]&lt;br /&gt;
&lt;br /&gt;
To create a new permission press the “Add permission” button. It opens the following interaction depicted in Figure &amp;quot;Creating New Permission&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
[[File:Editing permissions.png|thumb|400x400px|Editing Task Permissions]]&lt;br /&gt;
&lt;br /&gt;
# Select what kind of permission you want. There are a number of different permissions, ten for WCUs and one to give permission to all tasks (the task permission can not be modified). The permissions are:&lt;br /&gt;
## &#039;&#039;&#039;Task&#039;&#039;&#039;. A special permission which is used to give users access to every existing task in the system. Typically only used for admins.&lt;br /&gt;
## &#039;&#039;&#039;Assignment Creator&#039;&#039;&#039;. This permission handles access to creating/editing/viewing assignments in the tab Assignment (see [[Signal Reader Assignment Wizard|signal reader]] and [[Area5 Assignment Wizard|Area5]]). Having a read-permission means that you can see a list of assignments but you cannot go ahead and edit or create them. A write-permission on the other hand makes you eligible to edit and create assignments. Currently, the permission is only relevant for signal reader and Area5. &lt;br /&gt;
## &#039;&#039;&#039;Vehicle Profile&#039;&#039;&#039; See [[#Vehicle Profile permission]]&lt;br /&gt;
## &#039;&#039;&#039;WCU Task&#039;&#039;&#039; Controls if a user is permitted to create/see tasks of a specific type on a WCU. More what this means is discussed below in &amp;quot;Permission to specific tasks&amp;quot;&lt;br /&gt;
## &#039;&#039;&#039;WCU Configuration.&#039;&#039;&#039; This permission controls whether you are allowed to work with a WCU&#039;s configuration.&lt;br /&gt;
## &#039;&#039;&#039;WCU Module&#039;&#039;&#039;. The permission controls the access to individual module configurations on a WCU. An example of a module is Signal reader.&lt;br /&gt;
## &#039;&#039;&#039;WCU Monitor&#039;&#039;&#039;. A task can have a monitor function to report data in real time. In order to see the real time data the user must have this permission.&lt;br /&gt;
## &#039;&#039;&#039;WCU Plot route&#039;&#039;&#039;. To see a historic GPS track of a WCU a user must have this permission.&lt;br /&gt;
## &#039;&#039;&#039;WCU Position&#039;&#039;&#039;. Allows a user to see a WCU&#039;s current position.&lt;br /&gt;
## &#039;&#039;&#039;WCU Shelving&#039;&#039;&#039;. Allows a user to handle any shelving, unshelving and refurbishing of a WCU.&lt;br /&gt;
## &#039;&#039;&#039;WCU View&#039;&#039;&#039;. This permission applies to the Vehicles tab. It has to do with whether you are allowed to list a WCU in the table. Selecting this subtype makes the subtype type part unnecessary and therefore, it is removed if you choose this resource type.&lt;br /&gt;
##&#039;&#039;&#039;WCU Connect&#039;&#039;&#039;. Allows a user to connect a WCU to a vehicle.&lt;br /&gt;
##&#039;&#039;&#039;Vehicle Create&#039;&#039;&#039; See [[Roles and permissions#Vehicle Create permission|#Vehicle Create permissions]]&lt;br /&gt;
##&#039;&#039;&#039;Resource Group Manage&#039;&#039;&#039; See [[#Resource Group Manage permission]]&lt;br /&gt;
##&#039;&#039;&#039;Resource Group Create&#039;&#039;&#039; See [[#Resource Group Create permission]]&lt;br /&gt;
##&#039;&#039;&#039;View Inactive WCU&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to view inactive WCUs.&lt;br /&gt;
##&#039;&#039;&#039;View Inactive Vehicle&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to view inactive vehicles.&lt;br /&gt;
##&#039;&#039;&#039;Vehicle Edit&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to edit vehicles.&lt;br /&gt;
# Choosing if the permission should be a read and/or write permission. One of these have to be selected or you will not be able to save changes.&lt;br /&gt;
# Selecting which resources that apply to the permission. The selection is made using the two tables you see in Figure &amp;quot;Editing Task Permissions&amp;quot;. To select a resource, which can be a resource group, you enter the name of the resource in the left table filter area. As you type, the table is automatically filled with resources matching the criteria. If a resource is part of a resource group the icon to the left is shown. If you hold the mouse over the resource name you will see which resource group it is part of. If you instead see the icon shown to the left, the resource is a resource group. Holding the mouse over the entry will show you which resources are part of the resource group. To select a resource, drag it over to the right table or select the resource and then press the right-arrow. To deselect a resource, drag it to the left table or press the left-arrow. There is a “Select all” option. It selects all current and future resources to which this permission should be applied. [[File:Labels in permissions1.png|thumb|Select resources by labels]][[File:Permission label2.png|thumb|Resource selected by label]]From version 2.93 of the WICE portal it is also possible to let labels select the resources that will be part of the permission. When a label is selected as in the screenshot to the right, the WCUs which are currently associated with the label are added to the set of selected resources. Multiple labels can also be used to either collect more resources or narrow down the resources depending on the chosen relation between the labels.  After the permission has been saved, any additional resources which get associated with the labels used in the permission will automatically be added to the permission. Since these labels now controls one or many permissions, only the users with the role admin can add or remove the labels from resources as long as they are part of any permission.&lt;br /&gt;
# Set what type of tasks the permission applies to. It is automatically set to have all selected but you can unselect all and selecting other tasks. This option is only available on the &#039;&#039;&#039;WCU task&#039;&#039;&#039;, &#039;&#039;&#039;assignment&#039;&#039;&#039; &#039;&#039;&#039;creator,&#039;&#039;&#039; &#039;&#039;&#039;monitor&#039;&#039;&#039; and &#039;&#039;&#039;module&#039;&#039;&#039; permissions. It corresponds to the set of available modules for a WCU.&lt;br /&gt;
When you are done press &amp;quot;Save changes&amp;quot; or &amp;quot;Reset changes&amp;quot; if you want to revert the changes. You can always edit the permission by selecting it in the table. The dialog described above will show  and you can make your changes, except that you can not change what type of task it is.&lt;br /&gt;
&lt;br /&gt;
==== Assignment Creator permission ====&lt;br /&gt;
This permission concerns the [[Signal Reader Assignment Editor|signal reader assignment editor]]. If you give the user a read permission they can look at already created assignments. If you give a user the write permission they will also be able to create and delete assignments.&lt;br /&gt;
&lt;br /&gt;
==== Vehicle Profile permission ====&lt;br /&gt;
With this permission you can delegate to individual users the possibility to view vehicle profiles if given the read permission. This makes the tab visible in the GUI but all buttons concerning editing/adding/removing are disabled. If a user has the write permission as well, the user will be able to edit/add and remove vehicle profiles. &lt;br /&gt;
&lt;br /&gt;
==== Vehicle Create permission ====&lt;br /&gt;
This permission enables a user to do [[The Portal Administrator View#Add Vehicle Dialog|Add Vehicle]]. This will also let a user view any disconnected vehicles in the vehicles tab.&lt;br /&gt;
&lt;br /&gt;
==== Resource Group Manage permission ====&lt;br /&gt;
This permission enables a user to [[The Portal Administrator View#Resource Groups|manage resource groups]]. Managing resource groups entails adding and removing WCUs from groups, editing groups, and removing groups. It will also enable access to the Resource groups panel.&lt;br /&gt;
&lt;br /&gt;
==== Resource Group Create permission ====&lt;br /&gt;
This permission enables a user to create resource groups by pressing Add New in the Resource groups panel of the Administration tab. It will also enable access to the Resource groups panel. Any permissions that may be needed to initially manage or edit the created resource group will be added to a role specific to the creator upon creating the group.&lt;br /&gt;
&lt;br /&gt;
=== Selecting resources using uploaded file ===&lt;br /&gt;
As described above, you can select resources in the select resources widget. In addition to this, you can upload a file containing the vehicles or WCUs that you would like to apply to a permission or a set of permissions. By pressing the button called &#039;Import vehicle file&#039; you will be presented with a dialog where you can upload a file containing multiple vehicles or WCUs. You can either upload an excel file or a CSV type of text file. What is important is that there is a header column saying what type of identifiers can be found in the file. Identifiers currently supported are: vin, plate or wcu. An example content of file (CSV):&lt;br /&gt;
&lt;br /&gt;
&amp;lt;kbd&amp;gt;&lt;br /&gt;
wcu&amp;lt;br&amp;gt;&lt;br /&gt;
04-1B-35-98&amp;lt;br&amp;gt;&lt;br /&gt;
90-80-AA&amp;lt;br&amp;gt;&lt;br /&gt;
&amp;lt;/kbd&amp;gt;&lt;br /&gt;
[[File:Import vehcile file-20210217-151236.png|thumb|Import a vehicle file for permission resource selection]]&lt;br /&gt;
Just by changing the heading to plate or vin you should reference such identifiers in the file. The dialog also presents the option to ignore resources not found and apply the changes for those found. The default is however to do nothing if any of the resources are not found. The checkbox &#039;Ignore unconnected vehicles&#039; is only applicable if you have plate or vin identifiers.&lt;br /&gt;
&lt;br /&gt;
If you have selected a permission in the permission table, the resources in the file will be applied to only the selected permission. If you have selected a role in the top leftmost table, the resources in the file will be applied to all permissions of the role.&lt;br /&gt;
&lt;br /&gt;
=== Changing a users roles and permissions ===&lt;br /&gt;
You can change a user&#039;s roles under in the edit user dialog if you press the button &amp;quot;Edit user roles&amp;quot;. The edit user dialog then gets extended as two boxes appear, a left one with available roles and a right one with current roles. In the left one you can search the role(s) you want and drag them to the right box or press the button pointing right. With the two buttons at the bottom corner(the paper and clipboard ones) you can copy the names of the roles and also insert the names of roles to add them.&lt;br /&gt;
&lt;br /&gt;
You can also change a users permission to view tasks in the tasks tab: By right-clicking the task(s) you want to change permissions for and hovering over &amp;quot;Permission&amp;quot; you will get the options &amp;quot;Show who can see task&amp;quot; and &amp;quot;Add who can see task&amp;quot;. &amp;quot;Show who can see task&amp;quot; will open a window with a left and a right box where the left contains users without permission to view the task and the right contains users who have permission. By moving users from the left to right and vice versa you can give or remove someones permission. You can also press the clipboard the the right bottom to copy the users who have permissions or add users by writing their name within parentheses. Users in the right box can be unselectable and that is if they have a role giving them the permission to view that task the only way to remove that is to remove that role from them. &amp;quot;Add who can see task&amp;quot; works the same way as &amp;quot;Show who can see task&amp;quot; except that the right box does not show users with permission so you can not remove permissions, this is so that with add you can add permissions for many tasks at the same time as the show can not show users from many tasks.&lt;br /&gt;
&lt;br /&gt;
[[File:Copy user assignment permissions.png|thumb|300x300px|Copy User Task Permissions Dialog]]&lt;br /&gt;
&lt;br /&gt;
You can also edit a users role by searching for user(s) and right clicking on them to get a window with different options. There are five different options where the three first can be used on multiple users at the same time while the bottom two can not.&lt;br /&gt;
* &amp;quot;Add user task permissions to this user&amp;quot; will open the dialog shown in Figure &amp;quot;Copy User Task Permissions Dialog&amp;quot;. With this button you take a user&#039;s task permissions and add them to the selected user(s). You do this by searching and selecting a user and then pressing &amp;quot;OK&amp;quot;.&lt;br /&gt;
* &amp;quot;Replace user task permissions with user&amp;quot; will open a similar dialog to the one in Figure &amp;quot;Copy User task Permissions Dialog&amp;quot;. This button is much like the one before except that instead of adding permissions to the current user this replaces the permissions that the selected user(s) have. Here you also search the user whose permissions you want to replace the select them and press &amp;quot;OK&amp;quot;.&lt;br /&gt;
* &amp;quot;Copy user roles to this user&amp;quot; will open a similar dialog to Figure &amp;quot;Copy User Task Permissions Dialog&amp;quot;. Instead of replacing permissions, this dialog replaces selected user(s) roles with the roles of a user who you chose. Search the user whose roles you want to copy for replacement and press &amp;quot;OK&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
[[File:Give permission on car.png|thumb|Give Permission on Vehicle Dialog]]&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
* &amp;quot;Give this user permission to all tasks on vehicle&amp;quot; gives task permission on one or many vehicles. The dialog will look like the dialog in Figure &amp;quot;Give Permission on Vehicle Dialog&amp;quot;. In the left box you select vehicles and move them to the right to give permission on them, you can also as you see below the left box select a file with vehicles to easily select a set of vehicles. Then you select which types of tasks it should give permission to (leaving this empty will not give any permissions). You can also check the checkbox &amp;quot;Reset user permission&amp;quot; to replace the roles of the selected user instead of adding new to the current ones.&lt;br /&gt;
* &amp;quot;Give this user permission to all tasks on WCU&amp;quot; is identical to the previous button except that it applies to WCUs instead of vehicles.&lt;br /&gt;
&lt;br /&gt;
==== User specific roles ====&lt;br /&gt;
A role may also be set to be specific to just one user. Doing this will remove the role from any other users that currently have it as well as prevent adding the role to any other users but the specified user.&lt;br /&gt;
&lt;br /&gt;
=== Permission for specific tasks ===&lt;br /&gt;
The above text discuss permissions as they are found from the User panel. There are also a set of &amp;quot;implicit&amp;quot; permissions created when a new task is created, based on the task type permission discussed above. Let us elaborate a bit on this to make it clear what it means. The use case is as follows; a user has a read task permission on a WCU (&amp;quot;wcu:assignment:soh:read:awcu&amp;quot;). (Observe that a task permission might contain the word &amp;quot;assignment&amp;quot; even if it is referring to a task. Look at the menu names instead to confirm that you are working with a task.) Let us say that a new state-of-health task is created on the WCU (&amp;quot;&#039;&#039;awcu&#039;&#039;&amp;quot;) while the user has the above permission. Regardless of who created the task, the user will now be able to list this task in the Tasks panel and download any data produced. Later, as time goes by, the WCU is no longer used in the particular project and an administrator removes the permission &amp;quot;wcu:assignment:soh:read:awcu&amp;quot; from the user. When new tasks are created on this WCU our user above will not be able to see the new tasks created in the Tasks panel. However, the user will be able to see the previous task, i.e. when the user had the correct permission. Thus, this solution enables users to retain the permission to see historical tasks, let us call this a &#039;&#039;&#039;historical task permission&#039;&#039;&#039;. This type of permission cannot be seen in the permission panel. To see who has access to which &#039;&#039;&#039;historical task&#039;&#039;&#039; you must turn to the Task panel.&lt;br /&gt;
&lt;br /&gt;
[[File:Task-panel-permission.png|thumb|Permission Choices in the Tasks Panel]]&lt;br /&gt;
&lt;br /&gt;
As an administrator you have the possibility to both see and modify who has access to individual tasks. There are two options presented if you right-click an task in the Tasks panel. To the right you see the two choices available. The top choice is only available if you have selected a single row in the table. The bottom one is always available, also if electing multiple rows.&lt;br /&gt;
&lt;br /&gt;
==== Top selection &amp;quot;Show who can see task&amp;quot; ====&lt;br /&gt;
By selecting the top selection you will be presented with a dialog where on the left hand side you have all available users that do not have the permission to see the task. On the right hand side you have the users that have the permission to do so. On the right hand side you might see that some users are grayed. Those users have the &#039;&#039;task permission,&#039;&#039; not to be confused with the WCU task permission&#039;&#039;,&#039;&#039; described above. Also, the users visible are enabled, disabled users will not be displayed.&lt;br /&gt;
&lt;br /&gt;
[[File:Users-with-read-permission-tasks-panel.png|thumb|Users with Permission on a Specific Task]]&lt;br /&gt;
&lt;br /&gt;
To give a user the permission to see the task, simply move the user from the left side to the right side. This is accomplished by selecting one or more users and then click the right-arrow. Conversely, to remove a user from the permission select the users from the right side and click the left-arrow. At the top of the left side you can search for users by typing and as you go the users will be filtered to match what you type.&lt;br /&gt;
&lt;br /&gt;
In the picture &amp;quot;Users with Permission on a Specific Task&amp;quot; to the right you see the user &#039;serverTriggerUser&#039; which is an enabled user which do not yet have the permission to see the task.&lt;br /&gt;
&lt;br /&gt;
==== Bottom selection &amp;quot;Add who can see task&amp;quot; ====&lt;br /&gt;
The bottom selection from above &#039;Add who can see task&#039; will not list who already has access to the task, but rather just list all users available regardless whether they already have permission or not to the task.&lt;br /&gt;
&lt;br /&gt;
You can also give a user permission to all running tasks on WCUs whose task types that user has access to. See [[The Portal Administrator View#The New User Dialog|The new user dialog]] (the portal administrator view).&lt;br /&gt;
&lt;br /&gt;
==== Add permission to historical tasks on permission update ====&lt;br /&gt;
[[File:Add permission to existing tasks on permission update.png|thumb|Add permission to existing tasks on permission update]]&lt;br /&gt;
From version 2.98 of the WICE portal it is possible to give users access to existing tasks when updating the WCU Task permission. See screenshot &amp;quot;Add permission to existing tasks on permission update&amp;quot;. In &amp;quot;Apply updated permission&amp;quot; it is possible to select the desired task statuses (for example only running tasks, stopped tasks etc) to apply the permission update to. For some environments all, or a subset of, statuses are preselected as default values. When saving this permission with &amp;quot;Selected resources&amp;quot; checked, any existing task having the the desired statuses on the WCUs in the list of &#039;Selected resources&#039; will be accessible for the users with the current permission. This is the same as searching for the WCUs of interest in the Tasks tab and manually adding permissions to these tasks via &amp;quot;Show who can see task&amp;quot; discussed in [[#Top selection &amp;quot;Show who can see task&amp;quot;]].&lt;br /&gt;
&lt;br /&gt;
Note that applying updated permission to tasks always applies to all resources in &#039;Selected resources&#039; so it is not possible to a subset of the resources.&lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Remove permission to historical tasks on permission update&#039;&#039;&#039; ====&lt;br /&gt;
As discussed in [[Roles and permissions#Permission for specific tasks|Permission for specific tasks]] a user has access to a historical task on a WCU even if that WCU is removed from the WCU Task permission. To remove the permission for historical tasks one have to lists the tasks in the Tasks tab, use &amp;quot;Show who can see task&amp;quot; and remove the users manually. &lt;br /&gt;
[[File:Remove permission for existing tasks.png|thumb|Remove permission for existing tasks when updating a WCU Task permission]]&lt;br /&gt;
Similar to &amp;quot;Add permission to historical tasks on permission update&amp;quot; discussed above, this can from version 2.98 be done when updating a WCU Task permission. In the screenshot &amp;quot;Remove permission for existing tasks when updating a WCU Task permission&amp;quot; the WCU &amp;quot;johan4&amp;quot;is removed from the permission. In &amp;quot;Apply updated permission&amp;quot; &#039;Remove resources&amp;quot; is selected along with all existing Task statuses. This will remove access to any existing tasks on &#039;johan4&#039; for the users having the role the current permission is part of.  &lt;br /&gt;
&lt;br /&gt;
Like for &amp;quot;Add permission to historical tasks on permission update&amp;quot; the list of desired Tasks statuses might be preselected as default values. &lt;br /&gt;
&lt;br /&gt;
{{DEFAULTSORT:Rolas and Permissions}}&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=Roles_and_permissions&amp;diff=4182</id>
		<title>Roles and permissions</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=Roles_and_permissions&amp;diff=4182"/>
		<updated>2026-05-20T09:13:36Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: /* Permission for specific tasks */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;includeonly&amp;gt;====Roles and permissions====&amp;lt;/includeonly&amp;gt;&lt;br /&gt;
In order to restrict access to resources and functions in the portal, there is a framework using roles and permissions. Permissions are given on a set of resources. These permissions are grouped into roles, and roles are then attached to one or several users to be granted specific permissions.&lt;br /&gt;
&lt;br /&gt;
The “Edit roles and permission” dialog can be seen in Figure &amp;quot;Edit Roles and Permissions Dialog&amp;quot;. It consists of three tables. The top left table holds a list of the roles, the top right holds the user(s) for the selected role and the bottom one hold the selected role&#039;s permissions. Their size is adjustable and you can minimize them by clicking on the line between them.&lt;br /&gt;
[[File:Roles and permissions panel-20210217-144811.png|left|thumb|400x400px|Edit Roles and Permissions Dialog]]&lt;br /&gt;
&amp;lt;br clear=&amp;quot;all&amp;quot;&amp;gt;&lt;br /&gt;
You add a new role by pressing the button “Add role” and delete a role along with its permissions by pressing the red button next to it. When making a role you add a description and unique name. To edit an already existing role, double click the entry you wish to edit.&lt;br /&gt;
&lt;br /&gt;
When you select a role in the top left table, the lower table shows that specific role&#039;s permissions and the upper right table shows which users have that role. The permissions table consists of two columns, a string that is the actual permission and the set of resources that apply to that permission. &lt;br /&gt;
&lt;br /&gt;
=== Creating and editing roles and permissions ===&lt;br /&gt;
&lt;br /&gt;
[[File:Add permission.png|thumb|Creating New Permission]]&lt;br /&gt;
&lt;br /&gt;
To create a new permission press the “Add permission” button. It opens the following interaction depicted in Figure &amp;quot;Creating New Permission&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
[[File:Editing permissions.png|thumb|400x400px|Editing Task Permissions]]&lt;br /&gt;
&lt;br /&gt;
# Select what kind of permission you want. There are a number of different permissions, ten for WCUs and one to give permission to all tasks (the task permission can not be modified). The permissions are:&lt;br /&gt;
## &#039;&#039;&#039;Task&#039;&#039;&#039;. A special permission which is used to give users access to every existing task in the system. Typically only used for admins.&lt;br /&gt;
## &#039;&#039;&#039;Assignment Creator&#039;&#039;&#039;. This permission handles access to creating/editing/viewing assignments in the tab Assignment (see [[Signal Reader Assignment Wizard|signal reader]] and [[Area5 Assignment Wizard|Area5]]). Having a read-permission means that you can see a list of assignments but you cannot go ahead and edit or create them. A write-permission on the other hand makes you eligible to edit and create assignments. Currently, the permission is only relevant for signal reader and Area5. &lt;br /&gt;
## &#039;&#039;&#039;Vehicle Profile&#039;&#039;&#039; See [[#Vehicle Profile permission]]&lt;br /&gt;
## &#039;&#039;&#039;WCU Task&#039;&#039;&#039; Controls if a user is permitted to create/see tasks of a specific type on a WCU. More what this means is discussed below in &amp;quot;Permission to specific tasks&amp;quot;&lt;br /&gt;
## &#039;&#039;&#039;WCU Configuration.&#039;&#039;&#039; This permission controls whether you are allowed to work with a WCU&#039;s configuration.&lt;br /&gt;
## &#039;&#039;&#039;WCU Module&#039;&#039;&#039;. The permission controls the access to individual module configurations on a WCU. An example of a module is Signal reader.&lt;br /&gt;
## &#039;&#039;&#039;WCU Monitor&#039;&#039;&#039;. A task can have a monitor function to report data in real time. In order to see the real time data the user must have this permission.&lt;br /&gt;
## &#039;&#039;&#039;WCU Plot route&#039;&#039;&#039;. To see a historic GPS track of a WCU a user must have this permission.&lt;br /&gt;
## &#039;&#039;&#039;WCU Position&#039;&#039;&#039;. Allows a user to see a WCU&#039;s current position.&lt;br /&gt;
## &#039;&#039;&#039;WCU Shelving&#039;&#039;&#039;. Allows a user to handle any shelving, unshelving and refurbishing of a WCU.&lt;br /&gt;
## &#039;&#039;&#039;WCU View&#039;&#039;&#039;. This permission applies to the Vehicles tab. It has to do with whether you are allowed to list a WCU in the table. Selecting this subtype makes the subtype type part unnecessary and therefore, it is removed if you choose this resource type.&lt;br /&gt;
##&#039;&#039;&#039;WCU Connect&#039;&#039;&#039;. Allows a user to connect a WCU to a vehicle.&lt;br /&gt;
