User Roles and Permissions - Revision history

Mmaciejewski: /* Facility Staff */

2025-07-31T14:46:25Z

Facility Staff

← Older revision		Revision as of 14:46, 31 July 2025
Line 59:		Line 59:
	== Facility Staff ==		== Facility Staff ==

	Each facility must have at least one staff member assigned when it is created. Facility staff are defined on the Facility Information page (viewable only by users with edit rights). Staff with the ~~roles~~ of '''Administrator''', '''Director''', or '''Facility Manager''' have special privileges, including the ability to edit facility information, manage users, and access all data harvested by NDTS from the facility, as described below.		Each facility must have at least one staff member assigned when it is created. Facility staff are defined on the Facility Information page (viewable only by users with edit rights). Staff with the '''''Roles''''' of '''Administrator''', '''Director''', or '''Facility Manager''' have special privileges, including the ability to edit facility information, manage users, and access all data harvested by NDTS from the facility, as described below.

	Users may hold more than one role: '''Administrator''', '''Director''', Engineer, '''Facility Manager''', Researcher, Technician, or Approver. Users who are '''~~not~~''' listed as an Administrator, Director, or Facility Manager do not have special privileges beyond being recognized as facility staff.		Users may hold more than one role: '''Administrator''', '''Director''', Engineer, '''Facility Manager''', Researcher, Technician, or Approver. Users who are '''NOT''' listed as an Administrator, Director, or Facility Manager do not have special privileges beyond being recognized as facility staff.

	Users assigned the roles of Administrator, Director, or Facility Manager have:		Users assigned the roles of Administrator, Director, or Facility Manager have:

Mmaciejewski: /* Facility Staff */

2025-07-31T14:45:17Z

Facility Staff

← Older revision		Revision as of 14:45, 31 July 2025
Line 58:		Line 58:

	== Facility Staff ==		== Facility Staff ==
	Each facility have staff members listed with at least one required when a facility is created. Facility staff, as defined on the Facility Information page (viewable only by users with edit rights to the facility) who have the roles of Administrator, Director, or Facility Manager have special privileges, including the ability to edit facility information, manage facility users, and access all data harvested by NDTS from the facility as described below.

	~~Users may~~ have ~~more than~~ one ~~role~~ ('''Administrator''', '''Director''', ~~Engineer,~~ '''Facility Manager,''' ~~Researcher~~, ~~Technician~~, ~~Approver). Users who are '''NOT''' listed as Administrator~~, ~~Director~~, ~~or Facility Manager have no special privileges other than being listed~~ as ~~staff as part of the facility~~.		Each facility must have at least one staff member assigned when it is created. Facility staff are defined on the Facility Information page (viewable only by users with edit rights). Staff with the roles of '''Administrator''', '''Director''', or '''Facility Manager''' have special privileges, including the ability to edit facility information, manage users, and access all data harvested by NDTS from the facility, as described below.

	~~A user designated~~ as Administrator, Director, or Facility Manager ~~for a~~ facility have:		Users may hold more than one role: '''Administrator''', '''Director''', Engineer, '''Facility Manager''', Researcher, Technician, or Approver. Users who are '''not''' listed as an Administrator, Director, or Facility Manager do not have special privileges beyond being recognized as facility staff.
	* Access to the '''[[Facility Dashboards\|Facility Dashboard]]''' ~~for~~:
	** ~~Editing~~ facility, instrument, and probe details		Users assigned the roles of Administrator, Director, or Facility Manager have:
	** ~~Managing~~ users and instrument records
	** ~~Downloading~~ NDTS software		* Access to the '''[[Facility Dashboards\|Facility Dashboard]]''' to:
	* Real-time updates to the portal based on dashboard changes		** Edit facility, instrument, and probe details
	* Unrestricted access to all datasets collected within their facility		** Manage users and instrument records
	* Ability to '''reassign''' or '''purge datasets collected within their facility~~'''~~		** Download NDTS software
	* ~~The~~ '''[https://usnan.nmrhub.org/operations/kibana-fm Facility Dashboard]''' of vNOC		* Real-time updates to the portal based on dashboard changes
			* Unrestricted access to all datasets collected within their facility
			* Ability to '''reassign''' or '''purge''' datasets collected within their facility
			* Access to the '''[https://usnan.nmrhub.org/operations/kibana-fm Facility Dashboard]''' of vNOC

