About Eggplant Roles
Eggplant DAI has three roles for users: Viewer, User, and Admin.
To have any access to DAI, users must first be added to one of the three system roles, namely dai:admin
, dai:user
or dai:viewer
.
If your DAI installation uses single sign-on (SSO), then your DAI users are managed by the software your company uses for network authentication (known as an "identity provider"). When SSO is enabled in DAI, your company's network administrator performs user administration tasks that the DAI Admin role otherwise performs as noted in the Admin role description and Assigning Roles descriptions below.
See What Does it Mean to use SSO with DAI? for more information about the integration.
Viewer Role
The Viewer Role (dai:viewer
) is a read-only role that allows you to:
- View dashboards, results, existing models, test cases, test configs, Git repos, and SUTs.
- Export test cases.
It does not allow you to create, edit, or export models; edit test cases; edit test configurations; or run tests.
In Designer, this role does not allow access to Snippets, Capture, and Live Run.
In Systems, this role does not allow access to API Access, Access, Logs, Licenses and Agent Tools.
User Role
The User Role (dai:user
) allows you to:
- Manage your account details, passwords, including multi-factor authentication, and other session information.
- Build models, share access to models you have access to, run tests, and view results.
- View and use all agents.
It doesn’t allow you to see any of the menu options for administration features.
Admin Role
The Admin Role (dai:admin
) gives you access to all the same features as a User. In addition it lets you:
- Access administration features in the DAI web app.
- Create users, manage their account details, passwords, and permissions, unless SSO is enabled in which case the DAI Admin does not have this capability. User creation would be done through the identity provider.
- Create API Clients
- See and manage all models
- Create groups and manage access to all models
- Manage licenses for Eggplant DAI.
Assigning Roles
During installation, an account with the Admin Role assigned is created. This account lets you create and manage the accounts of other administrators and users. An administrator must assign the correct role to each user before they can access Eggplant DAI.
If SSO is enabled in your DAI installation, then role assignment is done through the identity provider. See What Does it Mean to use SSO with DAI? for more information.