##&#039;&#039;&#039;Vehicle Create&#039;&#039;&#039; See [[Roles and permissions#Vehicle Create permission|#Vehicle Create permissions]]&lt;br /&gt;
##&#039;&#039;&#039;Resource Group Manage&#039;&#039;&#039; See [[#Resource Group Manage permission]]&lt;br /&gt;
##&#039;&#039;&#039;Resource Group Create&#039;&#039;&#039; See [[#Resource Group Create permission]]&lt;br /&gt;
##&#039;&#039;&#039;View Inactive WCU&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to view inactive WCUs.&lt;br /&gt;
##&#039;&#039;&#039;View Inactive Vehicle&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to view inactive vehicles.&lt;br /&gt;
##&#039;&#039;&#039;Vehicle Edit&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to edit vehicles.&lt;br /&gt;
# Choosing if the permission should be a read and/or write permission. One of these have to be selected or you will not be able to save changes.&lt;br /&gt;
# Selecting which resources that apply to the permission. The selection is made using the two tables you see in Figure &amp;quot;Editing Task Permissions&amp;quot;. To select a resource, which can be a resource group, you enter the name of the resource in the left table filter area. As you type, the table is automatically filled with resources matching the criteria. If a resource is part of a resource group the icon to the left is shown. If you hold the mouse over the resource name you will see which resource group it is part of. If you instead see the icon shown to the left, the resource is a resource group. Holding the mouse over the entry will show you which resources are part of the resource group. To select a resource, drag it over to the right table or select the resource and then press the right-arrow. To deselect a resource, drag it to the left table or press the left-arrow. There is a “Select all” option. It selects all current and future resources to which this permission should be applied. [[File:Labels in permissions1.png|thumb|Select resources by labels]][[File:Permission label2.png|thumb|Resource selected by label]]From version 2.93 of the WICE portal it is also possible to let labels select the resources that will be part of the permission. When a label is selected as in the screenshot to the right, the WCUs which are currently associated with the label are added to the set of selected resources. Multiple labels can also be used to either collect more resources or narrow down the resources depending on the chosen relation between the labels.  After the permission has been saved, any additional resources which get associated with the labels used in the permission will automatically be added to the permission. Since these labels now controls one or many permissions, only the users with the role admin can add or remove the labels from resources as long as they are part of any permission.&lt;br /&gt;
# Set what type of tasks the permission applies to. It is automatically set to have all selected but you can unselect all and selecting other tasks. This option is only available on the &#039;&#039;&#039;WCU task&#039;&#039;&#039;, &#039;&#039;&#039;assignment&#039;&#039;&#039; &#039;&#039;&#039;creator,&#039;&#039;&#039; &#039;&#039;&#039;monitor&#039;&#039;&#039; and &#039;&#039;&#039;module&#039;&#039;&#039; permissions. It corresponds to the set of available modules for a WCU.&lt;br /&gt;
When you are done press &amp;quot;Save changes&amp;quot; or &amp;quot;Reset changes&amp;quot; if you want to revert the changes. You can always edit the permission by selecting it in the table. The dialog described above will show  and you can make your changes, except that you can not change what type of task it is.&lt;br /&gt;
&lt;br /&gt;
==== Assignment Creator permission ====&lt;br /&gt;
This permission concerns the [[Signal Reader Assignment Editor|signal reader assignment editor]]. If you give the user a read permission they can look at already created assignments. If you give a user the write permission they will also be able to create and delete assignments.&lt;br /&gt;
&lt;br /&gt;
==== Vehicle Profile permission ====&lt;br /&gt;
With this permission you can delegate to individual users the possibility to view vehicle profiles if given the read permission. This makes the tab visible in the GUI but all buttons concerning editing/adding/removing are disabled. If a user has the write permission as well, the user will be able to edit/add and remove vehicle profiles. &lt;br /&gt;
&lt;br /&gt;
==== Vehicle Create permission ====&lt;br /&gt;
This permission enables a user to do [[The Portal Administrator View#Add Vehicle Dialog|Add Vehicle]]. This will also let a user view any disconnected vehicles in the vehicles tab.&lt;br /&gt;
&lt;br /&gt;
==== Resource Group Manage permission ====&lt;br /&gt;
This permission enables a user to [[The Portal Administrator View#Resource Groups|manage resource groups]]. Managing resource groups entails adding and removing WCUs from groups, editing groups, and removing groups. It will also enable access to the Resource groups panel.&lt;br /&gt;
&lt;br /&gt;
==== Resource Group Create permission ====&lt;br /&gt;
This permission enables a user to create resource groups by pressing Add New in the Resource groups panel of the Administration tab. It will also enable access to the Resource groups panel. Any permissions that may be needed to initially manage or edit the created resource group will be added to a role specific to the creator upon creating the group.&lt;br /&gt;
&lt;br /&gt;
=== Selecting resources using uploaded file ===&lt;br /&gt;
As described above, you can select resources in the select resources widget. In addition to this, you can upload a file containing the vehicles or WCUs that you would like to apply to a permission or a set of permissions. By pressing the button called &#039;Import vehicle file&#039; you will be presented with a dialog where you can upload a file containing multiple vehicles or WCUs. You can either upload an excel file or a CSV type of text file. What is important is that there is a header column saying what type of identifiers can be found in the file. Identifiers currently supported are: vin, plate or wcu. An example content of file (CSV):&lt;br /&gt;
&lt;br /&gt;
&amp;lt;kbd&amp;gt;&lt;br /&gt;
wcu&amp;lt;br&amp;gt;&lt;br /&gt;
04-1B-35-98&amp;lt;br&amp;gt;&lt;br /&gt;
90-80-AA&amp;lt;br&amp;gt;&lt;br /&gt;
&amp;lt;/kbd&amp;gt;&lt;br /&gt;
[[File:Import vehcile file-20210217-151236.png|thumb|Import a vehicle file for permission resource selection]]&lt;br /&gt;
Just by changing the heading to plate or vin you should reference such identifiers in the file. The dialog also presents the option to ignore resources not found and apply the changes for those found. The default is however to do nothing if any of the resources are not found. The checkbox &#039;Ignore unconnected vehicles&#039; is only applicable if you have plate or vin identifiers.&lt;br /&gt;
&lt;br /&gt;
If you have selected a permission in the permission table, the resources in the file will be applied to only the selected permission. If you have selected a role in the top leftmost table, the resources in the file will be applied to all permissions of the role.&lt;br /&gt;
&lt;br /&gt;
=== Changing a users roles and permissions ===&lt;br /&gt;
You can change a user&#039;s roles under in the edit user dialog if you press the button &amp;quot;Edit user roles&amp;quot;. The edit user dialog then gets extended as two boxes appear, a left one with available roles and a right one with current roles. In the left one you can search the role(s) you want and drag them to the right box or press the button pointing right. With the two buttons at the bottom corner(the paper and clipboard ones) you can copy the names of the roles and also insert the names of roles to add them.&lt;br /&gt;
&lt;br /&gt;
You can also change a users permission to view tasks in the tasks tab: By right-clicking the task(s) you want to change permissions for and hovering over &amp;quot;Permission&amp;quot; you will get the options &amp;quot;Show who can see task&amp;quot; and &amp;quot;Add who can see task&amp;quot;. &amp;quot;Show who can see task&amp;quot; will open a window with a left and a right box where the left contains users without permission to view the task and the right contains users who have permission. By moving users from the left to right and vice versa you can give or remove someones permission. You can also press the clipboard the the right bottom to copy the users who have permissions or add users by writing their name within parentheses. Users in the right box can be unselectable and that is if they have a role giving them the permission to view that task the only way to remove that is to remove that role from them. &amp;quot;Add who can see task&amp;quot; works the same way as &amp;quot;Show who can see task&amp;quot; except that the right box does not show users with permission so you can not remove permissions, this is so that with add you can add permissions for many tasks at the same time as the show can not show users from many tasks.&lt;br /&gt;
&lt;br /&gt;
[[File:Copy user assignment permissions.png|thumb|300x300px|Copy User Task Permissions Dialog]]&lt;br /&gt;
&lt;br /&gt;
You can also edit a users role by searching for user(s) and right clicking on them to get a window with different options. There are five different options where the three first can be used on multiple users at the same time while the bottom two can not.&lt;br /&gt;
* &amp;quot;Add user task permissions to this user&amp;quot; will open the dialog shown in Figure &amp;quot;Copy User Task Permissions Dialog&amp;quot;. With this button you take a user&#039;s task permissions and add them to the selected user(s). You do this by searching and selecting a user and then pressing &amp;quot;OK&amp;quot;.&lt;br /&gt;
* &amp;quot;Replace user task permissions with user&amp;quot; will open a similar dialog to the one in Figure &amp;quot;Copy User task Permissions Dialog&amp;quot;. This button is much like the one before except that instead of adding permissions to the current user this replaces the permissions that the selected user(s) have. Here you also search the user whose permissions you want to replace the select them and press &amp;quot;OK&amp;quot;.&lt;br /&gt;
* &amp;quot;Copy user roles to this user&amp;quot; will open a similar dialog to Figure &amp;quot;Copy User Task Permissions Dialog&amp;quot;. Instead of replacing permissions, this dialog replaces selected user(s) roles with the roles of a user who you chose. Search the user whose roles you want to copy for replacement and press &amp;quot;OK&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
[[File:Give permission on car.png|thumb|Give Permission on Vehicle Dialog]]&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
* &amp;quot;Give this user permission to all tasks on vehicle&amp;quot; gives task permission on one or many vehicles. The dialog will look like the dialog in Figure &amp;quot;Give Permission on Vehicle Dialog&amp;quot;. In the left box you select vehicles and move them to the right to give permission on them, you can also as you see below the left box select a file with vehicles to easily select a set of vehicles. Then you select which types of tasks it should give permission to (leaving this empty will not give any permissions). You can also check the checkbox &amp;quot;Reset user permission&amp;quot; to replace the roles of the selected user instead of adding new to the current ones.&lt;br /&gt;
* &amp;quot;Give this user permission to all tasks on WCU&amp;quot; is identical to the previous button except that it applies to WCUs instead of vehicles.&lt;br /&gt;
&lt;br /&gt;
==== User specific roles ====&lt;br /&gt;
A role may also be set to be specific to just one user. Doing this will remove the role from any other users that currently have it as well as prevent adding the role to any other users but the specified user.&lt;br /&gt;
&lt;br /&gt;
=== Permission for specific tasks ===&lt;br /&gt;
The above text discuss permissions as they are found from the User panel. There are also a set of &amp;quot;implicit&amp;quot; permissions created when a new task is created, based on the task type permission discussed above. Let us elaborate a bit on this to make it clear what it means. The use case is as follows; a user has a read task permission on a WCU (&amp;quot;wcu:assignment:soh:read:awcu&amp;quot;). (Observe that a task permission might contain the word &amp;quot;assignment&amp;quot; even if it is referring to a task. Look at the menu names instead to confirm that you are working with a task.) Let us say that a new state-of-health task is created on the WCU (&amp;quot;&#039;&#039;awcu&#039;&#039;&amp;quot;) while the user has the above permission. Regardless of who created the task, the user will now be able to list this task in the Tasks panel and download any data produced. Later, as time goes by, the WCU is no longer used in the particular project and an administrator removes the permission &amp;quot;wcu:assignment:soh:read:awcu&amp;quot; from the user. When new tasks are created on this WCU our user above will not be able to see the new tasks created in the Tasks panel. However, the user will be able to see the previous task, i.e. when the user had the correct permission. Thus, this solution enables users to retain the permission to see historical tasks, let us call this a &#039;&#039;&#039;historical task permission&#039;&#039;&#039;. This type of permission cannot be seen in the permission panel. To see who has access to which &#039;&#039;&#039;historical task&#039;&#039;&#039; you must turn to the Task panel.&lt;br /&gt;
&lt;br /&gt;
[[File:Task-panel-permission.png|thumb|Permission Choices in the Tasks Panel]]&lt;br /&gt;
&lt;br /&gt;
As an administrator you have the possibility to both see and modify who has access to individual tasks. There are two options presented if you right-click an task in the Tasks panel. To the right you see the two choices available. The top choice is only available if you have selected a single row in the table. The bottom one is always available, also if electing multiple rows.&lt;br /&gt;
&lt;br /&gt;
==== Top selection &amp;quot;Show who can see task&amp;quot; ====&lt;br /&gt;
By selecting the top selection you will be presented with a dialog where on the left hand side you have all available users that do not have the permission to see the task. On the right hand side you have the users that have the permission to do so. On the right hand side you might see that some users are grayed. Those users have the &#039;&#039;task permission,&#039;&#039; not to be confused with the WCU task permission&#039;&#039;,&#039;&#039; described above. Also, the users visible are enabled, disabled users will not be displayed.&lt;br /&gt;
&lt;br /&gt;
[[File:Users-with-read-permission-tasks-panel.png|thumb|Users with Permission on a Specific Task]]&lt;br /&gt;
&lt;br /&gt;
To give a user the permission to see the task, simply move the user from the left side to the right side. This is accomplished by selecting one or more users and then click the right-arrow. Conversely, to remove a user from the permission select the users from the right side and click the left-arrow. At the top of the left side you can search for users by typing and as you go the users will be filtered to match what you type.&lt;br /&gt;
&lt;br /&gt;
In the picture &amp;quot;Users with Permission on a Specific Task&amp;quot; to the right you see the user &#039;serverTriggerUser&#039; which is an enabled user which do not yet have the permission to see the task.&lt;br /&gt;
&lt;br /&gt;
==== Bottom selection &amp;quot;Add who can see task&amp;quot; ====&lt;br /&gt;
The bottom selection from above &#039;Add who can see task&#039; will not list who already has access to the task, but rather just list all users available regardless whether they already have permission or not to the task.&lt;br /&gt;
&lt;br /&gt;
You can also give a user permission to all running tasks on WCUs whose task types that user has access to. See [[The Portal Administrator View#The New User Dialog|The new user dialog]] (the portal administrator view).&lt;br /&gt;
&lt;br /&gt;
==== Add permission to historical tasks on permission update ====&lt;br /&gt;
[[File:Add permission to existing tasks on permission update.png|thumb|Add permission to existing tasks on permission update]]&lt;br /&gt;
From version 2.98 of the WICE portal it is possible to give users access to existing tasks when updating the WCU Task permission. See screenshot &amp;quot;Add permission to existing tasks on permission update&amp;quot;. In &amp;quot;Apply updated permission&amp;quot; it is possible to select the desired task statuses (for example only running tasks, stopped tasks etc) to apply the permission update to. For some environments all, or a subset of, statuses are preselected as default values. When saving this permission with &amp;quot;Selected resources&amp;quot; checked, any existing task having the the desired statuses on the WCUs in the list of &#039;Selected resources&#039; will be accessible for the users with the current permission. This is the same as searching for the WCUs of interest in the Tasks tab and manually adding permissions to these tasks via &amp;quot;Show who can see task&amp;quot; discussed in [[#Top selection &amp;quot;Show who can see task&amp;quot;]].&lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Remove permission to historical tasks on permission update&#039;&#039;&#039; ====&lt;br /&gt;
As discussed in [[Roles and permissions#Permission for specific tasks|Permission for specific tasks]] a user has access to a historical task on a WCU even if that WCU is removed from the WCU Task permission. To remove the permission for historical tasks one have to lists the tasks in the Tasks tab, use &amp;quot;Show who can see task&amp;quot; and remove the users manually. &lt;br /&gt;
[[File:Remove permission for existing tasks.png|thumb|Remove permission for existing tasks when updating a WCU Task permission]]&lt;br /&gt;
Similar to &amp;quot;Add permission to historical tasks on permission update&amp;quot; discussed above, this can from version 2.98 be done when updating a WCU Task permission. In the screenshot &amp;quot;Remove permission for existing tasks when updating a WCU Task permission&amp;quot; the WCU &amp;quot;johan4&amp;quot;is removed from the permission. In &amp;quot;Apply updated permission&amp;quot; &#039;Remove resources&amp;quot; is selected along with all existing Task statuses. This will remove access to any existing tasks on &#039;johan4&#039; for the users having the role the current permission is part of.  &lt;br /&gt;
&lt;br /&gt;
Like for &amp;quot;Add permission to historical tasks on permission update&amp;quot; the list of desired Tasks statuses might be preselected as default values. &lt;br /&gt;
&lt;br /&gt;
{{DEFAULTSORT:Rolas and Permissions}}&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=File:Remove_permission_for_existing_tasks.png&amp;diff=4181</id>
		<title>File:Remove permission for existing tasks.png</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=File:Remove_permission_for_existing_tasks.png&amp;diff=4181"/>
		<updated>2026-05-20T09:09:30Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;Remove permission for existing tasks when updating a WCU Task permission&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=Roles_and_permissions&amp;diff=4180</id>
		<title>Roles and permissions</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=Roles_and_permissions&amp;diff=4180"/>
		<updated>2026-05-20T09:08:45Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: /* Remove permission to historical tasks on permission update */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;includeonly&amp;gt;====Roles and permissions====&amp;lt;/includeonly&amp;gt;&lt;br /&gt;
In order to restrict access to resources and functions in the portal, there is a framework using roles and permissions. Permissions are given on a set of resources. These permissions are grouped into roles, and roles are then attached to one or several users to be granted specific permissions.&lt;br /&gt;
&lt;br /&gt;
The “Edit roles and permission” dialog can be seen in Figure &amp;quot;Edit Roles and Permissions Dialog&amp;quot;. It consists of three tables. The top left table holds a list of the roles, the top right holds the user(s) for the selected role and the bottom one hold the selected role&#039;s permissions. Their size is adjustable and you can minimize them by clicking on the line between them.&lt;br /&gt;
[[File:Roles and permissions panel-20210217-144811.png|left|thumb|400x400px|Edit Roles and Permissions Dialog]]&lt;br /&gt;
&amp;lt;br clear=&amp;quot;all&amp;quot;&amp;gt;&lt;br /&gt;
You add a new role by pressing the button “Add role” and delete a role along with its permissions by pressing the red button next to it. When making a role you add a description and unique name. To edit an already existing role, double click the entry you wish to edit.&lt;br /&gt;
&lt;br /&gt;
When you select a role in the top left table, the lower table shows that specific role&#039;s permissions and the upper right table shows which users have that role. The permissions table consists of two columns, a string that is the actual permission and the set of resources that apply to that permission. &lt;br /&gt;
&lt;br /&gt;
=== Creating and editing roles and permissions ===&lt;br /&gt;
&lt;br /&gt;
[[File:Add permission.png|thumb|Creating New Permission]]&lt;br /&gt;
&lt;br /&gt;
To create a new permission press the “Add permission” button. It opens the following interaction depicted in Figure &amp;quot;Creating New Permission&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
[[File:Editing permissions.png|thumb|400x400px|Editing Task Permissions]]&lt;br /&gt;
&lt;br /&gt;
# Select what kind of permission you want. There are a number of different permissions, ten for WCUs and one to give permission to all tasks (the task permission can not be modified). The permissions are:&lt;br /&gt;
## &#039;&#039;&#039;Task&#039;&#039;&#039;. A special permission which is used to give users access to every existing task in the system. Typically only used for admins.&lt;br /&gt;
## &#039;&#039;&#039;Assignment Creator&#039;&#039;&#039;. This permission handles access to creating/editing/viewing assignments in the tab Assignment (see [[Signal Reader Assignment Wizard|signal reader]] and [[Area5 Assignment Wizard|Area5]]). Having a read-permission means that you can see a list of assignments but you cannot go ahead and edit or create them. A write-permission on the other hand makes you eligible to edit and create assignments. Currently, the permission is only relevant for signal reader and Area5. &lt;br /&gt;
## &#039;&#039;&#039;Vehicle Profile&#039;&#039;&#039; See [[#Vehicle Profile permission]]&lt;br /&gt;
## &#039;&#039;&#039;WCU Task&#039;&#039;&#039; Controls if a user is permitted to create/see tasks of a specific type on a WCU. More what this means is discussed below in &amp;quot;Permission to specific tasks&amp;quot;&lt;br /&gt;
## &#039;&#039;&#039;WCU Configuration.&#039;&#039;&#039; This permission controls whether you are allowed to work with a WCU&#039;s configuration.&lt;br /&gt;
## &#039;&#039;&#039;WCU Module&#039;&#039;&#039;. The permission controls the access to individual module configurations on a WCU. An example of a module is Signal reader.&lt;br /&gt;
## &#039;&#039;&#039;WCU Monitor&#039;&#039;&#039;. A task can have a monitor function to report data in real time. In order to see the real time data the user must have this permission.&lt;br /&gt;
## &#039;&#039;&#039;WCU Plot route&#039;&#039;&#039;. To see a historic GPS track of a WCU a user must have this permission.&lt;br /&gt;
## &#039;&#039;&#039;WCU Position&#039;&#039;&#039;. Allows a user to see a WCU&#039;s current position.&lt;br /&gt;
## &#039;&#039;&#039;WCU Shelving&#039;&#039;&#039;. Allows a user to handle any shelving, unshelving and refurbishing of a WCU.&lt;br /&gt;
## &#039;&#039;&#039;WCU View&#039;&#039;&#039;. This permission applies to the Vehicles tab. It has to do with whether you are allowed to list a WCU in the table. Selecting this subtype makes the subtype type part unnecessary and therefore, it is removed if you choose this resource type.&lt;br /&gt;
##&#039;&#039;&#039;WCU Connect&#039;&#039;&#039;. Allows a user to connect a WCU to a vehicle.&lt;br /&gt;
##&#039;&#039;&#039;Vehicle Create&#039;&#039;&#039; See [[Roles and permissions#Vehicle Create permission|#Vehicle Create permissions]]&lt;br /&gt;
##&#039;&#039;&#039;Resource Group Manage&#039;&#039;&#039; See [[#Resource Group Manage permission]]&lt;br /&gt;
##&#039;&#039;&#039;Resource Group Create&#039;&#039;&#039; See [[#Resource Group Create permission]]&lt;br /&gt;
##&#039;&#039;&#039;View Inactive WCU&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to view inactive WCUs.&lt;br /&gt;
##&#039;&#039;&#039;View Inactive Vehicle&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to view inactive vehicles.&lt;br /&gt;
##&#039;&#039;&#039;Vehicle Edit&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to edit vehicles.&lt;br /&gt;