	== Knowledgebase / Website Content Provider ==		== Knowledgebase / Website Content Provider ==

Mmaciejewski at 14:44, 31 July 2025

2025-07-31T14:44:17Z

← Older revision		Revision as of 14:44, 31 July 2025
Line 57:		Line 57:
	* All actions are performed as the PI once switched		* All actions are performed as the PI once switched

	== Facility ~~Manager (~~Staff) ==		== Facility Staff ==
	~~A user designated~~ as ~~staff for an NMR~~ facility.		Each facility have staff members listed with at least one required when a facility is created. Facility staff, as defined on the Facility Information page (viewable only by users with edit rights to the facility) who have the roles of Administrator, Director, or Facility Manager have special privileges, including the ability to edit facility information, manage facility users, and access all data harvested by NDTS from the facility as described below.

	~~They~~ have:		Users may have more than one role ('''Administrator''', '''Director''', Engineer, '''Facility Manager,''' Researcher, Technician, Approver). Users who are '''NOT''' listed as Administrator, Director, or Facility Manager have no special privileges other than being listed as staff as part of the facility.

			A user designated as Administrator, Director, or Facility Manager for a facility have:
	* Access to the '''[[Facility Dashboards\|Facility Dashboard]]''' for:		* Access to the '''[[Facility Dashboards\|Facility Dashboard]]''' for:
	** Editing facility, instrument, and probe details		** Editing facility, instrument, and probe details

Mmaciejewski: /* Standard NAN User */

2025-07-03T14:53:53Z

Standard NAN User

← Older revision		Revision as of 14:53, 3 July 2025
Line 37:		Line 37:
	* The ability to '''reassign datasets''' to other lab members for 3 months after harvesting		* The ability to '''reassign datasets''' to other lab members for 3 months after harvesting
	* '''[[UHF Access]]''' (view/submit requests if granted by their PI)		* '''[[UHF Access]]''' (view/submit requests if granted by their PI)
	* '''My Permissions''' (shows what permissions their PI has granted)		* [[Data Browser#My Permissions\|'''My Permissions''']] (shows what permissions their PI has granted)
	* The ~~'''~~[https://usnan.nmrhub.org/operations/kibana-user User Dashboard]''' of vNOC		* The [https://usnan.nmrhub.org/operations/kibana-user '''User Dashboard'''] of vNOC
	* The ability to create '''[[Vignette Library\|Literature Vignettes]]'''		* The ability to create '''[[Vignette Library\|Literature Vignettes]]'''

Mmaciejewski: /* Standard NAN User */

2025-07-03T14:49:56Z

Standard NAN User

← Older revision		Revision as of 14:49, 3 July 2025
Line 34:		Line 34:
	They have access to:		They have access to:
	* All Public User content		* All Public User content
	* '''Dataset, Sample, and Collection Browsers''' (for data they have permission to see)		* '''[[Data Browser\|Dataset, Sample, and Collection Browsers]]''' (for data they have permission to see)
	* The ability to '''reassign datasets''' to other lab members for 3 months after harvesting		* The ability to '''reassign datasets''' to other lab members for 3 months after harvesting
	* '''UHF Access''' (view/submit requests if granted by their PI)		* '''[[UHF Access]]''' (view/submit requests if granted by their PI)
	* '''My Permissions''' (shows what permissions their PI has granted)		* '''My Permissions''' (shows what permissions their PI has granted)
	* The '''[https://usnan.nmrhub.org/operations/kibana-user User Dashboard]''' of vNOC		* The '''[https://usnan.nmrhub.org/operations/kibana-user User Dashboard]''' of vNOC
	* The ability to create '''Literature Vignettes'''		* The ability to create '''[[Vignette Library\|Literature Vignettes]]'''

