---
title: "Boss’nX roles: view permissions, scope and assigned accounts"
description: Open the role list of a Boss’nX supervision, read each role’s badges and the summary of its permissions, scope, alarm notifications and accounts.
canonical: https://wiki.can-nx.com/en/guides/boss-roles-consult/
language: en
product: Boss’nX
audience:
  - administrateur
  - installateur
context: "Boss’nX, supervision: Users then the Roles tab, with role management rights"
---

# Boss’nX roles: view permissions, scope and assigned accounts

Context: Boss’nX, supervision: Users then the Roles tab, with role management rights

The **Roles** tab in Boss’nX lists the roles of a supervision. A role groups the permissions and the scope of the accounts it is assigned to: its name alone is not enough to know its rights. From this list, you read each role’s badges and open a summary of its capabilities, its scope, its alarm notifications and its accounts.

Intended for the administrator or installer authorized to manage roles. To define an additional role or change a name, follow [Create or rename a role](https://wiki.can-nx.com/en/guides/boss-role-create/).

## Before you start

- The **Users** entry of the **Menu** is offered with account or role management rights; the **Roles** tab requires role management rights. An account that manages roles without managing accounts lands directly on the **Roles** tab.
- Roles are managed inside a supervision: role management is not offered at the level of the hypervision’s aggregated view.
- On a narrow screen, if the table or the panel does not let you read all the details, use a wider screen before an operation on rights.

## Open the role list

1. Open the supervision concerned. From hypervision, first enter this supervision.
2. Open **Menu → Users**, in the Administration family, then the **Roles** tab. On a tablet or phone, **Menu** is at the right of the bottom bar.
3. Wait for the rows under **Label** and **Actions**.
4. Locate the role by its label. The counter with a people icon shows the number of associated accounts, when they could be loaded.

**Refresh** reloads the roles and the associated accounts. It also closes the open permissions panel.

## Read a role’s badges

| Badge | Meaning |
| --- | --- |
| **System role** | Protected role. The **Remove** action is not offered. |
| **Owner's role** | Role of the supervision’s owner. |
| **Default** | Default role. The **Remove** action is not offered. |
| **Deprecated** | May appear on another role. This badge does not indicate that its accounts have already been reassigned. |
| **1 rule** or number of **rules** | Number of alarm notification rules of the role. |
| **no alerts** | The role has no alarm notification rules. This badge does not describe the state of the building’s alarms. |
| **no email** | Accounts of the role without a usable address, shown when the rules and accounts are available. Have these accounts checked before relying on alerts being received. |

The notifications of system roles are visible according to your access level: those of the administrator role are reserved for the administrator; those of the owner role for the administrator and the owner. A system role that shows neither a rules badge nor **no alerts** may therefore have rules that your account cannot see.

## Open the permissions summary

1. Click the information icon next to the role, named **Show permissions for…**. The rules badge or **no alerts**, when shown, also opens this panel.
2. Read the capabilities by category. Granted capabilities are colored; some disabled capabilities are struck through, and **+… more disabled** indicates that not all of them are detailed. A category with no granted capability at all is not shown.
3. View the number of components and the scope summary.
4. Scroll the panel down to the notifications and the number of assigned users.
5. Close with the **Close permissions panel** cross, the Escape key or a click outside. Clicking another role’s information changes the panel being viewed.

## Read the role’s alarm notifications

The **Alarm notifications** section of the panel summarizes the role’s email rules:

- each row associates a tag with severities;
- **All other alarms** refers to the general rule;
- **muted** indicates a rule with no severity selected;
- the number of **accounts reachable** counts the loaded accounts that have an address. Actual delivery of a message is confirmed when the email is received.

To add rules, choose their severities or disable them, follow [configuring the role’s notifications](https://wiki.can-nx.com/en/guides/boss-role-notifications/). To find out who received alerts under the previous notification model, open [Legacy recipients](https://wiki.can-nx.com/en/guides/boss-legacy-recipients/).

## Edit, assign or delete a role

**Edit**, on the role’s row, opens the editor. In the panel, the action is called **Edit role**, or **View role** for a system role; **Edit** in the notifications opens this section of the editor directly. The presence of an action does not make all the parameters of a system role editable.

- To change the authorized actions, see [the role’s capabilities](https://wiki.can-nx.com/en/guides/boss-role-capabilities/).
- To assign a role, follow [create an account](https://wiki.can-nx.com/en/guides/boss-users-create/) or [change an account’s role](https://wiki.can-nx.com/en/guides/boss-users-edit/).
- To remove a role and reassign its accounts, follow [deleting a role](https://wiki.can-nx.com/en/guides/boss-roles-delete/).

## Check the result

The summary is an overview. To confirm a role’s precise access, have the administrator check its detailed scope. If the label, the counter or the access actually observed do not match, use **Refresh** and compare again.

## Troubleshooting

| Symptom | Action |
| --- | --- |
| **Users** missing from the **Menu**, or **Roles** tab missing | Check that you are in a supervision and not in the hypervision’s aggregated view, then have the administrator check your rights. Do not change the page address to get around a restriction. |
| Roles fail to load | Read the displayed message, then use **Refresh**. |
| Roles shown without an account counter | The accounts could not be loaded: the role is not necessarily unused. Use **Refresh**, especially before any deletion. |
| **No roles yet.** persists or loading keeps failing | Contact support. |

## Contact support

If access remains inconsistent or the list still does not load, write to support@can-nx.com with the supervision, the role concerned, the time and the message observed.

French labels: **Menu → Utilisateurs**, **Rôles**, **Rafraîchir**, **Voir les permissions de…**, **Rôle système**, **Rôle du propriétaire**, **Par défaut**, **Obsolète**, **Notifications d’alarme**, **Modifier le rôle**, **Voir le rôle**.