# Choosing if the permission should be a read and/or write permission. One of these have to be selected or you will not be able to save changes.&lt;br /&gt;
# Selecting which resources that apply to the permission. The selection is made using the two tables you see in Figure &amp;quot;Editing Task Permissions&amp;quot;. To select a resource, which can be a resource group, you enter the name of the resource in the left table filter area. As you type, the table is automatically filled with resources matching the criteria. If a resource is part of a resource group the icon to the left is shown. If you hold the mouse over the resource name you will see which resource group it is part of. If you instead see the icon shown to the left, the resource is a resource group. Holding the mouse over the entry will show you which resources are part of the resource group. To select a resource, drag it over to the right table or select the resource and then press the right-arrow. To deselect a resource, drag it to the left table or press the left-arrow. There is a “Select all” option. It selects all current and future resources to which this permission should be applied. [[File:Labels in permissions1.png|thumb|Select resources by labels]][[File:Permission label2.png|thumb|Resource selected by label]]From version 2.93 of the WICE portal it is also possible to let labels select the resources that will be part of the permission. When a label is selected as in the screenshot to the right, the WCUs which are currently associated with the label are added to the set of selected resources. Multiple labels can also be used to either collect more resources or narrow down the resources depending on the chosen relation between the labels.  After the permission has been saved, any additional resources which get associated with the labels used in the permission will automatically be added to the permission. Since these labels now controls one or many permissions, only the users with the role admin can add or remove the labels from resources as long as they are part of any permission.&lt;br /&gt;
# Set what type of tasks the permission applies to. It is automatically set to have all selected but you can unselect all and selecting other tasks. This option is only available on the &#039;&#039;&#039;WCU task&#039;&#039;&#039;, &#039;&#039;&#039;assignment&#039;&#039;&#039; &#039;&#039;&#039;creator,&#039;&#039;&#039; &#039;&#039;&#039;monitor&#039;&#039;&#039; and &#039;&#039;&#039;module&#039;&#039;&#039; permissions. It corresponds to the set of available modules for a WCU.&lt;br /&gt;
When you are done press &amp;quot;Save changes&amp;quot; or &amp;quot;Reset changes&amp;quot; if you want to revert the changes. You can always edit the permission by selecting it in the table. The dialog described above will show  and you can make your changes, except that you can not change what type of task it is.&lt;br /&gt;
&lt;br /&gt;
==== Assignment Creator permission ====&lt;br /&gt;
This permission concerns the [[Signal Reader Assignment Editor|signal reader assignment editor]]. If you give the user a read permission they can look at already created assignments. If you give a user the write permission they will also be able to create and delete assignments.&lt;br /&gt;
&lt;br /&gt;
==== Vehicle Profile permission ====&lt;br /&gt;
With this permission you can delegate to individual users the possibility to view vehicle profiles if given the read permission. This makes the tab visible in the GUI but all buttons concerning editing/adding/removing are disabled. If a user has the write permission as well, the user will be able to edit/add and remove vehicle profiles. &lt;br /&gt;
&lt;br /&gt;
==== Vehicle Create permission ====&lt;br /&gt;
This permission enables a user to do [[The Portal Administrator View#Add Vehicle Dialog|Add Vehicle]]. This will also let a user view any disconnected vehicles in the vehicles tab.&lt;br /&gt;
&lt;br /&gt;
==== Resource Group Manage permission ====&lt;br /&gt;
This permission enables a user to [[The Portal Administrator View#Resource Groups|manage resource groups]]. Managing resource groups entails adding and removing WCUs from groups, editing groups, and removing groups. It will also enable access to the Resource groups panel.&lt;br /&gt;
&lt;br /&gt;
==== Resource Group Create permission ====&lt;br /&gt;
This permission enables a user to create resource groups by pressing Add New in the Resource groups panel of the Administration tab. It will also enable access to the Resource groups panel. Any permissions that may be needed to initially manage or edit the created resource group will be added to a role specific to the creator upon creating the group.&lt;br /&gt;
&lt;br /&gt;
=== Selecting resources using uploaded file ===&lt;br /&gt;
As described above, you can select resources in the select resources widget. In addition to this, you can upload a file containing the vehicles or WCUs that you would like to apply to a permission or a set of permissions. By pressing the button called &#039;Import vehicle file&#039; you will be presented with a dialog where you can upload a file containing multiple vehicles or WCUs. You can either upload an excel file or a CSV type of text file. What is important is that there is a header column saying what type of identifiers can be found in the file. Identifiers currently supported are: vin, plate or wcu. An example content of file (CSV):&lt;br /&gt;
&lt;br /&gt;
&amp;lt;kbd&amp;gt;&lt;br /&gt;
wcu&amp;lt;br&amp;gt;&lt;br /&gt;
04-1B-35-98&amp;lt;br&amp;gt;&lt;br /&gt;
90-80-AA&amp;lt;br&amp;gt;&lt;br /&gt;
&amp;lt;/kbd&amp;gt;&lt;br /&gt;
[[File:Import vehcile file-20210217-151236.png|thumb|Import a vehicle file for permission resource selection]]&lt;br /&gt;
Just by changing the heading to plate or vin you should reference such identifiers in the file. The dialog also presents the option to ignore resources not found and apply the changes for those found. The default is however to do nothing if any of the resources are not found. The checkbox &#039;Ignore unconnected vehicles&#039; is only applicable if you have plate or vin identifiers.&lt;br /&gt;
&lt;br /&gt;
If you have selected a permission in the permission table, the resources in the file will be applied to only the selected permission. If you have selected a role in the top leftmost table, the resources in the file will be applied to all permissions of the role.&lt;br /&gt;
&lt;br /&gt;
=== Changing a users roles and permissions ===&lt;br /&gt;
You can change a user&#039;s roles under in the edit user dialog if you press the button &amp;quot;Edit user roles&amp;quot;. The edit user dialog then gets extended as two boxes appear, a left one with available roles and a right one with current roles. In the left one you can search the role(s) you want and drag them to the right box or press the button pointing right. With the two buttons at the bottom corner(the paper and clipboard ones) you can copy the names of the roles and also insert the names of roles to add them.&lt;br /&gt;
&lt;br /&gt;
You can also change a users permission to view tasks in the tasks tab: By right-clicking the task(s) you want to change permissions for and hovering over &amp;quot;Permission&amp;quot; you will get the options &amp;quot;Show who can see task&amp;quot; and &amp;quot;Add who can see task&amp;quot;. &amp;quot;Show who can see task&amp;quot; will open a window with a left and a right box where the left contains users without permission to view the task and the right contains users who have permission. By moving users from the left to right and vice versa you can give or remove someones permission. You can also press the clipboard the the right bottom to copy the users who have permissions or add users by writing their name within parentheses. Users in the right box can be unselectable and that is if they have a role giving them the permission to view that task the only way to remove that is to remove that role from them. &amp;quot;Add who can see task&amp;quot; works the same way as &amp;quot;Show who can see task&amp;quot; except that the right box does not show users with permission so you can not remove permissions, this is so that with add you can add permissions for many tasks at the same time as the show can not show users from many tasks.&lt;br /&gt;
&lt;br /&gt;
[[File:Copy user assignment permissions.png|thumb|300x300px|Copy User Task Permissions Dialog]]&lt;br /&gt;
&lt;br /&gt;
You can also edit a users role by searching for user(s) and right clicking on them to get a window with different options. There are five different options where the three first can be used on multiple users at the same time while the bottom two can not.&lt;br /&gt;
* &amp;quot;Add user task permissions to this user&amp;quot; will open the dialog shown in Figure &amp;quot;Copy User Task Permissions Dialog&amp;quot;. With this button you take a user&#039;s task permissions and add them to the selected user(s). You do this by searching and selecting a user and then pressing &amp;quot;OK&amp;quot;.&lt;br /&gt;
* &amp;quot;Replace user task permissions with user&amp;quot; will open a similar dialog to the one in Figure &amp;quot;Copy User task Permissions Dialog&amp;quot;. This button is much like the one before except that instead of adding permissions to the current user this replaces the permissions that the selected user(s) have. Here you also search the user whose permissions you want to replace the select them and press &amp;quot;OK&amp;quot;.&lt;br /&gt;
* &amp;quot;Copy user roles to this user&amp;quot; will open a similar dialog to Figure &amp;quot;Copy User Task Permissions Dialog&amp;quot;. Instead of replacing permissions, this dialog replaces selected user(s) roles with the roles of a user who you chose. Search the user whose roles you want to copy for replacement and press &amp;quot;OK&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
[[File:Give permission on car.png|thumb|Give Permission on Vehicle Dialog]]&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
* &amp;quot;Give this user permission to all tasks on vehicle&amp;quot; gives task permission on one or many vehicles. The dialog will look like the dialog in Figure &amp;quot;Give Permission on Vehicle Dialog&amp;quot;. In the left box you select vehicles and move them to the right to give permission on them, you can also as you see below the left box select a file with vehicles to easily select a set of vehicles. Then you select which types of tasks it should give permission to (leaving this empty will not give any permissions). You can also check the checkbox &amp;quot;Reset user permission&amp;quot; to replace the roles of the selected user instead of adding new to the current ones.&lt;br /&gt;
* &amp;quot;Give this user permission to all tasks on WCU&amp;quot; is identical to the previous button except that it applies to WCUs instead of vehicles.&lt;br /&gt;
&lt;br /&gt;
==== User specific roles ====&lt;br /&gt;
A role may also be set to be specific to just one user. Doing this will remove the role from any other users that currently have it as well as prevent adding the role to any other users but the specified user.&lt;br /&gt;
&lt;br /&gt;
=== Permission for specific tasks ===&lt;br /&gt;
The above text discuss permissions as they are found from the User panel. There are also a set of &amp;quot;implicit&amp;quot; permissions created when a new task is created, based on the task type permission discussed above. Let us elaborate a bit on this to make it clear what it means. The use case is as follows; a user has a read task permission on a WCU (&amp;quot;wcu:assignment:soh:read:awcu&amp;quot;). (Observe that a task permission might contain the word &amp;quot;assignment&amp;quot; even if it is referring to a task. Look at the menu names instead to confirm that you are working with a task.) Let us say that a new state-of-health task is created on the WCU (&amp;quot;&#039;&#039;awcu&#039;&#039;&amp;quot;) while the user has the above permission. Regardless of who created the task, the user will now be able to list this task in the Tasks panel and download any data produced. Later, as time goes by, the WCU is no longer used in the particular project and an administrator removes the permission &amp;quot;wcu:assignment:soh:read:awcu&amp;quot; from the user. When new tasks are created on this WCU our user above will not be able to see the new tasks created in the Tasks panel. However, the user will be able to see the previous task, i.e. when the user had the correct permission. Thus, this solution enables users to retain the permission to see historical tasks, let us call this a &#039;&#039;&#039;historical task permission&#039;&#039;&#039;. This type of permission cannot be seen in the permission panel. To see who has access to which &#039;&#039;&#039;historical task&#039;&#039;&#039; you must turn to the Task panel.&lt;br /&gt;
&lt;br /&gt;
[[File:Task-panel-permission.png|thumb|Permission Choices in the Tasks Panel]]&lt;br /&gt;
&lt;br /&gt;
As an administrator you have the possibility to both see and modify who has access to individual tasks. There are two options presented if you right-click an task in the Tasks panel. To the right you see the two choices available. The top choice is only available if you have selected a single row in the table. The bottom one is always available, also if electing multiple rows.&lt;br /&gt;
&lt;br /&gt;
==== Top selection &amp;quot;Show who can see task&amp;quot; ====&lt;br /&gt;
By selecting the top selection you will be presented with a dialog where on the left hand side you have all available users that do not have the permission to see the task. On the right hand side you have the users that have the permission to do so. On the right hand side you might see that some users are grayed. Those users have the &#039;&#039;task permission,&#039;&#039; not to be confused with the WCU task permission&#039;&#039;,&#039;&#039; described above. Also, the users visible are enabled, disabled users will not be displayed.&lt;br /&gt;
&lt;br /&gt;
[[File:Users-with-read-permission-tasks-panel.png|thumb|Users with Permission on a Specific Task]]&lt;br /&gt;
&lt;br /&gt;
To give a user the permission to see the task, simply move the user from the left side to the right side. This is accomplished by selecting one or more users and then click the right-arrow. Conversely, to remove a user from the permission select the users from the right side and click the left-arrow. At the top of the left side you can search for users by typing and as you go the users will be filtered to match what you type.&lt;br /&gt;
&lt;br /&gt;
In the picture &amp;quot;Users with Permission on a Specific Task&amp;quot; to the right you see the user &#039;serverTriggerUser&#039; which is an enabled user which do not yet have the permission to see the task.&lt;br /&gt;
&lt;br /&gt;
==== Bottom selection &amp;quot;Add who can see task&amp;quot; ====&lt;br /&gt;
The bottom selection from above &#039;Add who can see task&#039; will not list who already has access to the task, but rather just list all users available regardless whether they already have permission or not to the task.&lt;br /&gt;
&lt;br /&gt;
You can also give a user permission to all running tasks on WCUs whose task types that user has access to. See [[The Portal Administrator View#The New User Dialog|The new user dialog]] (the portal administrator view).&lt;br /&gt;
&lt;br /&gt;
==== Add permission to historical tasks on permission update ====&lt;br /&gt;
[[File:Add permission to existing tasks on permission update.png|thumb|Add permission to existing tasks on permission update]]&lt;br /&gt;
From version 2.98 of the WICE portal it is possible to give users access to existing tasks when updating the WCU Task permission. See screenshot &amp;quot;Add permission to existing tasks on permission update&amp;quot;. In &amp;quot;Apply updated permission&amp;quot; it is possible to select the desired task statuses (for example only running tasks, stopped tasks etc) to apply the permission update to. For some environments all, or a subset of, statuses are preselected as default values. When saving this permission with &amp;quot;Selected resources&amp;quot; checked, any existing task having the the desired statuses on the WCUs in the list of &#039;Selected resources&#039; will be accessible for the users with the current permission. This is the same as searching for the WCUs of interest in the Tasks tab and manually adding permissions to these tasks via &amp;quot;Show who can see task&amp;quot; discussed in [[#Top selection &amp;quot;Show who can see task&amp;quot;]].&lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Remove permission to historical tasks on permission update&#039;&#039;&#039; ====&lt;br /&gt;
As discussed in [[Roles and permissions#Permission for specific tasks|Permission for specific tasks]] a user has access to a historical task on a WCU even if that WCU is removed from the WCU Task permission. To remove the permission for historical tasks one have to lists the tasks in the Tasks tab, use &amp;quot;Show who can see task&amp;quot; and remove the users manually. &lt;br /&gt;
&lt;br /&gt;
Similar to &amp;quot;Add permission to historical tasks on permission update&amp;quot; discussed above, this can from version 2.98 be done when updating a WCU Task permission. &lt;br /&gt;
&lt;br /&gt;
{{DEFAULTSORT:Rolas and Permissions}}&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=Roles_and_permissions&amp;diff=4179</id>
		<title>Roles and permissions</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=Roles_and_permissions&amp;diff=4179"/>
		<updated>2026-05-20T09:01:07Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: /* Permission for specific tasks */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;includeonly&amp;gt;====Roles and permissions====&amp;lt;/includeonly&amp;gt;&lt;br /&gt;
In order to restrict access to resources and functions in the portal, there is a framework using roles and permissions. Permissions are given on a set of resources. These permissions are grouped into roles, and roles are then attached to one or several users to be granted specific permissions.&lt;br /&gt;
&lt;br /&gt;
The “Edit roles and permission” dialog can be seen in Figure &amp;quot;Edit Roles and Permissions Dialog&amp;quot;. It consists of three tables. The top left table holds a list of the roles, the top right holds the user(s) for the selected role and the bottom one hold the selected role&#039;s permissions. Their size is adjustable and you can minimize them by clicking on the line between them.&lt;br /&gt;
[[File:Roles and permissions panel-20210217-144811.png|left|thumb|400x400px|Edit Roles and Permissions Dialog]]&lt;br /&gt;
&amp;lt;br clear=&amp;quot;all&amp;quot;&amp;gt;&lt;br /&gt;
You add a new role by pressing the button “Add role” and delete a role along with its permissions by pressing the red button next to it. When making a role you add a description and unique name. To edit an already existing role, double click the entry you wish to edit.&lt;br /&gt;
&lt;br /&gt;
When you select a role in the top left table, the lower table shows that specific role&#039;s permissions and the upper right table shows which users have that role. The permissions table consists of two columns, a string that is the actual permission and the set of resources that apply to that permission. &lt;br /&gt;
&lt;br /&gt;
=== Creating and editing roles and permissions ===&lt;br /&gt;
&lt;br /&gt;
[[File:Add permission.png|thumb|Creating New Permission]]&lt;br /&gt;
&lt;br /&gt;
To create a new permission press the “Add permission” button. It opens the following interaction depicted in Figure &amp;quot;Creating New Permission&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
[[File:Editing permissions.png|thumb|400x400px|Editing Task Permissions]]&lt;br /&gt;
&lt;br /&gt;
# Select what kind of permission you want. There are a number of different permissions, ten for WCUs and one to give permission to all tasks (the task permission can not be modified). The permissions are:&lt;br /&gt;
## &#039;&#039;&#039;Task&#039;&#039;&#039;. A special permission which is used to give users access to every existing task in the system. Typically only used for admins.&lt;br /&gt;
## &#039;&#039;&#039;Assignment Creator&#039;&#039;&#039;. This permission handles access to creating/editing/viewing assignments in the tab Assignment (see [[Signal Reader Assignment Wizard|signal reader]] and [[Area5 Assignment Wizard|Area5]]). Having a read-permission means that you can see a list of assignments but you cannot go ahead and edit or create them. A write-permission on the other hand makes you eligible to edit and create assignments. Currently, the permission is only relevant for signal reader and Area5. &lt;br /&gt;
## &#039;&#039;&#039;Vehicle Profile&#039;&#039;&#039; See [[#Vehicle Profile permission]]&lt;br /&gt;
## &#039;&#039;&#039;WCU Task&#039;&#039;&#039; Controls if a user is permitted to create/see tasks of a specific type on a WCU. More what this means is discussed below in &amp;quot;Permission to specific tasks&amp;quot;&lt;br /&gt;
## &#039;&#039;&#039;WCU Configuration.&#039;&#039;&#039; This permission controls whether you are allowed to work with a WCU&#039;s configuration.&lt;br /&gt;
## &#039;&#039;&#039;WCU Module&#039;&#039;&#039;. The permission controls the access to individual module configurations on a WCU. An example of a module is Signal reader.&lt;br /&gt;
## &#039;&#039;&#039;WCU Monitor&#039;&#039;&#039;. A task can have a monitor function to report data in real time. In order to see the real time data the user must have this permission.&lt;br /&gt;
## &#039;&#039;&#039;WCU Plot route&#039;&#039;&#039;. To see a historic GPS track of a WCU a user must have this permission.&lt;br /&gt;
## &#039;&#039;&#039;WCU Position&#039;&#039;&#039;. Allows a user to see a WCU&#039;s current position.&lt;br /&gt;
## &#039;&#039;&#039;WCU Shelving&#039;&#039;&#039;. Allows a user to handle any shelving, unshelving and refurbishing of a WCU.&lt;br /&gt;
## &#039;&#039;&#039;WCU View&#039;&#039;&#039;. This permission applies to the Vehicles tab. It has to do with whether you are allowed to list a WCU in the table. Selecting this subtype makes the subtype type part unnecessary and therefore, it is removed if you choose this resource type.&lt;br /&gt;
##&#039;&#039;&#039;WCU Connect&#039;&#039;&#039;. Allows a user to connect a WCU to a vehicle.&lt;br /&gt;
##&#039;&#039;&#039;Vehicle Create&#039;&#039;&#039; See [[Roles and permissions#Vehicle Create permission|#Vehicle Create permissions]]&lt;br /&gt;
##&#039;&#039;&#039;Resource Group Manage&#039;&#039;&#039; See [[#Resource Group Manage permission]]&lt;br /&gt;
##&#039;&#039;&#039;Resource Group Create&#039;&#039;&#039; See [[#Resource Group Create permission]]&lt;br /&gt;
##&#039;&#039;&#039;View Inactive WCU&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to view inactive WCUs.&lt;br /&gt;
##&#039;&#039;&#039;View Inactive Vehicle&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to view inactive vehicles.&lt;br /&gt;
##&#039;&#039;&#039;Vehicle Edit&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to edit vehicles.&lt;br /&gt;
# Choosing if the permission should be a read and/or write permission. One of these have to be selected or you will not be able to save changes.&lt;br /&gt;
# Selecting which resources that apply to the permission. The selection is made using the two tables you see in Figure &amp;quot;Editing Task Permissions&amp;quot;. To select a resource, which can be a resource group, you enter the name of the resource in the left table filter area. As you type, the table is automatically filled with resources matching the criteria. If a resource is part of a resource group the icon to the left is shown. If you hold the mouse over the resource name you will see which resource group it is part of. If you instead see the icon shown to the left, the resource is a resource group. Holding the mouse over the entry will show you which resources are part of the resource group. To select a resource, drag it over to the right table or select the resource and then press the right-arrow. To deselect a resource, drag it to the left table or press the left-arrow. There is a “Select all” option. It selects all current and future resources to which this permission should be applied. [[File:Labels in permissions1.png|thumb|Select resources by labels]][[File:Permission label2.png|thumb|Resource selected by label]]From version 2.93 of the WICE portal it is also possible to let labels select the resources that will be part of the permission. When a label is selected as in the screenshot to the right, the WCUs which are currently associated with the label are added to the set of selected resources. Multiple labels can also be used to either collect more resources or narrow down the resources depending on the chosen relation between the labels.  After the permission has been saved, any additional resources which get associated with the labels used in the permission will automatically be added to the permission. Since these labels now controls one or many permissions, only the users with the role admin can add or remove the labels from resources as long as they are part of any permission.&lt;br /&gt;
# Set what type of tasks the permission applies to. It is automatically set to have all selected but you can unselect all and selecting other tasks. This option is only available on the &#039;&#039;&#039;WCU task&#039;&#039;&#039;, &#039;&#039;&#039;assignment&#039;&#039;&#039; &#039;&#039;&#039;creator,&#039;&#039;&#039; &#039;&#039;&#039;monitor&#039;&#039;&#039; and &#039;&#039;&#039;module&#039;&#039;&#039; permissions. It corresponds to the set of available modules for a WCU.&lt;br /&gt;
When you are done press &amp;quot;Save changes&amp;quot; or &amp;quot;Reset changes&amp;quot; if you want to revert the changes. You can always edit the permission by selecting it in the table. The dialog described above will show  and you can make your changes, except that you can not change what type of task it is.&lt;br /&gt;
&lt;br /&gt;
==== Assignment Creator permission ====&lt;br /&gt;
This permission concerns the [[Signal Reader Assignment Editor|signal reader assignment editor]]. If you give the user a read permission they can look at already created assignments. If you give a user the write permission they will also be able to create and delete assignments.&lt;br /&gt;
&lt;br /&gt;
==== Vehicle Profile permission ====&lt;br /&gt;
With this permission you can delegate to individual users the possibility to view vehicle profiles if given the read permission. This makes the tab visible in the GUI but all buttons concerning editing/adding/removing are disabled. If a user has the write permission as well, the user will be able to edit/add and remove vehicle profiles. &lt;br /&gt;
&lt;br /&gt;
==== Vehicle Create permission ====&lt;br /&gt;
This permission enables a user to do [[The Portal Administrator View#Add Vehicle Dialog|Add Vehicle]]. This will also let a user view any disconnected vehicles in the vehicles tab.&lt;br /&gt;
&lt;br /&gt;
==== Resource Group Manage permission ====&lt;br /&gt;
This permission enables a user to [[The Portal Administrator View#Resource Groups|manage resource groups]]. Managing resource groups entails adding and removing WCUs from groups, editing groups, and removing groups. It will also enable access to the Resource groups panel.&lt;br /&gt;
&lt;br /&gt;
==== Resource Group Create permission ====&lt;br /&gt;
