User Permissions

Dune permissions are role-based as described in the article Authorization. Roles like Owner and Operator can be adjusted on a Dune Core Element basis in the Dune Portal. Child elements inherit privileges from their parents following the predefined Structure.

Minimum-permissions-required

A user must at least possess the role TenantReader to access a tenant. If this role is not set, a TenantAdmin needs to grant it to the user before access is possible.

Add Element Roles

The Users widget displayed below enables control over a Dune Core Element's privileges.

The button opens up the Add User Role Dialog allowing adding new privileges to specific users.

Add User Role to Element

Within the Add User Role Dialog simply search for existing users, select them and choose which role should be assigned to each of them. There is an option to either remove users from the selection by clicking the button on the right-hand side of the user in question or use the Remove All button at the bottom of the selection list to clear the selection completely. Use the Add button to confirm the roles you want to save for the core element or discard changes by clicking Close.

The image below shows an example selection and an example search input in the Add User Role Dialog:

1. Input to search for existing users or invite by email address
2. Search results for search term
3. Selected user role to add
4. Button for removing user role from the selection
5. Selection field to choose which role a selected user should have
6. Button to confirm the roles chosen for the core element. Must be clicked to save changes!

Add User Role Dialog

If a user is not registered within a tenant yet, it is still possible to grant permissions to them by invite using their email address. This requires entering an email address into the input field at the top of the Add User Role Dialog before clicking the Invite button. The Invite button only appears if at least one valid email address is provided.

It is also possible to invite multiple users by email at the same time. This requires separating email addresses by space, comma or semicolon.

Disclaimer

Invitation email addresses must belong to a domain registered to the respective Dune tenant.

The image below depicts an example of how a user can be invited by email address:

Invite User by Email Address

Edit Permissions

The button allows editing currently defined roles by switching into edit mode.

Edit User

Within edit mode you may edit and delete roles for the current element. These changes will not be applied until the button is clicked for confirmation. Clicking the button discards changes made in edit mode.

The image below shows what the Users widget looks like in edit mode:

1. Save changes
2. Discard changes
3. Change user role
4. Remove user role from element

User Widget in Edit Mode

Lack of Permissions

Specific actions are disabled if the proper privileges are not set. Hovering the cursor above an action button will show a tooltip about missing authorization if the currently assigned privileges do not meet the requirements for executing an action.

Lack of Permissions for Action

User Permission Overview

Dune provides a per user permission overview within the user settings. This overview may be accessed by navigating to the Settings page and selecting the USERS tab. From there, expanding a user's row by clicking will display details about the respective user permissions. The first item in this expanded view are tenant Global Roles followed by Element Specific Roles and privileges provided with those roles as described in Authorization. Editing Global Roles is only permitted for users with the TenantAdmin role.

Inheritance

Inherited permissions from parent elements are not included in this overview!

The image below shows an example of the User Permission Overview:

1. Navigation bar item to access Settings page
2. Button to exapnd and collapse user details
3. List of a user's tenant Global Roles
4. Element Specific Roles and privileges
5. Roles and element name plus type
6. Privileges provided with element roles
7. Button to edit user Global Roles

User Permission Overview

Edit Global Roles

A user's Global Roles may be adjusted in a dedicated Edit User Dialog. Acessing the dialog is possible within the Settings page by clicking on the button on the right-hand side of a user row as visible in the highlighted section item 7 in the image User Permission Overview of the previous section User Permission Overview.

The image below shows the Edit User Dialog of an example user:

1. User name and email address
2. Selected Global Roles
3. Global Role selection showing all selectable roles

Edit User Dialog