This permission enables a user to create resource groups by pressing Add New in the Resource groups panel of the Administration tab. It will also enable access to the Resource groups panel. Any permissions that may be needed to initially manage or edit the created resource group will be added to a role specific to the creator upon creating the group.&lt;br /&gt;
&lt;br /&gt;
=== Selecting resources using uploaded file ===&lt;br /&gt;
As described above, you can select resources in the select resources widget. In addition to this, you can upload a file containing the vehicles or WCUs that you would like to apply to a permission or a set of permissions. By pressing the button called &#039;Import vehicle file&#039; you will be presented with a dialog where you can upload a file containing multiple vehicles or WCUs. You can either upload an excel file or a CSV type of text file. What is important is that there is a header column saying what type of identifiers can be found in the file. Identifiers currently supported are: vin, plate or wcu. An example content of file (CSV):&lt;br /&gt;
&lt;br /&gt;
&amp;lt;kbd&amp;gt;&lt;br /&gt;
wcu&amp;lt;br&amp;gt;&lt;br /&gt;
04-1B-35-98&amp;lt;br&amp;gt;&lt;br /&gt;
90-80-AA&amp;lt;br&amp;gt;&lt;br /&gt;
&amp;lt;/kbd&amp;gt;&lt;br /&gt;
[[File:Import vehcile file-20210217-151236.png|thumb|Import a vehicle file for permission resource selection]]&lt;br /&gt;
Just by changing the heading to plate or vin you should reference such identifiers in the file. The dialog also presents the option to ignore resources not found and apply the changes for those found. The default is however to do nothing if any of the resources are not found. The checkbox &#039;Ignore unconnected vehicles&#039; is only applicable if you have plate or vin identifiers.&lt;br /&gt;
&lt;br /&gt;
If you have selected a permission in the permission table, the resources in the file will be applied to only the selected permission. If you have selected a role in the top leftmost table, the resources in the file will be applied to all permissions of the role.&lt;br /&gt;
&lt;br /&gt;
=== Changing a users roles and permissions ===&lt;br /&gt;
You can change a user&#039;s roles under in the edit user dialog if you press the button &amp;quot;Edit user roles&amp;quot;. The edit user dialog then gets extended as two boxes appear, a left one with available roles and a right one with current roles. In the left one you can search the role(s) you want and drag them to the right box or press the button pointing right. With the two buttons at the bottom corner(the paper and clipboard ones) you can copy the names of the roles and also insert the names of roles to add them.&lt;br /&gt;
&lt;br /&gt;
You can also change a users permission to view tasks in the tasks tab: By right-clicking the task(s) you want to change permissions for and hovering over &amp;quot;Permission&amp;quot; you will get the options &amp;quot;Show who can see task&amp;quot; and &amp;quot;Add who can see task&amp;quot;. &amp;quot;Show who can see task&amp;quot; will open a window with a left and a right box where the left contains users without permission to view the task and the right contains users who have permission. By moving users from the left to right and vice versa you can give or remove someones permission. You can also press the clipboard the the right bottom to copy the users who have permissions or add users by writing their name within parentheses. Users in the right box can be unselectable and that is if they have a role giving them the permission to view that task the only way to remove that is to remove that role from them. &amp;quot;Add who can see task&amp;quot; works the same way as &amp;quot;Show who can see task&amp;quot; except that the right box does not show users with permission so you can not remove permissions, this is so that with add you can add permissions for many tasks at the same time as the show can not show users from many tasks.&lt;br /&gt;
&lt;br /&gt;
[[File:Copy user assignment permissions.png|thumb|300x300px|Copy User Task Permissions Dialog]]&lt;br /&gt;
&lt;br /&gt;
You can also edit a users role by searching for user(s) and right clicking on them to get a window with different options. There are five different options where the three first can be used on multiple users at the same time while the bottom two can not.&lt;br /&gt;
* &amp;quot;Add user task permissions to this user&amp;quot; will open the dialog shown in Figure &amp;quot;Copy User Task Permissions Dialog&amp;quot;. With this button you take a user&#039;s task permissions and add them to the selected user(s). You do this by searching and selecting a user and then pressing &amp;quot;OK&amp;quot;.&lt;br /&gt;
* &amp;quot;Replace user task permissions with user&amp;quot; will open a similar dialog to the one in Figure &amp;quot;Copy User task Permissions Dialog&amp;quot;. This button is much like the one before except that instead of adding permissions to the current user this replaces the permissions that the selected user(s) have. Here you also search the user whose permissions you want to replace the select them and press &amp;quot;OK&amp;quot;.&lt;br /&gt;
* &amp;quot;Copy user roles to this user&amp;quot; will open a similar dialog to Figure &amp;quot;Copy User Task Permissions Dialog&amp;quot;. Instead of replacing permissions, this dialog replaces selected user(s) roles with the roles of a user who you chose. Search the user whose roles you want to copy for replacement and press &amp;quot;OK&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
[[File:Give permission on car.png|thumb|Give Permission on Vehicle Dialog]]&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
* &amp;quot;Give this user permission to all tasks on vehicle&amp;quot; gives task permission on one or many vehicles. The dialog will look like the dialog in Figure &amp;quot;Give Permission on Vehicle Dialog&amp;quot;. In the left box you select vehicles and move them to the right to give permission on them, you can also as you see below the left box select a file with vehicles to easily select a set of vehicles. Then you select which types of tasks it should give permission to (leaving this empty will not give any permissions). You can also check the checkbox &amp;quot;Reset user permission&amp;quot; to replace the roles of the selected user instead of adding new to the current ones.&lt;br /&gt;
* &amp;quot;Give this user permission to all tasks on WCU&amp;quot; is identical to the previous button except that it applies to WCUs instead of vehicles.&lt;br /&gt;
&lt;br /&gt;
==== User specific roles ====&lt;br /&gt;
A role may also be set to be specific to just one user. Doing this will remove the role from any other users that currently have it as well as prevent adding the role to any other users but the specified user.&lt;br /&gt;
&lt;br /&gt;
=== Permission for specific tasks ===&lt;br /&gt;
The above text discuss permissions as they are found from the User panel. There are also a set of &amp;quot;implicit&amp;quot; permissions created when a new task is created, based on the task type permission discussed above. Let us elaborate a bit on this to make it clear what it means. The use case is as follows; a user has a read task permission on a WCU (&amp;quot;wcu:assignment:soh:read:awcu&amp;quot;). (Observe that a task permission might contain the word &amp;quot;assignment&amp;quot; even if it is referring to a task. Look at the menu names instead to confirm that you are working with a task.) Let us say that a new state-of-health task is created on the WCU (&amp;quot;&#039;&#039;awcu&#039;&#039;&amp;quot;) while the user has the above permission. Regardless of who created the task, the user will now be able to list this task in the Tasks panel and download any data produced. Later, as time goes by, the WCU is no longer used in the particular project and an administrator removes the permission &amp;quot;wcu:assignment:soh:read:awcu&amp;quot; from the user. When new tasks are created on this WCU our user above will not be able to see the new tasks created in the Tasks panel. However, the user will be able to see the previous task, i.e. when the user had the correct permission. Thus, this solution enables users to retain the permission to see historical tasks, let us call this a &#039;&#039;&#039;historical task permission&#039;&#039;&#039;. This type of permission cannot be seen in the permission panel. To see who has access to which &#039;&#039;&#039;historical task&#039;&#039;&#039; you must turn to the Task panel.&lt;br /&gt;
&lt;br /&gt;
[[File:Task-panel-permission.png|thumb|Permission Choices in the Tasks Panel]]&lt;br /&gt;
&lt;br /&gt;
As an administrator you have the possibility to both see and modify who has access to individual tasks. There are two options presented if you right-click an task in the Tasks panel. To the right you see the two choices available. The top choice is only available if you have selected a single row in the table. The bottom one is always available, also if electing multiple rows.&lt;br /&gt;
&lt;br /&gt;
==== Top selection &amp;quot;Show who can see task&amp;quot; ====&lt;br /&gt;
By selecting the top selection you will be presented with a dialog where on the left hand side you have all available users that do not have the permission to see the task. On the right hand side you have the users that have the permission to do so. On the right hand side you might see that some users are grayed. Those users have the &#039;&#039;task permission,&#039;&#039; not to be confused with the WCU task permission&#039;&#039;,&#039;&#039; described above. Also, the users visible are enabled, disabled users will not be displayed.&lt;br /&gt;
&lt;br /&gt;
[[File:Users-with-read-permission-tasks-panel.png|thumb|Users with Permission on a Specific Task]]&lt;br /&gt;
&lt;br /&gt;
To give a user the permission to see the task, simply move the user from the left side to the right side. This is accomplished by selecting one or more users and then click the right-arrow. Conversely, to remove a user from the permission select the users from the right side and click the left-arrow. At the top of the left side you can search for users by typing and as you go the users will be filtered to match what you type.&lt;br /&gt;
&lt;br /&gt;
In the picture &amp;quot;Users with Permission on a Specific Task&amp;quot; to the right you see the user &#039;serverTriggerUser&#039; which is an enabled user which do not yet have the permission to see the task.&lt;br /&gt;
&lt;br /&gt;
==== Bottom selection &amp;quot;Add who can see task&amp;quot; ====&lt;br /&gt;
The bottom selection from above &#039;Add who can see task&#039; will not list who already has access to the task, but rather just list all users available regardless whether they already have permission or not to the task.&lt;br /&gt;
&lt;br /&gt;
You can also give a user permission to all running tasks on WCUs whose task types that user has access to. See [[The Portal Administrator View#The New User Dialog|The new user dialog]] (the portal administrator view).&lt;br /&gt;
&lt;br /&gt;
==== Add permission to historical tasks on permission update ====&lt;br /&gt;
[[File:Add permission to existing tasks on permission update.png|thumb|Add permission to existing tasks on permission update]]&lt;br /&gt;
From version 2.98 of the WICE portal it is possible to give users access to existing tasks when updating the WCU Task permission. See screenshot &amp;quot;Add permission to existing tasks on permission update&amp;quot;. In &amp;quot;Apply updated permission&amp;quot; it is possible to select the desired task statuses (for example only running tasks, stopped tasks etc) to apply the permission update to. For some environments all, or a subset of, statuses are preselected as default values. When saving this permission with &amp;quot;Selected resources&amp;quot; checked, any existing task having the the desired statuses on the WCUs in the list of &#039;Selected resources&#039; will be accessible for the users with the current permission. This is the same as searching for the WCUs of interest in the Tasks tab and manually adding permissions to these tasks via &amp;quot;Show who can see task&amp;quot; discussed in [[#Top selection &amp;quot;Show who can see task&amp;quot;]].&lt;br /&gt;
&lt;br /&gt;
==== &#039;&#039;&#039;Remove permission to historical tasks on permission update&#039;&#039;&#039; ====&lt;br /&gt;
TODO&lt;br /&gt;
&lt;br /&gt;
{{DEFAULTSORT:Rolas and Permissions}}&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=File:Add_permission_to_existing_tasks_on_permission_update.png&amp;diff=4178</id>
		<title>File:Add permission to existing tasks on permission update.png</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=File:Add_permission_to_existing_tasks_on_permission_update.png&amp;diff=4178"/>
		<updated>2026-05-20T08:48:26Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;Add permission to existing tasks on permission update&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=Roles_and_permissions&amp;diff=4177</id>
		<title>Roles and permissions</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=Roles_and_permissions&amp;diff=4177"/>
		<updated>2026-05-20T08:41:17Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: /* Creating and editing roles and permissions */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;includeonly&amp;gt;====Roles and permissions====&amp;lt;/includeonly&amp;gt;&lt;br /&gt;
In order to restrict access to resources and functions in the portal, there is a framework using roles and permissions. Permissions are given on a set of resources. These permissions are grouped into roles, and roles are then attached to one or several users to be granted specific permissions.&lt;br /&gt;
&lt;br /&gt;
The “Edit roles and permission” dialog can be seen in Figure &amp;quot;Edit Roles and Permissions Dialog&amp;quot;. It consists of three tables. The top left table holds a list of the roles, the top right holds the user(s) for the selected role and the bottom one hold the selected role&#039;s permissions. Their size is adjustable and you can minimize them by clicking on the line between them.&lt;br /&gt;
[[File:Roles and permissions panel-20210217-144811.png|left|thumb|400x400px|Edit Roles and Permissions Dialog]]&lt;br /&gt;
&amp;lt;br clear=&amp;quot;all&amp;quot;&amp;gt;&lt;br /&gt;
You add a new role by pressing the button “Add role” and delete a role along with its permissions by pressing the red button next to it. When making a role you add a description and unique name. To edit an already existing role, double click the entry you wish to edit.&lt;br /&gt;
&lt;br /&gt;
When you select a role in the top left table, the lower table shows that specific role&#039;s permissions and the upper right table shows which users have that role. The permissions table consists of two columns, a string that is the actual permission and the set of resources that apply to that permission. &lt;br /&gt;
&lt;br /&gt;
=== Creating and editing roles and permissions ===&lt;br /&gt;
&lt;br /&gt;
[[File:Add permission.png|thumb|Creating New Permission]]&lt;br /&gt;
&lt;br /&gt;
To create a new permission press the “Add permission” button. It opens the following interaction depicted in Figure &amp;quot;Creating New Permission&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
[[File:Editing permissions.png|thumb|400x400px|Editing Task Permissions]]&lt;br /&gt;
&lt;br /&gt;
# Select what kind of permission you want. There are a number of different permissions, ten for WCUs and one to give permission to all tasks (the task permission can not be modified). The permissions are:&lt;br /&gt;
## &#039;&#039;&#039;Task&#039;&#039;&#039;. A special permission which is used to give users access to every existing task in the system. Typically only used for admins.&lt;br /&gt;
## &#039;&#039;&#039;Assignment Creator&#039;&#039;&#039;. This permission handles access to creating/editing/viewing assignments in the tab Assignment (see [[Signal Reader Assignment Wizard|signal reader]] and [[Area5 Assignment Wizard|Area5]]). Having a read-permission means that you can see a list of assignments but you cannot go ahead and edit or create them. A write-permission on the other hand makes you eligible to edit and create assignments. Currently, the permission is only relevant for signal reader and Area5. &lt;br /&gt;
## &#039;&#039;&#039;Vehicle Profile&#039;&#039;&#039; See [[#Vehicle Profile permission]]&lt;br /&gt;
## &#039;&#039;&#039;WCU Task&#039;&#039;&#039; Controls if a user is permitted to create/see tasks of a specific type on a WCU. More what this means is discussed below in &amp;quot;Permission to specific tasks&amp;quot;&lt;br /&gt;
## &#039;&#039;&#039;WCU Configuration.&#039;&#039;&#039; This permission controls whether you are allowed to work with a WCU&#039;s configuration.&lt;br /&gt;
## &#039;&#039;&#039;WCU Module&#039;&#039;&#039;. The permission controls the access to individual module configurations on a WCU. An example of a module is Signal reader.&lt;br /&gt;
## &#039;&#039;&#039;WCU Monitor&#039;&#039;&#039;. A task can have a monitor function to report data in real time. In order to see the real time data the user must have this permission.&lt;br /&gt;
## &#039;&#039;&#039;WCU Plot route&#039;&#039;&#039;. To see a historic GPS track of a WCU a user must have this permission.&lt;br /&gt;
## &#039;&#039;&#039;WCU Position&#039;&#039;&#039;. Allows a user to see a WCU&#039;s current position.&lt;br /&gt;
## &#039;&#039;&#039;WCU Shelving&#039;&#039;&#039;. Allows a user to handle any shelving, unshelving and refurbishing of a WCU.&lt;br /&gt;
## &#039;&#039;&#039;WCU View&#039;&#039;&#039;. This permission applies to the Vehicles tab. It has to do with whether you are allowed to list a WCU in the table. Selecting this subtype makes the subtype type part unnecessary and therefore, it is removed if you choose this resource type.&lt;br /&gt;
##&#039;&#039;&#039;WCU Connect&#039;&#039;&#039;. Allows a user to connect a WCU to a vehicle.&lt;br /&gt;
##&#039;&#039;&#039;Vehicle Create&#039;&#039;&#039; See [[Roles and permissions#Vehicle Create permission|#Vehicle Create permissions]]&lt;br /&gt;
##&#039;&#039;&#039;Resource Group Manage&#039;&#039;&#039; See [[#Resource Group Manage permission]]&lt;br /&gt;
##&#039;&#039;&#039;Resource Group Create&#039;&#039;&#039; See [[#Resource Group Create permission]]&lt;br /&gt;
##&#039;&#039;&#039;View Inactive WCU&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to view inactive WCUs.&lt;br /&gt;
##&#039;&#039;&#039;View Inactive Vehicle&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to view inactive vehicles.&lt;br /&gt;
##&#039;&#039;&#039;Vehicle Edit&#039;&#039;&#039;                                                                                                                                                                                                                                             Allows a user to edit vehicles.&lt;br /&gt;
# Choosing if the permission should be a read and/or write permission. One of these have to be selected or you will not be able to save changes.&lt;br /&gt;
# Selecting which resources that apply to the permission. The selection is made using the two tables you see in Figure &amp;quot;Editing Task Permissions&amp;quot;. To select a resource, which can be a resource group, you enter the name of the resource in the left table filter area. As you type, the table is automatically filled with resources matching the criteria. If a resource is part of a resource group the icon to the left is shown. If you hold the mouse over the resource name you will see which resource group it is part of. If you instead see the icon shown to the left, the resource is a resource group. Holding the mouse over the entry will show you which resources are part of the resource group. To select a resource, drag it over to the right table or select the resource and then press the right-arrow. To deselect a resource, drag it to the left table or press the left-arrow. There is a “Select all” option. It selects all current and future resources to which this permission should be applied. [[File:Labels in permissions1.png|thumb|Select resources by labels]][[File:Permission label2.png|thumb|Resource selected by label]]From version 2.93 of the WICE portal it is also possible to let labels select the resources that will be part of the permission. When a label is selected as in the screenshot to the right, the WCUs which are currently associated with the label are added to the set of selected resources. Multiple labels can also be used to either collect more resources or narrow down the resources depending on the chosen relation between the labels.  After the permission has been saved, any additional resources which get associated with the labels used in the permission will automatically be added to the permission. Since these labels now controls one or many permissions, only the users with the role admin can add or remove the labels from resources as long as they are part of any permission.&lt;br /&gt;
# Set what type of tasks the permission applies to. It is automatically set to have all selected but you can unselect all and selecting other tasks. This option is only available on the &#039;&#039;&#039;WCU task&#039;&#039;&#039;, &#039;&#039;&#039;assignment&#039;&#039;&#039; &#039;&#039;&#039;creator,&#039;&#039;&#039; &#039;&#039;&#039;monitor&#039;&#039;&#039; and &#039;&#039;&#039;module&#039;&#039;&#039; permissions. It corresponds to the set of available modules for a WCU.&lt;br /&gt;
When you are done press &amp;quot;Save changes&amp;quot; or &amp;quot;Reset changes&amp;quot; if you want to revert the changes. You can always edit the permission by selecting it in the table. The dialog described above will show  and you can make your changes, except that you can not change what type of task it is.&lt;br /&gt;
&lt;br /&gt;
==== Assignment Creator permission ====&lt;br /&gt;
This permission concerns the [[Signal Reader Assignment Editor|signal reader assignment editor]]. If you give the user a read permission they can look at already created assignments. If you give a user the write permission they will also be able to create and delete assignments.&lt;br /&gt;
&lt;br /&gt;
==== Vehicle Profile permission ====&lt;br /&gt;
With this permission you can delegate to individual users the possibility to view vehicle profiles if given the read permission. This makes the tab visible in the GUI but all buttons concerning editing/adding/removing are disabled. If a user has the write permission as well, the user will be able to edit/add and remove vehicle profiles. &lt;br /&gt;
&lt;br /&gt;
==== Vehicle Create permission ====&lt;br /&gt;
This permission enables a user to do [[The Portal Administrator View#Add Vehicle Dialog|Add Vehicle]]. This will also let a user view any disconnected vehicles in the vehicles tab.&lt;br /&gt;
&lt;br /&gt;
==== Resource Group Manage permission ====&lt;br /&gt;
This permission enables a user to [[The Portal Administrator View#Resource Groups|manage resource groups]]. Managing resource groups entails adding and removing WCUs from groups, editing groups, and removing groups. It will also enable access to the Resource groups panel.&lt;br /&gt;
&lt;br /&gt;
==== Resource Group Create permission ====&lt;br /&gt;
This permission enables a user to create resource groups by pressing Add New in the Resource groups panel of the Administration tab. It will also enable access to the Resource groups panel. Any permissions that may be needed to initially manage or edit the created resource group will be added to a role specific to the creator upon creating the group.&lt;br /&gt;
&lt;br /&gt;
=== Selecting resources using uploaded file ===&lt;br /&gt;
As described above, you can select resources in the select resources widget. In addition to this, you can upload a file containing the vehicles or WCUs that you would like to apply to a permission or a set of permissions. By pressing the button called &#039;Import vehicle file&#039; you will be presented with a dialog where you can upload a file containing multiple vehicles or WCUs. You can either upload an excel file or a CSV type of text file. What is important is that there is a header column saying what type of identifiers can be found in the file. Identifiers currently supported are: vin, plate or wcu. An example content of file (CSV):&lt;br /&gt;
&lt;br /&gt;
&amp;lt;kbd&amp;gt;&lt;br /&gt;
wcu&amp;lt;br&amp;gt;&lt;br /&gt;
04-1B-35-98&amp;lt;br&amp;gt;&lt;br /&gt;
90-80-AA&amp;lt;br&amp;gt;&lt;br /&gt;
&amp;lt;/kbd&amp;gt;&lt;br /&gt;
[[File:Import vehcile file-20210217-151236.png|thumb|Import a vehicle file for permission resource selection]]&lt;br /&gt;
Just by changing the heading to plate or vin you should reference such identifiers in the file. The dialog also presents the option to ignore resources not found and apply the changes for those found. The default is however to do nothing if any of the resources are not found. The checkbox &#039;Ignore unconnected vehicles&#039; is only applicable if you have plate or vin identifiers.&lt;br /&gt;
&lt;br /&gt;
If you have selected a permission in the permission table, the resources in the file will be applied to only the selected permission. If you have selected a role in the top leftmost table, the resources in the file will be applied to all permissions of the role.&lt;br /&gt;
&lt;br /&gt;
=== Changing a users roles and permissions ===&lt;br /&gt;
You can change a user&#039;s roles under in the edit user dialog if you press the button &amp;quot;Edit user roles&amp;quot;. The edit user dialog then gets extended as two boxes appear, a left one with available roles and a right one with current roles. In the left one you can search the role(s) you want and drag them to the right box or press the button pointing right. With the two buttons at the bottom corner(the paper and clipboard ones) you can copy the names of the roles and also insert the names of roles to add them.&lt;br /&gt;
&lt;br /&gt;
You can also change a users permission to view tasks in the tasks tab: By right-clicking the task(s) you want to change permissions for and hovering over &amp;quot;Permission&amp;quot; you will get the options &amp;quot;Show who can see task&amp;quot; and &amp;quot;Add who can see task&amp;quot;. &amp;quot;Show who can see task&amp;quot; will open a window with a left and a right box where the left contains users without permission to view the task and the right contains users who have permission. By moving users from the left to right and vice versa you can give or remove someones permission. You can also press the clipboard the the right bottom to copy the users who have permissions or add users by writing their name within parentheses. Users in the right box can be unselectable and that is if they have a role giving them the permission to view that task the only way to remove that is to remove that role from them. &amp;quot;Add who can see task&amp;quot; works the same way as &amp;quot;Show who can see task&amp;quot; except that the right box does not show users with permission so you can not remove permissions, this is so that with add you can add permissions for many tasks at the same time as the show can not show users from many tasks.&lt;br /&gt;
&lt;br /&gt;
[[File:Copy user assignment permissions.png|thumb|300x300px|Copy User Task Permissions Dialog]]&lt;br /&gt;
&lt;br /&gt;
You can also edit a users role by searching for user(s) and right clicking on them to get a window with different options. There are five different options where the three first can be used on multiple users at the same time while the bottom two can not.&lt;br /&gt;
* &amp;quot;Add user task permissions to this user&amp;quot; will open the dialog shown in Figure &amp;quot;Copy User Task Permissions Dialog&amp;quot;. With this button you take a user&#039;s task permissions and add them to the selected user(s). You do this by searching and selecting a user and then pressing &amp;quot;OK&amp;quot;.&lt;br /&gt;
* &amp;quot;Replace user task permissions with user&amp;quot; will open a similar dialog to the one in Figure &amp;quot;Copy User task Permissions Dialog&amp;quot;. This button is much like the one before except that instead of adding permissions to the current user this replaces the permissions that the selected user(s) have. Here you also search the user whose permissions you want to replace the select them and press &amp;quot;OK&amp;quot;.&lt;br /&gt;
* &amp;quot;Copy user roles to this user&amp;quot; will open a similar dialog to Figure &amp;quot;Copy User Task Permissions Dialog&amp;quot;. Instead of replacing permissions, this dialog replaces selected user(s) roles with the roles of a user who you chose. Search the user whose roles you want to copy for replacement and press &amp;quot;OK&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
[[File:Give permission on car.png|thumb|Give Permission on Vehicle Dialog]]&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
* &amp;quot;Give this user permission to all tasks on vehicle&amp;quot; gives task permission on one or many vehicles. The dialog will look like the dialog in Figure &amp;quot;Give Permission on Vehicle Dialog&amp;quot;. In the left box you select vehicles and move them to the right to give permission on them, you can also as you see below the left box select a file with vehicles to easily select a set of vehicles. Then you select which types of tasks it should give permission to (leaving this empty will not give any permissions). You can also check the checkbox &amp;quot;Reset user permission&amp;quot; to replace the roles of the selected user instead of adding new to the current ones.&lt;br /&gt;
* &amp;quot;Give this user permission to all tasks on WCU&amp;quot; is identical to the previous button except that it applies to WCUs instead of vehicles.&lt;br /&gt;
&lt;br /&gt;
==== User specific roles ====&lt;br /&gt;
A role may also be set to be specific to just one user. Doing this will remove the role from any other users that currently have it as well as prevent adding the role to any other users but the specified user.&lt;br /&gt;
&lt;br /&gt;
=== Permission for specific tasks ===&lt;br /&gt;
The above text discuss permissions as they are found from the User panel. There are also a set of &amp;quot;implicit&amp;quot; permissions created when a new task is created, based on the task type permission discussed above. Let us elaborate a bit on this to make it clear what it means. The use case is as follows; a user has a read task permission on a WCU (&amp;quot;wcu:assignment:soh:read:awcu&amp;quot;). (Observe that a task permission might contain the word &amp;quot;assignment&amp;quot; even if it is referring to a task. Look at the menu names instead to confirm that you are working with a task.) Let us say that a new state-of-health task is created on the WCU (&amp;quot;&#039;&#039;awcu&#039;&#039;&amp;quot;) while the user has the above permission. Regardless of who created the task, the user will now be able to list this task in the Tasks panel and download any data produced. Later, as time goes by, the WCU is no longer used in the particular project and an administrator removes the permission &amp;quot;wcu:assignment:soh:read:awcu&amp;quot; from the user. When new tasks are created on this WCU our user above will not be able to see the new tasks created in the Tasks panel. However, the user will be able to see the previous task, i.e. when the user had the correct permission. Thus, this solution enables users to retain the permission to see historical tasks, let us call this a &#039;&#039;&#039;historical task permission&#039;&#039;&#039;. This type of permission cannot be seen in the permission panel. To see who has access to which &#039;&#039;&#039;historical task&#039;&#039;&#039; you must turn to the Task panel.&lt;br /&gt;
&lt;br /&gt;
[[File:Task-panel-permission.png|thumb|Permission Choices in the Tasks Panel]]&lt;br /&gt;
&lt;br /&gt;
As an administrator you have the possibility to both see and modify who has access to individual tasks. There are two options presented if you right-click an task in the Tasks panel. To the right you see the two choices available. The top choice is only available if you have selected a single row in the table. The bottom one is always available, also if electing multiple rows.&lt;br /&gt;
&lt;br /&gt;
==== Top selection &amp;quot;Show who can see task&amp;quot; ====&lt;br /&gt;
By selecting the top selection you will be presented with a dialog where on the left hand side you have all available users that do not have the permission to see the task. On the right hand side you have the users that have the permission to do so. On the right hand side you might see that some users are grayed. Those users have the &#039;&#039;task permission,&#039;&#039; not to be confused with the WCU task permission&#039;&#039;,&#039;&#039; described above. Also, the users visible are enabled, disabled users will not be displayed.&lt;br /&gt;
&lt;br /&gt;
[[File:Users-with-read-permission-tasks-panel.png|thumb|Users with Permission on a Specific Task]]&lt;br /&gt;
&lt;br /&gt;
To give a user the permission to see the task, simply move the user from the left side to the right side. This is accomplished by selecting one or more users and then click the right-arrow. Conversely, to remove a user from the permission select the users from the right side and click the left-arrow. At the top of the left side you can search for users by typing and as you go the users will be filtered to match what you type.&lt;br /&gt;
&lt;br /&gt;
In the picture &amp;quot;Users with Permission on a Specific Task&amp;quot; to the right you see the user &#039;serverTriggerUser&#039; which is an enabled user which do not yet have the permission to see the task.&lt;br /&gt;
&lt;br /&gt;
==== Bottom selection &amp;quot;Add who can see task&amp;quot; ====&lt;br /&gt;
The bottom selection from above &#039;Add who can see task&#039; will not list who already has access to the task, but rather just list all users available regardless whether they already have permission or not to the task.&lt;br /&gt;
&lt;br /&gt;
You can also give a user permission to all running tasks on WCUs whose task types that user has access to. See [[The Portal Administrator View#The New User Dialog|The new user dialog]] (the portal administrator view).&lt;br /&gt;
&lt;br /&gt;
{{DEFAULTSORT:Rolas and Permissions}}&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=Roles_and_permissions&amp;diff=4176</id>
		<title>Roles and permissions</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=Roles_and_permissions&amp;diff=4176"/>
		<updated>2026-05-20T08:31:49Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;includeonly&amp;gt;====Roles and permissions====&amp;lt;/includeonly&amp;gt;&lt;br /&gt;
In order to restrict access to resources and functions in the portal, there is a framework using roles and permissions. Permissions are given on a set of resources. These permissions are grouped into roles, and roles are then attached to one or several users to be granted specific permissions.&lt;br /&gt;
&lt;br /&gt;
The “Edit roles and permission” dialog can be seen in Figure &amp;quot;Edit Roles and Permissions Dialog&amp;quot;. It consists of three tables. The top left table holds a list of the roles, the top right holds the user(s) for the selected role and the bottom one hold the selected role&#039;s permissions. Their size is adjustable and you can minimize them by clicking on the line between them.&lt;br /&gt;
[[File:Roles and permissions panel-20210217-144811.png|left|thumb|400x400px|Edit Roles and Permissions Dialog]]&lt;br /&gt;
&amp;lt;br clear=&amp;quot;all&amp;quot;&amp;gt;&lt;br /&gt;
You add a new role by pressing the button “Add role” and delete a role along with its permissions by pressing the red button next to it. When making a role you add a description and unique name. To edit an already existing role, double click the entry you wish to edit.&lt;br /&gt;
&lt;br /&gt;
When you select a role in the top left table, the lower table shows that specific role&#039;s permissions and the upper right table shows which users have that role. The permissions table consists of two columns, a string that is the actual permission and the set of resources that apply to that permission. &lt;br /&gt;
&lt;br /&gt;
=== Creating and editing roles and permissions ===&lt;br /&gt;
&lt;br /&gt;
[[File:Add permission.png|thumb|Creating New Permission]]&lt;br /&gt;
&lt;br /&gt;
To create a new permission press the “Add permission” button. It opens the following interaction depicted in Figure &amp;quot;Creating New Permission&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
[[File:Editing permissions.png|thumb|400x400px|Editing Task Permissions]]&lt;br /&gt;
&lt;br /&gt;
# Select what kind of permission you want. There are a number of different permissions, ten for WCUs and one to give permission to all tasks (the task permission can not be modified). The permissions are:&lt;br /&gt;
## &#039;&#039;&#039;Task&#039;&#039;&#039;. Controls if a user is permitted to create/see tasks of a specific type on a WCU. More what this means is discussed below in &amp;quot;[https://wiki.alkit.se/wice270/index.php?title=Roles_and_permissions#Permission_for_specific_tasks Permission to specific tasks]&amp;quot;&lt;br /&gt;
## &#039;&#039;&#039;Assignment Creator&#039;&#039;&#039;. This permission handles access to creating/editing/viewing assignments in the tab Assignment (see [[Signal Reader Assignment Wizard|signal reader]] and [[Area5 Assignment Wizard|Area5]]). Having a read-permission means that you can see a list of assignments but you cannot go ahead and edit or create them. A write-permission on the other hand makes you eligible to edit and create assignments. Currently, the permission is only relevant for signal reader and Area5. &lt;br /&gt;
## &#039;&#039;&#039;Vehicle Profile&#039;&#039;&#039;&lt;br /&gt;
## &#039;&#039;&#039;WCU Task&#039;&#039;&#039;&lt;br /&gt;
## &#039;&#039;&#039;WCU Configuration.&#039;&#039;&#039; This permission controls whether you are allowed to work with a WCU&#039;s configuration.&lt;br /&gt;
## &#039;&#039;&#039;WCU Module&#039;&#039;&#039;. The permission controls the access to individual module configurations on a WCU. An example of a module is Signal reader.&lt;br /&gt;
## &#039;&#039;&#039;WCU Monitor&#039;&#039;&#039;. A task can have a monitor function to report data in real time. In order to see the real time data the user must have this permission.&lt;br /&gt;
## &#039;&#039;&#039;WCU Plot route&#039;&#039;&#039;. To see a historic GPS track of a WCU a user must have this permission.&lt;br /&gt;
## &#039;&#039;&#039;WCU Position&#039;&#039;&#039;. Allows a user to see a WCU&#039;s current position.&lt;br /&gt;
## &#039;&#039;&#039;WCU Shelving&#039;&#039;&#039;. Allows a user to handle any shelving, unshelving and refurbishing of a WCU.&lt;br /&gt;
## &#039;&#039;&#039;WCU View&#039;&#039;&#039;. This permission applies to the Vehicles tab. It has to do with whether you are allowed to list a WCU in the table. Selecting this subtype makes the subtype type part unnecessary and therefore, it is removed if you choose this resource type.&lt;br /&gt;
##&#039;&#039;&#039;WCU Connect&#039;&#039;&#039;. Allows a user to connect a WCU to a vehicle.&lt;br /&gt;
##&#039;&#039;&#039;Vehicle Create&#039;&#039;&#039;                                                                                                                                                                                                                                            &lt;br /&gt;
##&#039;&#039;&#039;Resource Group Manage&#039;&#039;&#039;                                                                                                                                                                                                                                            &lt;br /&gt;
##&#039;&#039;&#039;Resource Group Create&#039;&#039;&#039;                                                                                                                                                                                                                                            &lt;br /&gt;
##&#039;&#039;&#039;View Inactive WCU&#039;&#039;&#039;                                                                                                                                                                                                                                            &lt;br /&gt;
##&#039;&#039;&#039;View Inactive Vehicle&#039;&#039;&#039;                                                                                                                                                                                                                                            &lt;br /&gt;
##&#039;&#039;&#039;Vehicle Edit&#039;&#039;&#039;                                                                                                                                                                                                                                            &lt;br /&gt;
# Choosing if the permission should be a read and/or write permission. One of these have to be selected or you will not be able to save changes.&lt;br /&gt;
# Selecting which resources that apply to the permission. The selection is made using the two tables you see in Figure &amp;quot;Editing Task Permissions&amp;quot;. To select a resource, which can be a resource group, you enter the name of the resource in the left table filter area. As you type, the table is automatically filled with resources matching the criteria. If a resource is part of a resource group the icon to the left is shown. If you hold the mouse over the resource name you will see which resource group it is part of. If you instead see the icon shown to the left, the resource is a resource group. Holding the mouse over the entry will show you which resources are part of the resource group. To select a resource, drag it over to the right table or select the resource and then press the right-arrow. To deselect a resource, drag it to the left table or press the left-arrow. There is a “Select all” option. It selects all current and future resources to which this permission should be applied. [[File:Labels in permissions1.png|thumb|Select resources by labels]][[File:Permission label2.png|thumb|Resource selected by label]]From version 2.93 of the WICE portal it is also possible to let labels select the resources that will be part of the permission. When a label is selected as in the screenshot to the right, the WCUs which are currently associated with the label are added to the set of selected resources. Multiple labels can also be used to either collect more resources or narrow down the resources depending on the chosen relation between the labels.  After the permission has been saved, any additional resources which get associated with the labels used in the permission will automatically be added to the permission. Since these labels now controls one or many permissions, only the users with the role admin can add or remove the labels from resources as long as they are part of any permission.&lt;br /&gt;
# Set what type of tasks the permission applies to. It is automatically set to have all selected but you can unselect all and selecting other tasks. This option is only available on the &#039;&#039;&#039;WCU task&#039;&#039;&#039;, &#039;&#039;&#039;assignment&#039;&#039;&#039; &#039;&#039;&#039;creator,&#039;&#039;&#039; &#039;&#039;&#039;monitor&#039;&#039;&#039; and &#039;&#039;&#039;module&#039;&#039;&#039; permissions. It corresponds to the set of available modules for a WCU.&lt;br /&gt;
When you are done press &amp;quot;Save changes&amp;quot; or &amp;quot;Reset changes&amp;quot; if you want to revert the changes. You can always edit the permission by selecting it in the table. The dialog described above will show  and you can make your changes, except that you can not change what type of task it is.&lt;br /&gt;
&lt;br /&gt;
==== Assignment Creator permission ====&lt;br /&gt;
This permission concerns the [[Signal Reader Assignment Editor|signal reader assignment editor]]. If you give the user a read permission they can look at already created assignments. If you give a user the write permission they will also be able to create and delete assignments.&lt;br /&gt;
&lt;br /&gt;
==== Vehicle Profile permission ====&lt;br /&gt;
With this permission you can delegate to individual users the possibility to view vehicle profiles if given the read permission. This makes the tab visible in the GUI but all buttons concerning editing/adding/removing are disabled. If a user has the write permission as well, the user will be able to edit/add and remove vehicle profiles. &lt;br /&gt;
&lt;br /&gt;
==== Vehicle Create permission ====&lt;br /&gt;
This permission enables a user to do [[The Portal Administrator View#Add Vehicle Dialog|Add Vehicle]]. This will also let a user view any disconnected vehicles in the vehicles tab.&lt;br /&gt;
&lt;br /&gt;
==== Resource Group Manage permission ====&lt;br /&gt;
This permission enables a user to [[The Portal Administrator View#Resource Groups|manage resource groups]]. Managing resource groups entails adding and removing WCUs from groups, editing groups, and removing groups. It will also enable access to the Resource groups panel.&lt;br /&gt;
&lt;br /&gt;
==== Resource Group Create permission ====&lt;br /&gt;
This permission enables a user to create resource groups by pressing Add New in the Resource groups panel of the Administration tab. It will also enable access to the Resource groups panel. Any permissions that may be needed to initially manage or edit the created resource group will be added to a role specific to the creator upon creating the group.&lt;br /&gt;
&lt;br /&gt;
=== Selecting resources using uploaded file ===&lt;br /&gt;
As described above, you can select resources in the select resources widget. In addition to this, you can upload a file containing the vehicles or WCUs that you would like to apply to a permission or a set of permissions. By pressing the button called &#039;Import vehicle file&#039; you will be presented with a dialog where you can upload a file containing multiple vehicles or WCUs. You can either upload an excel file or a CSV type of text file. What is important is that there is a header column saying what type of identifiers can be found in the file. Identifiers currently supported are: vin, plate or wcu. An example content of file (CSV):&lt;br /&gt;
&lt;br /&gt;
&amp;lt;kbd&amp;gt;&lt;br /&gt;
wcu&amp;lt;br&amp;gt;&lt;br /&gt;
04-1B-35-98&amp;lt;br&amp;gt;&lt;br /&gt;
90-80-AA&amp;lt;br&amp;gt;&lt;br /&gt;
&amp;lt;/kbd&amp;gt;&lt;br /&gt;
[[File:Import vehcile file-20210217-151236.png|thumb|Import a vehicle file for permission resource selection]]&lt;br /&gt;
Just by changing the heading to plate or vin you should reference such identifiers in the file. The dialog also presents the option to ignore resources not found and apply the changes for those found. The default is however to do nothing if any of the resources are not found. The checkbox &#039;Ignore unconnected vehicles&#039; is only applicable if you have plate or vin identifiers.&lt;br /&gt;
&lt;br /&gt;
If you have selected a permission in the permission table, the resources in the file will be applied to only the selected permission. If you have selected a role in the top leftmost table, the resources in the file will be applied to all permissions of the role.&lt;br /&gt;
&lt;br /&gt;
=== Changing a users roles and permissions ===&lt;br /&gt;
You can change a user&#039;s roles under in the edit user dialog if you press the button &amp;quot;Edit user roles&amp;quot;. The edit user dialog then gets extended as two boxes appear, a left one with available roles and a right one with current roles. In the left one you can search the role(s) you want and drag them to the right box or press the button pointing right. With the two buttons at the bottom corner(the paper and clipboard ones) you can copy the names of the roles and also insert the names of roles to add them.&lt;br /&gt;
&lt;br /&gt;
You can also change a users permission to view tasks in the tasks tab: By right-clicking the task(s) you want to change permissions for and hovering over &amp;quot;Permission&amp;quot; you will get the options &amp;quot;Show who can see task&amp;quot; and &amp;quot;Add who can see task&amp;quot;. &amp;quot;Show who can see task&amp;quot; will open a window with a left and a right box where the left contains users without permission to view the task and the right contains users who have permission. By moving users from the left to right and vice versa you can give or remove someones permission. You can also press the clipboard the the right bottom to copy the users who have permissions or add users by writing their name within parentheses. Users in the right box can be unselectable and that is if they have a role giving them the permission to view that task the only way to remove that is to remove that role from them. &amp;quot;Add who can see task&amp;quot; works the same way as &amp;quot;Show who can see task&amp;quot; except that the right box does not show users with permission so you can not remove permissions, this is so that with add you can add permissions for many tasks at the same time as the show can not show users from many tasks.&lt;br /&gt;
&lt;br /&gt;
[[File:Copy user assignment permissions.png|thumb|300x300px|Copy User Task Permissions Dialog]]&lt;br /&gt;
&lt;br /&gt;
You can also edit a users role by searching for user(s) and right clicking on them to get a window with different options. There are five different options where the three first can be used on multiple users at the same time while the bottom two can not.&lt;br /&gt;
* &amp;quot;Add user task permissions to this user&amp;quot; will open the dialog shown in Figure &amp;quot;Copy User Task Permissions Dialog&amp;quot;. With this button you take a user&#039;s task permissions and add them to the selected user(s). You do this by searching and selecting a user and then pressing &amp;quot;OK&amp;quot;.&lt;br /&gt;
* &amp;quot;Replace user task permissions with user&amp;quot; will open a similar dialog to the one in Figure &amp;quot;Copy User task Permissions Dialog&amp;quot;. This button is much like the one before except that instead of adding permissions to the current user this replaces the permissions that the selected user(s) have. Here you also search the user whose permissions you want to replace the select them and press &amp;quot;OK&amp;quot;.&lt;br /&gt;
* &amp;quot;Copy user roles to this user&amp;quot; will open a similar dialog to Figure &amp;quot;Copy User Task Permissions Dialog&amp;quot;. Instead of replacing permissions, this dialog replaces selected user(s) roles with the roles of a user who you chose. Search the user whose roles you want to copy for replacement and press &amp;quot;OK&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
[[File:Give permission on car.png|thumb|Give Permission on Vehicle Dialog]]&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
* &amp;quot;Give this user permission to all tasks on vehicle&amp;quot; gives task permission on one or many vehicles. The dialog will look like the dialog in Figure &amp;quot;Give Permission on Vehicle Dialog&amp;quot;. In the left box you select vehicles and move them to the right to give permission on them, you can also as you see below the left box select a file with vehicles to easily select a set of vehicles. Then you select which types of tasks it should give permission to (leaving this empty will not give any permissions). You can also check the checkbox &amp;quot;Reset user permission&amp;quot; to replace the roles of the selected user instead of adding new to the current ones.&lt;br /&gt;
* &amp;quot;Give this user permission to all tasks on WCU&amp;quot; is identical to the previous button except that it applies to WCUs instead of vehicles.&lt;br /&gt;
&lt;br /&gt;
==== User specific roles ====&lt;br /&gt;
A role may also be set to be specific to just one user. Doing this will remove the role from any other users that currently have it as well as prevent adding the role to any other users but the specified user.&lt;br /&gt;
&lt;br /&gt;
=== Permission for specific tasks ===&lt;br /&gt;
The above text discuss permissions as they are found from the User panel. There are also a set of &amp;quot;implicit&amp;quot; permissions created when a new task is created, based on the task type permission discussed above. Let us elaborate a bit on this to make it clear what it means. The use case is as follows; a user has a read task permission on a WCU (&amp;quot;wcu:assignment:soh:read:awcu&amp;quot;). (Observe that a task permission might contain the word &amp;quot;assignment&amp;quot; even if it is referring to a task. Look at the menu names instead to confirm that you are working with a task.) Let us say that a new state-of-health task is created on the WCU (&amp;quot;&#039;&#039;awcu&#039;&#039;&amp;quot;) while the user has the above permission. Regardless of who created the task, the user will now be able to list this task in the Tasks panel and download any data produced. Later, as time goes by, the WCU is no longer used in the particular project and an administrator removes the permission &amp;quot;wcu:assignment:soh:read:awcu&amp;quot; from the user. When new tasks are created on this WCU our user above will not be able to see the new tasks created in the Tasks panel. However, the user will be able to see the previous task, i.e. when the user had the correct permission. Thus, this solution enables users to retain the permission to see historical tasks, let us call this a &#039;&#039;&#039;historical task permission&#039;&#039;&#039;. This type of permission cannot be seen in the permission panel. To see who has access to which &#039;&#039;&#039;historical task&#039;&#039;&#039; you must turn to the Task panel.&lt;br /&gt;
&lt;br /&gt;
[[File:Task-panel-permission.png|thumb|Permission Choices in the Tasks Panel]]&lt;br /&gt;
&lt;br /&gt;
As an administrator you have the possibility to both see and modify who has access to individual tasks. There are two options presented if you right-click an task in the Tasks panel. To the right you see the two choices available. The top choice is only available if you have selected a single row in the table. The bottom one is always available, also if electing multiple rows.&lt;br /&gt;
&lt;br /&gt;
==== Top selection &amp;quot;Show who can see task&amp;quot; ====&lt;br /&gt;
By selecting the top selection you will be presented with a dialog where on the left hand side you have all available users that do not have the permission to see the task. On the right hand side you have the users that have the permission to do so. On the right hand side you might see that some users are grayed. Those users have the &#039;&#039;task permission,&#039;&#039; not to be confused with the WCU task permission&#039;&#039;,&#039;&#039; described above. Also, the users visible are enabled, disabled users will not be displayed.&lt;br /&gt;
&lt;br /&gt;
[[File:Users-with-read-permission-tasks-panel.png|thumb|Users with Permission on a Specific Task]]&lt;br /&gt;
&lt;br /&gt;
To give a user the permission to see the task, simply move the user from the left side to the right side. This is accomplished by selecting one or more users and then click the right-arrow. Conversely, to remove a user from the permission select the users from the right side and click the left-arrow. At the top of the left side you can search for users by typing and as you go the users will be filtered to match what you type.&lt;br /&gt;
&lt;br /&gt;
In the picture &amp;quot;Users with Permission on a Specific Task&amp;quot; to the right you see the user &#039;serverTriggerUser&#039; which is an enabled user which do not yet have the permission to see the task.&lt;br /&gt;
&lt;br /&gt;
==== Bottom selection &amp;quot;Add who can see task&amp;quot; ====&lt;br /&gt;
The bottom selection from above &#039;Add who can see task&#039; will not list who already has access to the task, but rather just list all users available regardless whether they already have permission or not to the task.&lt;br /&gt;
&lt;br /&gt;
You can also give a user permission to all running tasks on WCUs whose task types that user has access to. See [[The Portal Administrator View#The New User Dialog|The new user dialog]] (the portal administrator view).&lt;br /&gt;
&lt;br /&gt;
{{DEFAULTSORT:Rolas and Permissions}}&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=Main_Page&amp;diff=4175</id>
		<title>Main Page</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=Main_Page&amp;diff=4175"/>
		<updated>2026-05-06T11:05:57Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&#039;&#039;&#039;Welcome to the WICE Wiki!&#039;&#039;&#039;&amp;lt;br&amp;gt;Here you can find information about the WICE System and how-to guides of all the features in the WICE Portal. &lt;br /&gt;
&lt;br /&gt;
The WICE system is a powerful and flexible data collection and fleet management system developed by Alkit Communications AB. The WICE Portal is the user interface of the WICE system. &lt;br /&gt;
&lt;br /&gt;
Feel free to suggest improvements and add pages if you feel that some information is missing.&lt;br /&gt;
&lt;br /&gt;
To see the addtions/changes of the previous version of the WICE portal, see [[New features in v2.98|New features in v2.98.]] (Also available from the sidebar to the left.)&lt;br /&gt;
&lt;br /&gt;
For full release history see [https://wice-sysdoc.alkit.se/index.php/Release_notes WICE Release history].&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=New_features_in_v2.98&amp;diff=4174</id>
		<title>New features in v2.98</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=New_features_in_v2.98&amp;diff=4174"/>
		<updated>2026-05-06T09:32:07Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: Created blank page&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=MediaWiki:Sidebar&amp;diff=4173</id>
		<title>MediaWiki:Sidebar</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=MediaWiki:Sidebar&amp;diff=4173"/>
		<updated>2026-05-06T09:31:51Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
* navigation&lt;br /&gt;
** mainpage|mainpage-description&lt;br /&gt;
** recentchanges-url|recentchanges&lt;br /&gt;
** randompage-url|randompage&lt;br /&gt;
** helppage|help&lt;br /&gt;
* Table of Contents&lt;br /&gt;
**requirements|1. Requirements&lt;br /&gt;
**Quick Start|2. Quick Start&lt;br /&gt;
**The_Portal_User_View|3. The Portal User View&lt;br /&gt;
**The_Portal_Administrator_View|4. The Portal Administrator View&lt;br /&gt;
**WCU platform|5. The WCU Platform&lt;br /&gt;
**M2M REST API| 6. M2M REST API&lt;br /&gt;
&amp;lt;!--** New_features_in_v2.40|New in v2.40--&amp;gt;&lt;br /&gt;
** New features in v2.98|New in v2.98&lt;br /&gt;
* SEARCH&lt;br /&gt;
* TOOLBOX&lt;br /&gt;
* LANGUAGES&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=Main_Page&amp;diff=4110</id>
		<title>Main Page</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=Main_Page&amp;diff=4110"/>
		<updated>2026-01-28T07:55:14Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&#039;&#039;&#039;Welcome to the WICE Wiki!&#039;&#039;&#039;&amp;lt;br&amp;gt;Here you can find information about the WICE System and how-to guides of all the features in the WICE Portal. &lt;br /&gt;
&lt;br /&gt;
The WICE system is a powerful and flexible data collection and fleet management system developed by Alkit Communications AB. The WICE Portal is the user interface of the WICE system. &lt;br /&gt;
&lt;br /&gt;
Feel free to suggest improvements and add pages if you feel that some information is missing.&lt;br /&gt;
&lt;br /&gt;
To see the addtions/changes of the previous version of the WICE portal, see [[New features in v2.97|New features in v2.97.]] (Also available from the sidebar to the left.)&lt;br /&gt;
&lt;br /&gt;
For full release history see [https://wice-sysdoc.alkit.se/index.php/Release_notes WICE Release history].&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=MediaWiki:Sidebar&amp;diff=4109</id>
		<title>MediaWiki:Sidebar</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=MediaWiki:Sidebar&amp;diff=4109"/>
		<updated>2026-01-28T07:54:54Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
* navigation&lt;br /&gt;
** mainpage|mainpage-description&lt;br /&gt;
** recentchanges-url|recentchanges&lt;br /&gt;
** randompage-url|randompage&lt;br /&gt;
** helppage|help&lt;br /&gt;
* Table of Contents&lt;br /&gt;
**requirements|1. Requirements&lt;br /&gt;
**Quick Start|2. Quick Start&lt;br /&gt;
**The_Portal_User_View|3. The Portal User View&lt;br /&gt;
**The_Portal_Administrator_View|4. The Portal Administrator View&lt;br /&gt;
**WCU platform|5. The WCU Platform&lt;br /&gt;
**M2M REST API| 6. M2M REST API&lt;br /&gt;
&amp;lt;!--** New_features_in_v2.40|New in v2.40--&amp;gt;&lt;br /&gt;
** New features in v2.97|New in v2.97&lt;br /&gt;
* SEARCH&lt;br /&gt;
* TOOLBOX&lt;br /&gt;
* LANGUAGES&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=New_features_in_v2.97&amp;diff=4108</id>
		<title>New features in v2.97</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=New_features_in_v2.97&amp;diff=4108"/>
		<updated>2026-01-28T07:54:16Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: Created blank page&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=New_features_in_v2.91&amp;diff=4107</id>
		<title>New features in v2.91</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=New_features_in_v2.91&amp;diff=4107"/>
		<updated>2025-12-10T12:55:55Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;== Visualize the validation reasons for each WCU within a resource group ==&lt;br /&gt;
The user can now view all validations for each WCU within a resource group while creating a new task. This can be accessed by clicking the new &#039;Show Resources&#039; button or by double-clicking the corresponding row. Read more about it [https://wiki.alkit.se/wice291/index.php/New_task here].&lt;br /&gt;
&lt;br /&gt;
== Implemented new permission for inactive vehicles/WCUs ==&lt;br /&gt;
Introduced new permissions for a user to toggle the visibility of inactive vehicles/WCUs. The vehicle permission is referred to as &#039;View Inactive Vehicle Permission,&#039; while the WCU permission is called &#039;View Inactive WCU Permission.&#039;&lt;br /&gt;
&lt;br /&gt;
== Edit test request name on add vehicle (Not in all versions of the Portal) ==&lt;br /&gt;
The &amp;quot;Edit Test Request Name&amp;quot; feature was previously available exclusively within the &amp;quot;Edit Vehicle&amp;quot; section of the application. Now, the feature has been expanded to also be available in the &amp;quot;Add Vehicle&amp;quot; section. This means that users can set or edit the test request name right when they are adding a new vehicle to the system, instead of waiting until later when editing the vehicle.&lt;br /&gt;
&lt;br /&gt;
== Copy data from tables and possible to select text ==&lt;br /&gt;
In some tables it is now possible to select text from rows. Many tables within the application now include a &amp;quot;Copy&amp;quot; button, which functions like an export tool. When this button is clicked, a new window appears, allowing users to select which columns they want to export. And in some cases it is possible to only select rows that have been filtered. &lt;br /&gt;
&lt;br /&gt;
== Visualize the measured signals ==&lt;br /&gt;
For the Signal Reader task, a new feature has been added that displays which signals were successfully measured and which ones were not for a specific recorded file. To access this feature, follow these steps: select a Signal Reader task, click on &#039;Get Result Files,&#039; choose an MDF file, and then click on &#039;Measured Signals. Read more [[Measured signals|here]].&lt;br /&gt;
&lt;br /&gt;
== WMU information tab (Not in all versions of the Portal) ==&lt;br /&gt;
If the portal supports [[WMU]] a tab is shown that lists all known wmus. Read more [[WMU information tab|here]].&lt;br /&gt;
&lt;br /&gt;
== WMU LIN ==&lt;br /&gt;
If the portal supports [[WMU|WMUs]] it will now be possible to configure LIN buses for WMUs that have a platform with LIN buses.&lt;br /&gt;
&lt;br /&gt;
== VCF LIN ==&lt;br /&gt;
If the portal supports [[Vehicle Communication Forwarder]] it will now be possible to add LIN to the VCF channels.&lt;br /&gt;
&lt;br /&gt;
== sw_changed will only be set on a2l-module if the assignment has any signal selected ==&lt;br /&gt;
sw_changed for signal reader will only be set on a2l-module if the module has signals that are in use. Read more about sw_changed [[Reasons behind SW changed|here.]]&lt;br /&gt;
&lt;br /&gt;
== Support for CAN FD on the HMX platform ==&lt;br /&gt;
There is support to set the CAN FD speed on the WCU when the platform is HMX. This is available through that there is a new column in the IO tab on the WCU configuration saying &amp;quot;FD Speed&amp;quot;. See more [[I/O configurations#FD Speed (kB)|here]].&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=New_features_in_v2.96&amp;diff=4036</id>
		<title>New features in v2.96</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=New_features_in_v2.96&amp;diff=4036"/>
		<updated>2025-11-03T14:16:45Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;This page gives a brief introduction to new features or changes introduced in version 2.96 of the WICE portal.&lt;br /&gt;
&lt;br /&gt;
=== DLT Daemon mode and DLT UDS in parallel ===&lt;br /&gt;
The portal now supports creating DLT tasks with daemon mode and UDS service 38 enabled at the same time. This requires WCU software version 2.96.0 or later for the selected WCUs. See [[Creating a Task#Diagnostic Log and Trace (DLT)|Creating a Task#Diagnostic Log and Trace (DLT).]]&lt;br /&gt;
&lt;br /&gt;
=== DLT Daemon address via vehicle announcement ===&lt;br /&gt;
For WCUs configured for software version 2.96.0 it is possible to get the daemon address via vehicle announcement instead of specifying a daemon address when the task is created. See [[Creating a Task#Diagnostic Log and Trace (DLT)|Creating a Task#Diagnostic Log and Trace (DLT).]]&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=Creating_a_Task&amp;diff=4035</id>
		<title>Creating a Task</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=Creating_a_Task&amp;diff=4035"/>
		<updated>2025-11-03T14:15:26Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: /* Diagnostic Log and Trace (DLT) */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;includeonly&amp;gt;== Creating a Task==&amp;lt;/includeonly&amp;gt;&lt;br /&gt;
You create a new task by pressing the &amp;quot;New Task&amp;quot; button on the bottom of the &amp;quot;Tasks&amp;quot; tab. This will open a window where you choose the type of task you want to create. Note that it is not possible to create a new task for a WCU which has the system labels &amp;lt;nowiki&amp;gt;&#039;&#039;&amp;lt;/nowiki&amp;gt;shelving_in_progress&amp;lt;nowiki&amp;gt;&#039;&#039;&amp;lt;/nowiki&amp;gt; or &amp;lt;nowiki&amp;gt;&#039;&#039;&amp;lt;/nowiki&amp;gt;shelving_done&amp;lt;nowiki&amp;gt;&#039;&#039;&amp;lt;/nowiki&amp;gt;. However, if the WCU has the latter label, it is possible to unshelve it using the corresponding button in the bottom of the Vehicle-tab.  Here we will go through how to create tasks of each of the different kinds of tasks available. Remember that not all of the task types will be available as this depends on customer configuration and some types might not be enabled in the portal. &lt;br /&gt;
&lt;br /&gt;
To learn about how to add resources to the task, check [[New task|here]].&lt;br /&gt;
&lt;br /&gt;
== Arcos ==&lt;br /&gt;
[[File:Arcos-task.png|alt=The dialog for creating an Arcos task.|thumb|The dialog for creating an Arcos task.]]&lt;br /&gt;
The WICE system can interact with external loggers as well. From version 2.71 the portal can interact with the Arcos-logger from Ipetronik. You create your measure task using an external tool which creates a file which you can upload for this type of task. The file should have the extension &amp;quot;&#039;&#039;.ccmc&#039;&#039;&amp;quot;. When the task is downloaded the WICE system will then forward this file to the external logger. The WICE system can also take care of uploading the result files as well where you can retrieve the files using this portal.&lt;br /&gt;
&lt;br /&gt;
Select the &amp;quot;Use existing measurement configuration&amp;quot; checkbox if a measurement setup file already exists on the Arcos - no upload will be required.&lt;br /&gt;
&lt;br /&gt;
Since version 2.79.0 Arcos tasks can now have software version validation in the same manner as described for the M-Log task (see [[Creating a Task#Software version validation (Available from version 2.74.0)|Software version validation]]).&lt;br /&gt;
&lt;br /&gt;
== Area5 ==&lt;br /&gt;
[[File:Area5 new task.png|thumb|500x500px|Area5 task]]&lt;br /&gt;
Area5 tasks are used to read out data from the memory of ECUs. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Assignment:&#039;&#039;&#039; To create a new Area5 task you first have to create an Area5 assignment in the [[Area5 Assignment Editor|Area5 Assignment Editor]]. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Validate ECU SW version on WCU:&#039;&#039;&#039; By checking this box, the WCU will validate that the ECU SW version of the task and the actual ECU are the same before starting the task. If they are different, it will not start the task.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Trigger Expression:&#039;&#039;&#039; The task can be started by an expression. This option lets the user specify start trigger conditions based on logical expressions containing signals measured by the Signal Reader module. Note that the user must make sure the signals present in the expression are actually measured (otherwise the expression will never be true). For an explanation of trigger conditions look [[Server Trigger|here]].&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Sync Signal:&#039;&#039;&#039; It is possible to specify a signal with given values that will be sent when the Area5 task starts and stops. This can be used to synchronize the Area5 read-out with external measurements systems like the M-Log.&lt;br /&gt;
&lt;br /&gt;
== Audio ==&lt;br /&gt;
An audio task makes it possible to record audio from a connected microphone. An audio recording can be started in five ways:&lt;br /&gt;
* &#039;&#039;&#039;Trigger button&#039;&#039;&#039;: to initiate the recording you need to attach a button to the WCU in order to start in the audio recording.&lt;br /&gt;
* &#039;&#039;&#039;Signal reader&#039;&#039;&#039;: initiate the recording by a trigger expression in a Signal Reader assignment. The recording is started as soon as a Signal Reader &#039;&#039;&#039;recorder&#039;&#039;&#039; is started. You specify the name of the Signal Reader recorder (e.g. SREC_0) you want to start the audio recording. You can also enter &amp;quot;auto&amp;quot; as the recorder name, in which case a recorder that include the Audio_Device_n internal signal will be selected. &lt;br /&gt;
* &#039;&#039;&#039;Expression&#039;&#039;&#039;: Similar to the &#039;Signal reader&#039; trigger option, the &#039;Expression&#039; option lets the user specify start and stop trigger conditions based on logical expressions containing signals measured by the Signal Reader module. Note that the user must make sure the signals present in the expression are actually measured (otherwise the expression will never be true). Unlike the &#039;Signal Reader&#039; trigger, there does not have to be a recorder configured in the Signal Reader measurement assignment. For an explanation of triggers look [[Server Trigger|here]].&lt;br /&gt;
* &#039;&#039;&#039;Audio level&#039;&#039;&#039;: Start the trigger once the microphone registers volume above a certain threshold.&lt;br /&gt;
* &#039;&#039;&#039;None&#039;&#039;&#039;: start the recording as soon as possible.&lt;br /&gt;
  &lt;br /&gt;
In addition to this, you can set the &#039;&#039;&#039;pre-trig&#039;&#039;&#039; time which is only valid in the cases of trigger button, signal reader, expression and audio level above. As an example, let&#039;s assume the trigger button method is selected. At the moment the trigger button is pressed the audio has already been recorded for the number of seconds specified. This can be handy when you press the trigger button to make a comment about an event where the event was audible.[[File:Skärmavbild 2019-12-18 kl. 14.28.52.png|alt=Audio task|thumb|Audio task]]A maximum &#039;&#039;&#039;duration&#039;&#039;&#039; of the recording can also be set, in seconds from the start trigger event. If there is a stop trigger expression specified, the recording will be stopped either when the stop expression is fulfilled or the max duration is passed, whichever occurs first. If you do not enter a duration it will be set to a default value of 120 seconds.&lt;br /&gt;
It is possible to monitor the audio live. To do this, check the box &amp;quot;Monitoring&amp;quot;. To listen to the live audio you should use a tool such as [http://confero.alkit.se Alkit Confero]. &lt;br /&gt;
&lt;br /&gt;
There is more information about audio in WICE [[Wice audio|here]].&lt;br /&gt;
&lt;br /&gt;
Audio tasks can be scheduled in the same manner as described for the Canrecoder task.&lt;br /&gt;
&lt;br /&gt;
== Blue piraT ==&lt;br /&gt;
The blue PiraT is a measurement system from Telemotive AG that can be configured with measurement set-ups, and data accessed through the WICE Portal. Note that to use the blue PiraT module, the WCUs to be used need to be preconfigured with a special software package (i.e. an &amp;quot;extra bundle&amp;quot;). Contact Alkit Communications in order to set this up.&lt;br /&gt;
&lt;br /&gt;
== CAN-recorder ==&lt;br /&gt;
[[File:Canrecorder.png|thumb|Canrecorder]]&lt;br /&gt;
Canrecorder is a measurement module that allows CAN frames to be captured and logged.&lt;br /&gt;
&lt;br /&gt;
1. In the grid, select which bus (or buses) to record from. By clicking below active column or select a row and click on “Toggle” button.&lt;br /&gt;
&lt;br /&gt;
2. To apply filters on specific CAN buses, select a row and click on “Edit filter”. There it is possible to select one specific frame or several by separating them by “,”. It is also possible to select a range between frames by using “-”. The value can either be decimal or hexadecimal. A example of a filter: “1, 0x12-0xFF”&lt;br /&gt;
&lt;br /&gt;
3. Below the grid settings for how long the recording should be and how many shots. If not using shot count, infinite result files will be created as long as the units are on. &lt;br /&gt;
&lt;br /&gt;
===Scheduling=== &lt;br /&gt;
&lt;br /&gt;
For WCUs with version &amp;gt;= 2.53 this task can be scheduled by selecting the &amp;quot;Add schedule&amp;quot;-checkbox. By doing so, the panel shown in Figure &amp;quot;Schedule Panel&amp;quot; appears. By thereafter selecting the &amp;quot;ASAP&amp;quot; checkbox, the task will be performed once and as soon as possible. If instead the task is to be performed at a specified time, deselect the &amp;quot;Time span&amp;quot; and &amp;quot;Repeat&amp;quot;-checkboxes and select the sought time in the &amp;quot;Start field&amp;quot;. The task can also be performed within a certain time span, and in this case &amp;quot;Time span&amp;quot; should be checked and the Date in &amp;quot;End&amp;quot; field specified. Repetition of the task is defined by checking the &amp;quot;Repeat&amp;quot; checkbox, defining a interval size in the field after &amp;quot;Every&amp;quot; and a recurrence rate in the drop down menu. The task will then be repeated at this rate until the date defined in the &amp;quot;Until&amp;quot; field is reached. By selecting the &amp;quot;On ignition&amp;quot; checkbox, the task will be performed once on ignition. If delay is above 0 then the task will be performed once the configured amount of seconds have passed after ignition.&lt;br /&gt;
&lt;br /&gt;
[[File:Illustration Schedule.png|thumb|left|600px|Schedule Panel]]&lt;br /&gt;
[[File:Scheduling on ignition.png|thumb|300x300px|Schedule Panel with &#039;On ignition&#039; enabled]]&lt;br /&gt;
&amp;lt;br clear=&amp;quot;all&amp;quot;&amp;gt;&lt;br /&gt;
&lt;br /&gt;
To control the time zone in which the task scheduling is to be performed the &amp;quot;WCU local time&amp;quot;-checkbox is used. If this option is deselected, the task will be performed in UTC-time (the date fields present the portal local time). On the other hand, if this box is checked, the task will be performed according to the local time zone predefined for the WCU. A WCU time zone can be defined for a WCU with version &amp;gt;= 2.53 by an administrator using &amp;quot;Edit configuration&amp;quot; in the [[The Portal Administrator View#The Vehicles Tab|Vehicles panel]]. This is useful when there is a need to perform a certain task at a specific time of the day regardless of which country the vehicle is in. For instance, when selecting 100 different WCUs scheduled to perform a task at 10:00, checking the &amp;quot;WCU local time&amp;quot;-checkbox will result in them performing the task according to their time zone setting. Without checking this option, the task will be performed in the corresponding UTC-time, which could mean in the middle of the day or night depending on where the vehicle is located.&lt;br /&gt;
&lt;br /&gt;
== Diagnostic Log and Trace (DLT) ==&lt;br /&gt;
The DLT functionality comes in two flavors. One is based on communicating with a DLT daemon on the ECU and the other is based on the UDS service 38. You switch between the using the button &amp;quot;DLT UDS mode&amp;quot;. &lt;br /&gt;
[[File:DLT multi task and vehicle announcement.png|thumb|DLT multi task and get DLT Daemon address from vehicle announcement]]&lt;br /&gt;
From version 2.96 it also possible to create a task with DLT daemon and DLT UDS mode enabled at the same time by checking the &amp;quot;Enable multi task&amp;quot; checkbox as can be seen in the screenshot the right. &lt;br /&gt;
&lt;br /&gt;
=== DLT Daemon Mode ===&lt;br /&gt;
DLT itself provides a log and trace interface, based on the standardized protocol specified in the AUTOSAR standard 4.0 DLT. A DLT task in the WICE Portal makes it possible to collect such logs in a vehicle where this functionality is available and transfer the data to the WICE portal where logs can be downloaded for further analysis. For a more in-depth description, you can go [https://github.com/GENIVI/dlt-daemon here]. &lt;br /&gt;
&lt;br /&gt;
Basically the WCU is connecting to one or more DLT Daemons and unique filters can be applied to each daemon, filtering out specific log messages. &lt;br /&gt;
&lt;br /&gt;
So when creating a DLT task the number of daemons can be specified and for each daemon the following needs to be specified:&lt;br /&gt;
&lt;br /&gt;
# Daemon address - the IP-address in order for the WCUs DLT client to find the daemon. Check &amp;quot;Use vehicle announcement&amp;quot; (available from version 2.96.0) to get the address from vehicle announcement instead. See screenshot to the right.&lt;br /&gt;
# Daemon port - which port on the address the daemon is at.&lt;br /&gt;
# Filter configurations - filter expressions to be applied on the log messages. If left empty no filter is applied. For an explanation on how to write filter expressions, see [https://github.com/GENIVI/dlt-daemon#learn-more here].&lt;br /&gt;
&lt;br /&gt;
=== DLT UDS Mode ===&lt;br /&gt;
When in this mode the user is presented with a list of directories to handle. Each row in the table is for a specific WCU and directory, as indicated in the illustration for the UDS mode to the right. To add a row, or directory to fetch, press the button &amp;quot;Add transfer&amp;quot;. An editable row shows up in the table where you can enter data. Enter the ECU ID as hexadecimal number, an optional pin code (more on this later) and the directory to fetch. You can add as many entries as you wish.&lt;br /&gt;
[[File:Dlt-uds-task.png|thumb|DLT UDS service 38 task]]&lt;br /&gt;
There is a check box with the text &amp;quot;Use vehicle specific PINs&amp;quot;. By checking the box, the system will try to get a vehicle specific PIN code for each ECU and WCU. The type of PIN for this service is area 19. How to supply the system with such PIN codes is described [[Vehicles#Upload Vehicle pins|here]].&lt;br /&gt;
&lt;br /&gt;
There is also a button &amp;quot;Check PINs&amp;quot; available to resource groups that will—if the above check box is checked—look for any missing PINs in the portal for the configured ECUs.&lt;br /&gt;
&lt;br /&gt;
== ETAS ==&lt;br /&gt;
Through an ETAS task, an ETAS ES720 Drive Recorder system can be configured, and measurement data offloaded and accessed through the WICE Portal.&lt;br /&gt;
&lt;br /&gt;
When creating an ETAS task, the task description file you select must be a .exp file.&lt;br /&gt;
&lt;br /&gt;
== Ethernet capture ==&lt;br /&gt;
This kind of task is used to capture packet data from one of the ethernet interfaces on the WCU. The basics for this kind of task is that you choose the interface you would like to capture from and a capture expression to filter which packets you are interested in. The results from this task type is pcap files. To read more about this task type, go [[Ethernet capture|here]].&lt;br /&gt;
&lt;br /&gt;
== File fetcher ==&lt;br /&gt;
[[File:File fetcher proxy example.png|thumb|The new task dialog of the File fetcher task.]]&lt;br /&gt;
The File fetcher task fetches files from a specified unit and makes them available for downloading in the Portal.&lt;br /&gt;
&lt;br /&gt;
The following needs to be specified when creating such a task:&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;File path&#039;&#039;&#039; - One or several paths to a files or file-containing directories on the unit&#039;s file system. This specifies which files that will be fetched.&lt;br /&gt;
* &#039;&#039;&#039;Username&#039;&#039;&#039; - To log in to the unit.&lt;br /&gt;
* &#039;&#039;&#039;Password&#039;&#039;&#039; - To log in to the unit.&lt;br /&gt;
* &#039;&#039;&#039;IP address&#039;&#039;&#039; - To find the unit.&lt;br /&gt;
* &#039;&#039;&#039;Port&#039;&#039;&#039; -  To find the unit. Default is 22, but can be changed.&lt;br /&gt;
&lt;br /&gt;
Furthermore, the task also allows the use of a proxy.&lt;br /&gt;
&lt;br /&gt;
To use a proxy, the &#039;&#039;&#039;Use Proxy&#039;&#039;&#039; checkbox has to be checked, and the following must be specified:&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;Proxy Username&#039;&#039;&#039; - To log in to the proxy unit.&lt;br /&gt;
* &#039;&#039;&#039;Proxy Password&#039;&#039;&#039; - To log in to the proxy unit.&lt;br /&gt;
* &#039;&#039;&#039;Proxy IP Address&#039;&#039;&#039; - To find the proxy unit.&lt;br /&gt;
* &#039;&#039;&#039;Proxy Port&#039;&#039;&#039; - To find the proxy unit. Default is 22, but can be changed.&amp;lt;br /&amp;gt;&lt;br /&gt;
== IDC ==&lt;br /&gt;
The Internal Diagnostic Client (IDC) is a measurement module that allows a sequence of diagnostic requests to be sent and responses recorded. The sequence of diagnostic requests can be created as an assignment in the Assignment tab, alternatively can be uploaded to the portal as a text file (usually ending with &amp;quot;.seq&amp;quot;). This task can also be scheduled in the same manner as described for the Canrecoder task.&lt;br /&gt;
&lt;br /&gt;
== IPEmotion RT ==&lt;br /&gt;
The WICE system can interact with external loggers as well. From version 2.72 the portal can interact with the logger IPEmotion RT from Ipetronik. You create your measure task using an external tool which creates a file which you can upload for this type of task. The file should have the extension &amp;quot;&#039;&#039;.irf&#039;&#039;&amp;quot;. When the task is downloaded the WICE system will then forward this file to the external logger. The WICE system can also take care of uploading the result files as well where you can retrieve the files using this portal.&lt;br /&gt;
&lt;br /&gt;
Select the &amp;quot;Use existing measurement configuration&amp;quot; checkbox if a measurement setup file already exists on the IPEmotion RT - no upload will be required.&lt;br /&gt;
&lt;br /&gt;
Since version 2.79.0 IPEmotion RT tasks can now have software version validation in the same manner as described for the M-Log task (see [[Creating a Task#Software version validation (Available from version 2.74.0)|Software version validation]]).&lt;br /&gt;
&lt;br /&gt;
== LPD ==&lt;br /&gt;
This type of task is ultimately handled by a separate App in an iPhone or iPad. The WICE system simply makes this task available to the App through a REST interface running on the WCU. The task consists of a specially crafted excel file. When the file is uploaded to the WICE portal it is validated to make sure that it can be read by the App.&lt;br /&gt;
[[File:Screenshot from 2023-05-24 16-09-55.png|thumb|View an LPD task]]&lt;br /&gt;
[[File:Screenshot-edit-lpd.png|thumb|Upload opportunity after pressing the Edit button]]&lt;br /&gt;
From version 2.83.0 of the WICE portal the task measurement file can be updated via the View Task function in the Tasks tab and a dialog as shown to the right will appear. By pressing the &amp;quot;Edit&amp;quot; button in the lower right corner, you will be presented with the possibility to upload a new measurement task file. This is shown with a red triangle in the illustration on the right.&lt;br /&gt;
&lt;br /&gt;
== M-Log ==&lt;br /&gt;
The WICE system can interact with external loggers as well. One such logger is called M-Log from Ipetronik. You create your measure task using an external tool which creates a file which you can upload for this type of task. The WICE system will then forward this file to the external logger. The WICE system can also take care of uploading the result files as well where you can retrieve the files using this portal.[[File:MlogForWiki.png|thumb|M-Log task]]&lt;br /&gt;
[[File:Screenshot from 2022-04-21 09-34-11.png|alt=Entering ECU software version|thumb|Entering ECU software version]]&lt;br /&gt;
Select the &amp;quot;Use existing measurement configuration&amp;quot; checkbox if a measurement setup file already exists on the MLOG - no upload will be required.&lt;br /&gt;
&lt;br /&gt;
==== Software version validation (Available from version 2.74.0) ====&lt;br /&gt;
The measurement assignment for an MLOG is created using an external tool to WICE. An assignment is created with a certain version of the ECU software in mind for each ECU in the assignment. In order for the assignment to work it might be important that the ECU software version in the vehicle matches the software version of the ECU it was created for. In WICE, you can ask the system to read the current software version for each ECU which is stored and can be viewed, e.g. via the [[ECU List|ECU list]]. As WICE cannot know which software versions the assignment was created for, the user can supply this to WICE. By doing that, WICE can validate the entered software versions against what has been read out for each vehicle and thus aid the user in making sure that an assignment will work once it will run. &lt;br /&gt;
&lt;br /&gt;
To make the validation possible the user enters a ECU by its address, not the name. To help find out the address for an ECU you can go to the [[ECU List|ECU list]] to find the address of a specific ECU. Have a look at the illustration, Entering ECU software version, to see where in the dialog this is entered. On the top you enter the ECU address on the left and what software version is expected on the right. When satisfied, press the &amp;quot;Add&amp;quot; button. The data you just entered will be added to the table and evaluated against what the WICE system has read out from the vehicle. In the example to the right something is incorrect which is indicated by the yellow color. To see the exact reason, simply use the cursor to see the specific message. &lt;br /&gt;
&lt;br /&gt;
A negative validation in not enforced in the sense that you cannot run the assignment but rather an indication that it might not work as expected. You can always go ahead and press &amp;quot;Submit&amp;quot;. &lt;br /&gt;
 &lt;br /&gt;
== MQTT ==&lt;br /&gt;
A MQTT task makes it possible to record data from a MQTT message broker, by specifying a specific topic.&lt;br /&gt;
&lt;br /&gt;
== Rapid prototyping ==&lt;br /&gt;
A Rapid prototyping (RP) task makes it possible to download RP binaries to multiple WCUs and keep track of the result files the RP task might produce. For more information about RP, see [[WICE RP How-To]] and [[WICE RP Manual]].&lt;br /&gt;
[[File:Rapid prototyping task.png|thumb|Rapid prototyping task]]&lt;br /&gt;
The rapid prototyping tab can be seen in Figure &amp;quot;Rapid prototyping task&amp;quot;. &lt;br /&gt;
&lt;br /&gt;
An RP task must consist of at least an &#039;RP binary&#039; or a &#039;Web application zip file&#039;.&lt;br /&gt;
&lt;br /&gt;
== SoftHub ==&lt;br /&gt;
The SoftHub is a measurement system that can be run either as a stand alone unit or as a software module on the WCU, with functionality similar to the Signal Reader module. A SoftHub task is created much in the same way as a Signal Reader task.&lt;br /&gt;
&lt;br /&gt;
When creating a SoftHub task, you select a .shub task file, and then proceed in the same way as the Signal Reader task. &lt;br /&gt;
&lt;br /&gt;
The SoftHub task will generate result files. It may be interesting to know if certain signals reach certain values in these result files, therefore it is possible to add &#039;&#039;&#039;server triggers&#039;&#039;&#039; to the task that will trigger and add a suitable label to the corresponding result file. Read more about this [[Server Trigger|here]].&lt;br /&gt;
&lt;br /&gt;
== Signal Reader == &lt;br /&gt;
[[File:Illustration SignalReader.png|thumb|271x271px|Signal reader task]]&lt;br /&gt;
Signal Reader is a data capture module that allows monitoring and logging of CAN and FlexRay signals, as well as diagnostics data, and ECU-internal signals read by CCP or XCP. To create a Signal Reader task you proceed as follows:&lt;br /&gt;
&lt;br /&gt;
1. You either select an assignment file of .haf format, or choose an assignment created in the assignment creator (see [[Signal Reader Assignment Wizard]]). Your current choice will be displayed in the &amp;quot;Chosen file&amp;quot; field.&lt;br /&gt;
&lt;br /&gt;
2. When you have selected an assignment and one or more WCUs, the CAN buses defined in the assignment and on the WCU will be mapped. If they can be automatically mapped a green check symbol will be displayed, otherwise a red cross will be displayed. Clicking the mapping button will open the mapper. In the pop-up window you will have to map the different buses to each other manually and then save. Once this is done correctly, the red cross will become a green check mark, indicating that the mappings are ready to be automatically applied upon submit. Read more about this in [[I/O configurations]] and [[Mappings]].&lt;br /&gt;
&lt;br /&gt;
3. With a Signal Reader task you can monitor CAN, FlexRay, ODB-II and WCU-internal signals live by selecting &amp;quot;Monitor signals&amp;quot;. When selected, two boxes will appear under the task description. In the left one you search for signals and drag them over to the right one where the signals to be monitored are listed. You can later see the monitored signals by pressing the &#039;&#039;&#039;Monitor Signals&#039;&#039;&#039; button either in the Tasks tab or in the Vehicles tab. It is also possible to copy the signals text in the bottom right corner of the right box. Next to the copy text button you can also paste signals as text where the pasted signal names will be matched against the list of unselected signals&lt;br /&gt;
&lt;br /&gt;
4. You can choose if you want the signals to have their data source names as a prefix (e.g. CAN1.EngineSpeed instead of EngineSpeed).&lt;br /&gt;
&lt;br /&gt;
5. The Signal Reader task will generate result files. It may be interesting to know if certain signals reach certain values in these result files, therefore it is possible to add &#039;&#039;&#039;Server Triggers&#039;&#039;&#039; to the assignment that will trigger and add a suitable label to the corresponding result file. Read more about this [[Server Trigger|here]].&lt;br /&gt;
&lt;br /&gt;
A Signal reader task can be scheduled in the same manner as described for the Canrecoder task.&lt;br /&gt;
&lt;br /&gt;
=== The Signal Broker === &lt;br /&gt;
Signal Reader can act as a Signal Broker for other software components. For instance, the audio and video modules relies on the Signal Broker API of Signal Reader for evaluating start and stop trigger expressions. Moreover, the Signal Broker gives programmatical access to signals for Rapid Prototyping tasks.  Read more about this in [[WICE Signal Broker API]].&lt;br /&gt;
&lt;br /&gt;
=== Files containing references to sequence files === &lt;br /&gt;
[[File:SequenceFileForSignalreader.png|thumb|right|Sequence Files References in .haf File]] &lt;br /&gt;
If the measurement file contains references to sequence files, you are also required to select these in order to run the task. The portal scans the .haf file for such entries and presents this to you, see illustration 4.2. Click the button for each sequence file reference to upload each sequence file needed. Some requests in the sequence file may be for reading DTCs, and in such cases you can select the option of also reading associated &#039;&#039;Snapshots&#039;&#039; or &#039;&#039;Extended data&#039;&#039;. An example of this can found in Figure &amp;quot;Sequence Files References in .haf File&amp;quot;. &lt;br /&gt;
[[File:SequenceFilesForSignalreaderWithFunctionalQuery.png|thumb|right|Sequence File with Functional Query]] &lt;br /&gt;
&lt;br /&gt;
Here, the .haf file contained two references to sequence files. As no sequence files have yet been uploaded, the selection for reading snapshot or extended data is grayed out. In Figure &amp;quot;Sequence File with Functional Query&amp;quot; we have selected one such sequence file containing (functional) DTC requests. Here we have checked that we would like to read &#039;&#039;Extended data&#039;&#039;. It is also possible to select both &#039;&#039;Snapshots&#039;&#039; and &#039;&#039;Extended data&#039;&#039;.  &lt;br /&gt;
&amp;lt;br&amp;gt;&lt;br /&gt;
&lt;br /&gt;
=== WICE internal signals ===&lt;br /&gt;
In addition to CAN and FlexRay signals, a number of internal signals (i.e. internal to the WCU) are also available. The following WICE-internal signals are supported: [[WICE Internal Signals|WICE Internal Signals]]&lt;br /&gt;
&lt;br /&gt;
== SoH ==&lt;br /&gt;
[[File:Screenshot from 2021-04-01 09-43-34.png|thumb|799x799px|SoH]]&lt;br /&gt;
A State of Health (SoH) task collects specific status information from vehicles. You select which information you want the task to collect by filling in one or more of the checkboxes shown in Figure &amp;quot;SoH&amp;quot;. The number of checkboxes shown can vary depending on the WICE installation. In order for SoH data to be correctly interpreted, relevant description files (e.g. SDDB) for the vehicles executing the SoH task may have to been available. To add such a description file for a vehicle, see [[The_Portal_Administrator_View#The_Edit_Car_Dialog|The Edit Car Dialog]].The six different options are:&lt;br /&gt;
*Mileage&lt;br /&gt;
*Voltage&lt;br /&gt;
*Read ECU software numbers&lt;br /&gt;
*Read ECU DTC:s (optionally including &#039;Snapshot&#039; and &#039;Extended data&#039;)&lt;br /&gt;
*Read OBD-II PIDs&lt;br /&gt;
*App Diagnotstic Db Part Num&lt;br /&gt;
*DM1, Diagnostic Message using the [[wikipedia:SAE_J1939|j1939 protocol]]&lt;br /&gt;
*Odometer, reading the odometer using the [[wikipedia:SAE_J1939|j1939 protocol]] (available from WCU version 2.63)&lt;br /&gt;
*Clear DTCs. &lt;br /&gt;
**If reading DTCs is requested as well, those will be read before clearing the DTCs. (available from WCU version 2.63)&lt;br /&gt;
**If this option (Clear DTC) is chosen it is optionally possible to set a PIN code for unlocking a gateway module - e.g. Vehicle Gateway Module (VGM). (Available from WCU version 2.66)&lt;br /&gt;
*Engine hours, reading engine hours using the [[wikipedia:SAE_J1939|j1939 protocol]] (available from WCU version 2.64). The result for this can be read in the generated j1939-file from the task. It is a text type of file. In addition, a system value label called &#039;engine_hours&#039; (as default, can be changed on a customer basis). This label shows the latest read value and is available on the vehicle.  &lt;br /&gt;
&lt;br /&gt;
This task can also be scheduled in the same manner as described for the Canrecoder task.&lt;br /&gt;
&lt;br /&gt;
Some selections above might not be available to you as this is a configuration setting depending on customer.&lt;br /&gt;
&lt;br /&gt;
== SWDL ==&lt;br /&gt;
[[File:Swdl task Screenshot from 2023-06-28 14-50-55.png|thumb|791x791px|New SWDL task]]&lt;br /&gt;
A Software Download (SWDL) task updates the ECU software in one or more ECUs in one or more vehicles. A number of Versatile Binary Format (VBF) files containing the ECU software need to be supplied, along with PIN codes to allow security access to re-program the ECUs. The PIN codes should be in the format of five hexadecimal numbers, e.g. &amp;lt;code&amp;gt;ff:00:1a:2c:77&amp;lt;/code&amp;gt; (or alternatively, omitting the colon separator, &amp;lt;code&amp;gt;ff001a2c77&amp;lt;/code&amp;gt;). When a SWDL task has been created and assigned to one or more WCUs, it will cause all vbf files to be downloaded to the WCUs, and then the actual re-programming can be triggered by the vehicle user through the WCU status GUI web interface. The uploaded vbf-files are presented in a table along with its ECU and software part type (SW part type). In a separate table, the PIN codes for each ECU are presented along with the total number of files uploaded per WCU, see Figure &amp;quot;New SWDL task&amp;quot;. To get an overview of how the files relate to the ECUs it is possible to choose the &amp;quot;Group by&amp;quot;-option when right clicking the ECU column in the file table. &lt;br /&gt;
&lt;br /&gt;
SWDL tasks can optionally include a &#039;&#039;&#039;pre-update sequence file and/or a post-update sequence file&#039;&#039;&#039;. The diagnostic requests of those sequence files will be sent before and after the ECU re-programming respectively.&lt;br /&gt;
&lt;br /&gt;
SWDL tasks can optionally include one &#039;&#039;&#039;signature file&#039;&#039;&#039; (containing checksums). The file is assumed to be an xml file. (Available from WCU version 2.66) If either of the optional files is selected, a field will appear to the right of the chosen file. This field will contain the name of the chosen file. (Available from WCU version 2.70)&lt;br /&gt;
&lt;br /&gt;
SWDL tasks can optionally include a &#039;&#039;&#039;VGM unlock&#039;&#039;&#039; access control mechanism, with a PIN code for the VGM node. This is specifically for vehicles requiring this kind of access control for ECU re-programming.&lt;br /&gt;
&lt;br /&gt;
By checking the box &#039;&#039;&#039;Run SoH after completion&#039;&#039;&#039; it is possible to let the SWDL task run the WCUs SoH task after the SWDL task is completed.&lt;br /&gt;
&lt;br /&gt;
If you would like to use any individual ECU pin codes for a vehicle, make sure to check the box &amp;quot;&#039;&#039;&#039;Use Vehicle Pin mappings&#039;&#039;&#039;&amp;quot;. If a pin code for the ECU targeted by a vbf file, the pin code for the vehicle will be used. If no such pin code is found, the one entered in the right hand side table is used. Read more on how to prepare a vehicle with pin codes [[The Portal Administrator View#Upload a file describing ECU pin codes for a vehicle|here]].&lt;br /&gt;
&lt;br /&gt;
SWDL tasks can optionally contain a &#039;&#039;&#039;Trigger Expression&#039;&#039;&#039; which must be fulfilled within a specified time limit (&amp;quot;Wait time&amp;quot;) for ECU re-programming to be allowed. The trigger expression follows the same syntax as Signal Reader trigger expressions (or [[Server Trigger|Server Triggers]], audio/video triggers), and should be built up from signals being measured in a Signal Reader assignment. The user must make sure that there is a Signal Reader assignment on the WCUs of the SWDL task, with the signals of the trigger expression being measured.&lt;br /&gt;
 &lt;br /&gt;
&lt;br /&gt;
It is also possible to choose to &#039;&#039;&#039;ignore checksums&#039;&#039;&#039; and/or &#039;&#039;&#039;disable pre-programming&#039;&#039;&#039; using the corresponding checkboxes.&lt;br /&gt;
&lt;br /&gt;
The SWDL module can be [[The Portal Administrator View#Configure the Software Download Module|configured]] to perform SWDL either over CAN or over Ethernet (DoIP).&lt;br /&gt;
&lt;br /&gt;
== Video ==&lt;br /&gt;
A video task makes it possible to record and monitor live video from one or two cameras attached to a WCU. You can trigger recording of video in four ways:&lt;br /&gt;
* &#039;&#039;&#039;Trigger button&#039;&#039;&#039;: To initiate the recording you need to attach a button to the WCU in order to start in the video recording.&lt;br /&gt;
* &#039;&#039;&#039;Signal reader&#039;&#039;&#039;: Initiate the recording when a recorder in a Signal Reader assignment starts. The recording is started as soon as a Signal Reader &#039;&#039;recorder&#039;&#039; is started. You specify the name of the Signal Reader recorder (e.g. SREC_0) you want to start the video recording. You can also enter &amp;quot;auto&amp;quot; as the recorder name, in which case a recorder that include the Video_Device_n internal signal will be selected. &lt;br /&gt;
* &#039;&#039;&#039;Expression&#039;&#039;&#039;: Similar to the &#039;Signal reader&#039; trigger option, the &#039;Expression&#039; option lets the user specify start and stop trigger conditions based on logical expressions containing signals measured by the Signal Reader module. Note that the user must make sure the signals present in the expression are actually measured (otherwise the expression will never be true). Unlike the &#039;Signal Reader&#039; trigger, there does not have to be a recorder configured in the Signal Reader measurement assignment. For an explanation of how to enter triggers, have a look [[Server Trigger|here]].&lt;br /&gt;
* &#039;&#039;&#039;None&#039;&#039;&#039;: start the recording as soon as possible. (Use this with caution, since it tends to produce prohibitively large video files.)&lt;br /&gt;
&lt;br /&gt;
In addition to this, you can set the &#039;&#039;&#039;pre-trig&#039;&#039;&#039; time (not valid in the cases of the &#039;None&#039; trigger option above). As an example, let&#039;s assume the trigger button method is selected. At the moment the trigger button is pressed the video has already been recorded for the number of seconds specified.&lt;br /&gt;
&lt;br /&gt;
A maximum &#039;&#039;&#039;duration&#039;&#039;&#039; of the recording can also be set, in seconds from the start trigger event. If there is a stop trigger expression specified, the recording will be stopped either when the stop expression is fulfilled or the max duration is passed, whichever occurs first. If you do not enter a duration it will be set to a default value of 120 seconds.&lt;br /&gt;
&lt;br /&gt;
If monitoring of video from a WCU is enabled, a live video stream will be transmitted which can be viewed using a RTP-based video tool, for instance [http://confero.alkit.se Alkit Confero]. This task can also be scheduled in the same manner as described for the Canrecoder task.&lt;br /&gt;
&lt;br /&gt;
Read more about the video support in WICE [[WICE_video|here]].&lt;br /&gt;
&lt;br /&gt;
== Applicable for all types ==&lt;br /&gt;
If enabled at your site, there might be an opportunity to announce to third party applications that a result file is available using a [[wikipedia:Jakarta_Messaging|JMS API]]. By checking this box, as soon as a result file is added in the back-end this will be signaled using a customer specific event. The check box title is &amp;quot;Announce result file availability&amp;quot;, this can be seen in the image in [[#SoH|SoH]].&lt;br /&gt;
&lt;br /&gt;
=== Site specific features ===&lt;br /&gt;
&lt;br /&gt;
==== Announce result file availability ====&lt;br /&gt;
[[File:Resultfilepanel.png|thumb|Announced On column]]&lt;br /&gt;
If enabled at your site, there might be an opportunity to announce to third party applications that a result file is available using a [[wikipedia:Jakarta_Messaging|JMS API]]. By checking this box, as soon as a result file is added in the back-end this will be signaled using a customer specific event. The check box title is &amp;quot;Announce result file availability&amp;quot;, this can be seen in the image in [[#SoH|SoH]]. Starting from version 2.87.0, there&#039;s a new &#039;Announced On&#039; column that keeps track of when the result file was announced.&lt;br /&gt;
&lt;br /&gt;
==== Retention time ====&lt;br /&gt;
[[File:Retention time.png|thumb|435x435px|Retention time]]&lt;br /&gt;
This function works by setting a retention time in days which simply says that data coming in from the task, i.e. result files and positions will be kept the set number of days from when the data was collected. If, e.g. setting the retention time for an task to 30 days, will keep data until it is 30 days old where it will be automatically removed. See image. &lt;br /&gt;
&lt;br /&gt;
It is possible to set a default retention time for resource groups. To do this, add a global value label named &#039;&#039;&#039;RETENTION_TIME&#039;&#039;&#039; to the resource group and give it an appropriate value. This value will then be used as a template value when creating a new task for this resource group. If multiple resource groups have this label and they have different values, the one with the lowest/shortest retention time value will be chosen as the template value.&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=File:DLT_multi_task_and_vehicle_announcement.png&amp;diff=4034</id>
		<title>File:DLT multi task and vehicle announcement.png</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=File:DLT_multi_task_and_vehicle_announcement.png&amp;diff=4034"/>
		<updated>2025-11-03T14:12:02Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;Screenshot showing DLT multi task and vehicle announcement available from version 2.96.0&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=New_features_in_v2.96&amp;diff=4033</id>
		<title>New features in v2.96</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=New_features_in_v2.96&amp;diff=4033"/>
		<updated>2025-11-03T13:57:27Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;=== DLT Daemon mode and DLT UDS in parallel ===&lt;br /&gt;
The portal now supports creating DLT tasks with daemon mode and UDS service 38 enabled at the same time. This requires WCU software version 2.96.0 or later for the selected WCUs. See [[Creating a Task#Diagnostic Log and Trace (DLT)|Creating a Task#Diagnostic Log and Trace (DLT).]]&lt;br /&gt;
&lt;br /&gt;
=== DLT Daemon address via vehicle announcement ===&lt;br /&gt;
For WCUs configured for software version 2.96.0 it is possible to get the daemon address via vehicle announcement instead of specifying a daemon address when the task is created. See [[Creating a Task#Diagnostic Log and Trace (DLT)|Creating a Task#Diagnostic Log and Trace (DLT).]]&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=New_features_in_v2.96&amp;diff=4032</id>
		<title>New features in v2.96</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=New_features_in_v2.96&amp;diff=4032"/>
		<updated>2025-11-03T13:55:11Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;=== DLT Daemon mode and DLT UDS in parallel ===&lt;br /&gt;
The portal now supports creating DLT tasks with daemon mode and UDS service 38 enabled at the same time. This requires WCU software version 2.96.0 or later for the selected WCUs. See [[Creating a Task#Diagnostic Log and Trace (DLT)|Creating a Task#Diagnostic Log and Trace (DLT).]]&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=New_features_in_v2.96&amp;diff=4031</id>
		<title>New features in v2.96</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=New_features_in_v2.96&amp;diff=4031"/>
		<updated>2025-11-03T13:45:59Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;=== DLT Daemon mode and DLT UDS in parallel ===&lt;br /&gt;
The portal now supports creating DLT tasks with daemon mode and UDS service 38 enabled at the same time. This requires that the WCUs the task will be created for are configured for version 2.96.0 or later. See [[Creating a Task#Diagnostic Log and Trace (DLT)|Creating a Task#Diagnostic Log and Trace (DLT).]]&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=Main_Page&amp;diff=4030</id>
		<title>Main Page</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=Main_Page&amp;diff=4030"/>
		<updated>2025-10-23T12:21:37Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&#039;&#039;&#039;Welcome to the WICE Wiki!&#039;&#039;&#039;&amp;lt;br&amp;gt;Here you can find information about the WICE System and how-to guides of all the features in the WICE Portal. &lt;br /&gt;
&lt;br /&gt;
The WICE system is a powerful and flexible data collection and fleet management system developed by Alkit Communications AB. The WICE Portal is the user interface of the WICE system. &lt;br /&gt;
&lt;br /&gt;
Feel free to suggest improvements and add pages if you feel that some information is missing.&lt;br /&gt;
&lt;br /&gt;
To see the addtions/changes of the previous version of the WICE portal, see [[New features in v2.96|New features in v2.96.]] (Also available from the sidebar to the left.)&lt;br /&gt;
&lt;br /&gt;
For full release history see [https://wice-sysdoc.alkit.se/index.php/Release_notes WICE Release history].&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=New_features_in_v2.96&amp;diff=4029</id>
		<title>New features in v2.96</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=New_features_in_v2.96&amp;diff=4029"/>
		<updated>2025-10-23T12:21:15Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: Created blank page&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=MediaWiki:Sidebar&amp;diff=4028</id>
		<title>MediaWiki:Sidebar</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=MediaWiki:Sidebar&amp;diff=4028"/>
		<updated>2025-10-23T12:21:02Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
* navigation&lt;br /&gt;
** mainpage|mainpage-description&lt;br /&gt;
** recentchanges-url|recentchanges&lt;br /&gt;
** randompage-url|randompage&lt;br /&gt;
** helppage|help&lt;br /&gt;
* Table of Contents&lt;br /&gt;
**requirements|1. Requirements&lt;br /&gt;
**Quick Start|2. Quick Start&lt;br /&gt;
**The_Portal_User_View|3. The Portal User View&lt;br /&gt;
**The_Portal_Administrator_View|4. The Portal Administrator View&lt;br /&gt;
**WCU platform|5. The WCU Platform&lt;br /&gt;
**M2M REST API| 6. M2M REST API&lt;br /&gt;
&amp;lt;!--** New_features_in_v2.40|New in v2.40--&amp;gt;&lt;br /&gt;
** New features in v2.96|New in v2.96&lt;br /&gt;
* SEARCH&lt;br /&gt;
* TOOLBOX&lt;br /&gt;
* LANGUAGES&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=MediaWiki:Sidebar&amp;diff=4027</id>
		<title>MediaWiki:Sidebar</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=MediaWiki:Sidebar&amp;diff=4027"/>
		<updated>2025-10-23T12:20:46Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
* navigation&lt;br /&gt;
** mainpage|mainpage-description&lt;br /&gt;
** recentchanges-url|recentchanges&lt;br /&gt;
** randompage-url|randompage&lt;br /&gt;
** helppage|help&lt;br /&gt;
* Table of Contents&lt;br /&gt;
**requirements|1. Requirements&lt;br /&gt;
**Quick Start|2. Quick Start&lt;br /&gt;
**The_Portal_User_View|3. The Portal User View&lt;br /&gt;
**The_Portal_Administrator_View|4. The Portal Administrator View&lt;br /&gt;
**WCU platform|5. The WCU Platform&lt;br /&gt;
**M2M REST API| 6. M2M REST API&lt;br /&gt;
&amp;lt;!--** New_features_in_v2.40|New in v2.40--&amp;gt;&lt;br /&gt;
** New features in v2.95|New in v2.96&lt;br /&gt;
* SEARCH&lt;br /&gt;
* TOOLBOX&lt;br /&gt;
* LANGUAGES&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=Main_Page&amp;diff=3990</id>
		<title>Main Page</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=Main_Page&amp;diff=3990"/>
		<updated>2025-08-25T08:56:39Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&#039;&#039;&#039;Welcome to the WICE Wiki!&#039;&#039;&#039;&amp;lt;br&amp;gt;Here you can find information about the WICE System and how-to guides of all the features in the WICE Portal. &lt;br /&gt;
&lt;br /&gt;
The WICE system is a powerful and flexible data collection and fleet management system developed by Alkit Communications AB. The WICE Portal is the user interface of the WICE system. &lt;br /&gt;
&lt;br /&gt;
Feel free to suggest improvements and add pages if you feel that some information is missing.&lt;br /&gt;
&lt;br /&gt;
To see the addtions/changes of the previous version of the WICE portal, see [[New features in v2.95|New features in v2.95.]] (Also available from the sidebar to the left.)&lt;br /&gt;
&lt;br /&gt;
For full release history see [[https://wice-sysdoc.alkit.se/index.php/Release_notes WICE Release history]].&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=New_features_in_v2.95&amp;diff=3989</id>
		<title>New features in v2.95</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=New_features_in_v2.95&amp;diff=3989"/>
		<updated>2025-08-25T08:56:17Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: Created blank page&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=MediaWiki:Sidebar&amp;diff=3988</id>
		<title>MediaWiki:Sidebar</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=MediaWiki:Sidebar&amp;diff=3988"/>
		<updated>2025-08-25T08:55:51Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
* navigation&lt;br /&gt;
** mainpage|mainpage-description&lt;br /&gt;
** recentchanges-url|recentchanges&lt;br /&gt;
** randompage-url|randompage&lt;br /&gt;
** helppage|help&lt;br /&gt;
* Table of Contents&lt;br /&gt;
**requirements|1. Requirements&lt;br /&gt;
**Quick Start|2. Quick Start&lt;br /&gt;
**The_Portal_User_View|3. The Portal User View&lt;br /&gt;
**The_Portal_Administrator_View|4. The Portal Administrator View&lt;br /&gt;
**WCU platform|5. The WCU Platform&lt;br /&gt;
**M2M REST API| 6. M2M REST API&lt;br /&gt;
&amp;lt;!--** New_features_in_v2.40|New in v2.40--&amp;gt;&lt;br /&gt;
** New features in v2.95|New in v2.95&lt;br /&gt;
* SEARCH&lt;br /&gt;
* TOOLBOX&lt;br /&gt;
* LANGUAGES&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=Main_Page&amp;diff=3985</id>
		<title>Main Page</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=Main_Page&amp;diff=3985"/>
		<updated>2025-08-11T14:54:58Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&#039;&#039;&#039;Welcome to the WICE Portal Wiki!&#039;&#039;&#039;&amp;lt;br&amp;gt;Here you can find information and how-to guides of all the features in the portal. &lt;br /&gt;
&lt;br /&gt;
Feel free to suggest improvements and add pages if you feel that some information is missing.&lt;br /&gt;
&lt;br /&gt;
To see the addtions/changes of the previous version of the WICE portal, see [[New features in v2.94|New features in v2.94.]] (Also available from the sidebar to the left.)&lt;br /&gt;
&lt;br /&gt;
For full release history see [[https://wice-sysdoc.alkit.se/index.php/Release_notes WICE Release history]].&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=Main_Page&amp;diff=3984</id>
		<title>Main Page</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=Main_Page&amp;diff=3984"/>
		<updated>2025-08-11T14:54:49Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&#039;&#039;&#039;Welcome to the WICE Portal Wiki!&#039;&#039;&#039;&amp;lt;br&amp;gt;Here you can find information and how-to guides of all the features in the portal. &lt;br /&gt;
&lt;br /&gt;
Feel free to suggest improvements and add pages if you feel that some information is missing&lt;br /&gt;
&lt;br /&gt;
To see the addtions/changes of the previous version of the WICE portal, see [[New features in v2.94|New features in v2.94.]] (Also available from the sidebar to the left.)&lt;br /&gt;
&lt;br /&gt;
For full release history see [[https://wice-sysdoc.alkit.se/index.php/Release_notes WICE Release history]].&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=Main_Page&amp;diff=3983</id>
		<title>Main Page</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=Main_Page&amp;diff=3983"/>
		<updated>2025-08-11T14:05:37Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&#039;&#039;&#039;Welcome to the WICE Portal Wiki!&#039;&#039;&#039;&amp;lt;br&amp;gt;Here you can find information and how-to guides of all the features in the portal. &lt;br /&gt;
&lt;br /&gt;
Feel free to suggest improvements and add pages if you feel that some information is missing.&lt;br /&gt;
&lt;br /&gt;
To see the addtions/changes of the previous version of the WICE portal, see [[New features in v2.94|New features in v2.94.]] (Also available from the sidebar to the left.)&lt;br /&gt;
&lt;br /&gt;
For full release history see [[https://wice-sysdoc.alkit.se/index.php/Release_notes WICE Release history]].&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=Main_Page&amp;diff=3982</id>
		<title>Main Page</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=Main_Page&amp;diff=3982"/>
		<updated>2025-08-11T14:05:28Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&#039;&#039;&#039;Welcome to the WICE Portal Wiki!&#039;&#039;&#039;&amp;lt;br&amp;gt;Here you can find information and how-to guides of all the features in the portal. &lt;br /&gt;
&lt;br /&gt;
Feel free to suggest improvements and add pages if you feel that some information is missing&lt;br /&gt;
&lt;br /&gt;
To see the addtions/changes of the previous version of the WICE portal, see [[New features in v2.94|New features in v2.94.]] (Also available from the sidebar to the left.)&lt;br /&gt;
&lt;br /&gt;
For full release history see [[https://wice-sysdoc.alkit.se/index.php/Release_notes WICE Release history]].&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=Downloading_Files&amp;diff=3955</id>
		<title>Downloading Files</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=Downloading_Files&amp;diff=3955"/>
		<updated>2025-06-13T07:42:09Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;From version 2.94 of the portal, the background preparation described below is no longer needed. The download will start instantly when clicking the Download or &amp;quot;Get all files&amp;quot; buttons.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
When using functions such as &amp;quot;Get file(s)&amp;quot; to download files, the files will first be prepared and compiled into a zip file before the actual download. This is because the preparation can take a considerable time and is therefore best done in the background. When pressing download or get to download file(s) you will get a message telling you that your files are being prepared and you will be notified when it is ready, as shown in the Figure &amp;quot;Message: File Preparation&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
[[File:Illustration20.png|Message: File Preparation|link=https://wiki.alkit.se/index.php/File:Illustration20.png|none|thumb|800x800px]]&lt;br /&gt;
&lt;br /&gt;
When the preparation is done and your files are ready for download, the message presented in Figure &amp;quot;Message: File Preparation Done&amp;quot; will be shown in conjunction with the download icon in the tool strip.&lt;br /&gt;
&lt;br /&gt;
[[File:Illustration21.png|Message: File Preparation Done|link=https://wiki.alkit.se/index.php/File:Illustration21.png|none|thumb|350x350px]]&lt;br /&gt;
&lt;br /&gt;
To see which file(s) are ready for download you press the blue folder icon with a download sign located at the top of the screen. With the dialog that opened you can see and manage your downloads. Here there are two bars where you can see the preparation progress and download progress going from gray to green. To easily tell the different downloads apart, you can see their assigned description (is given) to easily remember which contains what. To download a file or a set of files you press the downwards pointing arrow icon where you will get an option to set a filename before pressing download. You can also remove or cancel downloads by pressing the red icon with a cross.&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=New_features_in_v2.94&amp;diff=3953</id>
		<title>New features in v2.94</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=New_features_in_v2.94&amp;diff=3953"/>
		<updated>2025-06-13T07:40:21Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;== Support for labels in vehicle templates ==&lt;br /&gt;
As of version 2.94.0, the Vehicle Template panel supports adding labels to vehicle templates. Read more about it [https://wiki.alkit.se/wice294/index.php/Vehicle_templates here].&lt;br /&gt;
&lt;br /&gt;
== Extend WCU history to account for more changes ==&lt;br /&gt;
Two new columns have been added to the WCU history: &#039;&#039;&#039;&amp;quot;Type of Change&amp;quot;&#039;&#039;&#039; and &#039;&#039;&#039;&amp;quot;State&amp;quot;&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;Type of Change&#039;&#039;&#039; indicates whether the update involved a configuration change, a tools change, or a label change.&lt;br /&gt;
* &#039;&#039;&#039;State&#039;&#039;&#039; reflects the WCU’s status at the time of the change, such as &amp;quot;In Operation&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
You can read more about these updates [https://wiki.alkit.se/wice294/index.php/Vehicles#Right_click_context_menu here].&lt;br /&gt;
&lt;br /&gt;
== Configurable tester address for signal reader, IDC, SoH and vinreader ==&lt;br /&gt;
The SignalReader, IDC, State of Health, and VINReader modules have all been updated to include a new field called &#039;Tester Address.&#039; In the VINReader module, this field is visible only when the ID reader method is set to SPA 29. Additionally, the Tester Address field is available only with WCU version 2.94.0 or later. Read more about it [https://wiki.alkit.se/wice294/index.php/The_Portal_Administrator_View#Configure_the_Vinreader_Module here]&lt;br /&gt;
&lt;br /&gt;
== Fetch PINs from PIE ==&lt;br /&gt;
&lt;br /&gt;
== New column for WCU state in Vehicles Tab ==&lt;br /&gt;
A new column has been introduced to the Vehicles tab that will show the current state of the WCU.&lt;br /&gt;
&lt;br /&gt;
== Support for SOVD IP Address in the WCU configuration ==&lt;br /&gt;
As of version 2.94.0, you can enter either an IPv4 address or a physical ID in the &#039;SOVD IP Address&#039; field located under the Connection tab in the WCU configuration settings. This field is only visible when the WCU is running version 2.94.0 or later. This is only enabled for customers needing support for the function. &lt;br /&gt;
&lt;br /&gt;
== Support to update a subset of WCU configuration variables ==&lt;br /&gt;
[[File:UpdateSubSetOfWCUConfigruationVariable.png|thumb|Update a subset of WCU configuration variables window]]&lt;br /&gt;
You can now edit the configuration of multiple WCUs simultaneously. When doing so, the same configuration editor will appear, but with a few new additions. A new &#039;&#039;&#039;&amp;quot;Show Changed Settings&amp;quot;&#039;&#039;&#039; button allows you to easily track any modifications you&#039;ve made. Additionally, a new dropdown menu labeled &#039;&#039;&#039;&amp;quot;Settings from WCU&amp;quot;&#039;&#039;&#039; lets you select which WCU’s configuration you want to edit from. More importantly, only the configuration settings changed will be applied to the WCUs, all other configuration settings will be untouched.&lt;br /&gt;
&lt;br /&gt;
== Support for new platform Kvaser Edge ==&lt;br /&gt;
There is support for a new platform called Kvaser Edge.&lt;br /&gt;
&lt;br /&gt;
== Support for admins to download description files. ==&lt;br /&gt;
[[File:New-dowload-desc-files.png|thumb|Download description file|200x200px|none]]&lt;br /&gt;
If you are an admin and the function is turned on, you have the opportunity to download the vehicle description files found in the Administration-&amp;gt;Vehicle Profiles panel.&lt;br /&gt;
&lt;br /&gt;
== New alarm when a shelved WCU tries to connect with a vehicle ==&lt;br /&gt;
An alarm is raised when a WCU is in any of its shelved states and tries to connect with a vehicle. The category is &#039;wcu::state::shelved::connect&#039;.&lt;br /&gt;
&lt;br /&gt;
== Support for show signal info for all signals in assignment editor ==&lt;br /&gt;
&lt;br /&gt;
== Frame names in add signals for assignment editor ==&lt;br /&gt;
You can now view the frame name for both CAN and LIN signals directly within the &amp;quot;Add Signal&amp;quot; dialog for a recorder. Additionally, you can also bring out frame names for signals in the recorder by simple right clicks and select the column “Frame name”.&lt;br /&gt;
&lt;br /&gt;
== Improved assignment editor permission ==&lt;br /&gt;
We&#039;ve upgraded the assignment permission settings to give more control.&lt;br /&gt;
&lt;br /&gt;
Previously, assignments could only be marked as private or public. Now, you can assign user-specific permissions to allowing selected users to access private, public, or both types of assignments. Read more [[Assignment Editor#Assignment permissions|here]].&lt;br /&gt;
&lt;br /&gt;
== Improved handling of copy assignment ==&lt;br /&gt;
We’ve improved the Signal Reader Assignment copy functionality in the Assignment Creator.&lt;br /&gt;
&lt;br /&gt;
The new version ensures a more reliable experience when duplicating assignments and preventing the process from getting stuck.&lt;br /&gt;
&lt;br /&gt;
== Support to see when a label was associated with a resource ==&lt;br /&gt;
[[File:New label viewer.png|thumb|101x101px|New label viewer]]&lt;br /&gt;
There is now support to see at what time a specific label was associated with a resource.&lt;br /&gt;
&lt;br /&gt;
== Support to search for empty values in label columns ==&lt;br /&gt;
You can now search for the absence of values in your label columns in various places.&lt;br /&gt;
&lt;br /&gt;
== Cyber security settings ==&lt;br /&gt;
For the WCU a bunch of cyber security settings are available.&lt;br /&gt;
&lt;br /&gt;
* Disable USB ethernet interfaces&lt;br /&gt;
* Lock signal reader pub/sub communication to localhost&lt;br /&gt;
* Disable the SSH daemon&lt;br /&gt;
* Root password checks to prevent too weak passwords&lt;br /&gt;
&lt;br /&gt;
== Instant downloads of multiple files ==&lt;br /&gt;
From version 2.94 the previous background zipping of files described in [[Downloading Files]] is no longer needed. Instead the downloading starts immediately when clicking the &amp;quot;Get all files&amp;quot; button in [[Tasks Tab]] or the the &amp;quot;Download&amp;quot; button in the [[Search Tab]].&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=MediaWiki:Sidebar&amp;diff=3889</id>
		<title>MediaWiki:Sidebar</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=MediaWiki:Sidebar&amp;diff=3889"/>
		<updated>2025-05-27T12:48:44Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
* navigation&lt;br /&gt;
** mainpage|mainpage-description&lt;br /&gt;
** recentchanges-url|recentchanges&lt;br /&gt;
** randompage-url|randompage&lt;br /&gt;
** helppage|help&lt;br /&gt;
* Table of Contents&lt;br /&gt;
**requirements|1. Requirements&lt;br /&gt;
**Quick Start|2. Quick Start&lt;br /&gt;
**The_Portal_User_View|3. The Portal User View&lt;br /&gt;
**The_Portal_Administrator_View|4. The Portal Administrator View&lt;br /&gt;
**WCU platform|5. The WCU Platform&lt;br /&gt;
**M2M REST API| 6. M2M REST API&lt;br /&gt;
&amp;lt;!--** New_features_in_v2.40|New in v2.40--&amp;gt;&lt;br /&gt;
** New features in v2.94|New in v2.94&lt;br /&gt;
* SEARCH&lt;br /&gt;
* TOOLBOX&lt;br /&gt;
* LANGUAGES&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=Main_Page&amp;diff=3888</id>
		<title>Main Page</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=Main_Page&amp;diff=3888"/>
		<updated>2025-05-27T12:48:33Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&#039;&#039;&#039;Welcome to the WICE Portal Wiki!&#039;&#039;&#039;&amp;lt;br&amp;gt;Here you can find information and how-to guides of all the features in the portal. &lt;br /&gt;
&lt;br /&gt;
Feel free to suggest improvements and add pages if you feel that some information is missing.&lt;br /&gt;
&lt;br /&gt;
To see the addtions/changes of the previous version of the WICE portal, see [[New features in v2.94|New features in v2.94.]] (Also available from the sidebar to the left.)&lt;br /&gt;
&lt;br /&gt;
For full release history see [[https://wice-sysdoc.alkit.se/index.php/Release_notes WICE Release history]].&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=New_features_in_v2.94&amp;diff=3887</id>
		<title>New features in v2.94</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=New_features_in_v2.94&amp;diff=3887"/>
		<updated>2025-05-27T12:48:03Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: Created blank page&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
	<entry>
		<id>https://wiki.alkit.se/wice298/index.php?title=New_features_in_v2.93&amp;diff=3866</id>
		<title>New features in v2.93</title>
		<link rel="alternate" type="text/html" href="https://wiki.alkit.se/wice298/index.php?title=New_features_in_v2.93&amp;diff=3866"/>
		<updated>2025-03-06T09:42:56Z</updated>

		<summary type="html">&lt;p&gt;Alkitjohan: /* Platform types in WMUs */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;== Support for using labels to control permissions ==&lt;br /&gt;
It is now possible to select resources by labels as an alternative to select resources manually when selecting resources for a permission in [[Roles and permissions]].&lt;br /&gt;
[[File:Labels in permissions1.png|thumb]]&lt;br /&gt;
[[File:Permission label2.png|thumb|Select resources by labels]]&lt;br /&gt;
When a label is selected as in the screenshot to the right, the WCUs which are currently associated with the label are added to the set of selected resources. Multiple labels can also be used to either collect more resources or narrow down the resources depending on the chosen relation between the labels.&lt;br /&gt;
&lt;br /&gt;
After the permission has been saved, any additional resources which get associated with the labels used in the permission will automatically be added to the permission. Since these labels now controls one or many permissions, only the users with the role admin can add or remove the labels from resources as long as they are part of any permission.&lt;br /&gt;
&lt;br /&gt;
== Support for impersonating another user ==&lt;br /&gt;
[[File:Impersonate user.png|thumb|Impersonate user]]&lt;br /&gt;
An admin user can impersonate another user by selecting a user in the [[The Portal Administrator View#The_User_Tab]] and click the new button &amp;quot;Impersonate&amp;quot; as can be seen in the screenshot &amp;quot;Impersonate user&amp;quot;. &lt;br /&gt;
[[File:Impersonating user.png|thumb|Impersonating user]]&lt;br /&gt;
When the button has been clicked, the portal will be reloaded and once logged in again you are now impersonating the selected user. See screenshot &amp;quot;Impersonating user&amp;quot;. &lt;br /&gt;
&lt;br /&gt;
To stop impersonating, one can either click the new &amp;quot;Stop impersonating user&amp;quot; icon next to the red text &amp;quot;Impersonating user&amp;quot; or click the logout icon in the upper right corner of the portal.&lt;br /&gt;
&lt;br /&gt;
== Platform types in WMUs ==&lt;br /&gt;
[[File:Selected platform for new WMU.png|thumb|Select platform for new WMU]]&lt;br /&gt;
When adding a new WMU via the portal GUI it is now mandatory to select the platform for the new WMU as can be seen in the screenshot &amp;quot;Select platform for new WMU&amp;quot;.&lt;br /&gt;
&lt;br /&gt;
If the WMU is running WMU version 3.0.0 or above it will also report its platform back to the portal. In the case the reported platform does not match the selected platform a warning will be shown and the selected platform must be changed to the reported before the WCU configuration can be saved.&lt;br /&gt;
[[File:Reported WMU platform does not match selected2.png|thumb|Reported WMU platform does not match selected]]&lt;br /&gt;
See screenshot &amp;quot;Reported WMU platform does not match selected. &lt;br /&gt;
&lt;br /&gt;
== Support for moving a vehicle to a resource group when applying a vehicle template ==&lt;br /&gt;
It is now possible to move a vehicle into a resource group with the help of vehicle templates. For more detailed information on how to use this feature, you can read more [https://wiki.alkit.se/wice293/index.php/Vehicle_templates here].&lt;br /&gt;
&lt;br /&gt;
== Support to update all vehicles to use a specific SDDB/CSV file ==&lt;br /&gt;
[[File:ApplyFileToAllVehicles.png|thumb|Apply File To all Vehicles]]&lt;br /&gt;
A new button, &amp;quot;Apply File to All Vehicles,&amp;quot; has been added in ECU Diagnostics, allowing users to apply an SDDB/CSV file to all vehicles simultaneously.&lt;/div&gt;</summary>
		<author><name>Alkitjohan</name></author>
	</entry>
</feed>