	== Principal Investigator (PI) ==		== Principal Investigator (PI) ==

Mmaciejewski at 14:47, 3 July 2025

2025-07-03T14:47:23Z

← Older revision		Revision as of 14:47, 3 July 2025
Line 22:		Line 22:
	They have view-only access to:		They have view-only access to:
	* The '''[[Resource Connector]]''' (lists facilities, instruments, configurations, searchable by services)		* The '''[[Resource Connector]]''' (lists facilities, instruments, configurations, searchable by services)
	* The '''Knowledgebase''' (introductory content on how NMR can be used in research)		* The '''[[Knowledgebases\|Knowledgebase]]''' (introductory content on how NMR can be used in research)
	* The '''Vignette Library''' (summaries of papers using NMR)		* The '''[[Vignette Library]]''' (summaries of papers using NMR)
	* The '''Materials Periodic Table''' (isotope-specific NMR attributes)		* The '''[[Materials Periodic Table]]''' (isotope-specific NMR attributes)
	* All '''Public Datasets''' including those in the Knowledgebase		* All '''[[Public and Publishing\|Public Datasets]]''' including those in the Knowledgebase
	* '''Published Collections'''		* '''[[Public and Publishing\|Published Collections]]'''
	* The '''[https://usnan.nmrhub.org/operations/kibana-public Public View]''' of the Virtual NAN Operations Center (vNOC)		* The '''[https://usnan.nmrhub.org/operations/kibana-public Public View]''' of the Virtual NAN Operations Center (vNOC)

Mtest at 20:09, 13 June 2025

2025-06-13T20:09:23Z

← Older revision		Revision as of 20:09, 13 June 2025
Line 1:		Line 1:
	~~== NAN users and NMRbox users and NMRhub users—oh my! ==~~
	NMRbox and NAN were both developed at UConn Health on shared computational resources operating out of the HPC facility. NMRbox has been utilized by the NMR community for over a decade and users had "NMRbox" accounts. With the introduction of NAN we did not want YAUA—Yet Another User Account. We decided to create the NMRhub landing space with links to the computational resources hosted at UConn Health and rebranded NMRbox users as NMRhub users. Thus, there is no difference between a NAN user or NMRbox user and we call them "NMRhub users". Throughout the wiki documentation the terms NAN user and NMRhub user are used interchangeably.

	One key change in NMRhub user accounts was made with the introduction of NAN and that was the concept of vetted PIs and the linking of users to PIs. In the past we let users self-declare if they were a PI, graduate student, etc., but those designations were not vetted. As dataset ownership in NAN is based on PIs we added the ability for users to update their accounts and request PI status. We verify the PI status and then approve the change to the account. We also created the ability for users to request access to a PIs lab-group which must be approved by the PI or their delegate.

	~~We have implemented SSO across NMRhub resources (NMRbox, NAN, NUScon, NMRhub, and the NAN virtual NAN operations center) for seamless navigation between them.~~

	== NAN Users and NMRbox Users and NMRhub Users—Oh My! ==		== NAN Users and NMRbox Users and NMRhub Users—Oh My! ==

	NMRbox and NAN were both developed at UConn Health and operate on shared computational resources hosted by the HPC facility. NMRbox has served the NMR community for over a decade, during which users had '''NMRbox''' accounts.		* [https://nmrbox.nmrhub.org/ NMRbox] and NAN were both developed at [https://health.uconn.edu/ UConn Health] and operate on shared computational resources hosted by the [https://health.uconn.edu/high-performance-computing/ HPC facility]. NMRbox has served the NMR community for over a decade, during which users had '''NMRbox''' accounts.
			* With the introduction of NAN, we wanted to avoid '''YAUA''' — ''Yet Another User Account''. To streamline access, we created the '''[https://nmrhub.org/ NMRhub]''' landing site, which provides links to all computational resources hosted at UConn Health. At the same time, we rebranded NMRbox accounts as '''NMRhub users'''.
	With the introduction of NAN, we wanted to avoid '''YAUA''' — ''Yet Another User Account''. To streamline access, we created the '''NMRhub''' landing site, which provides links to all computational resources hosted at UConn Health. At the same time, we rebranded NMRbox accounts as '''NMRhub users'''.		* As a result, there is no functional difference between a NAN user and an NMRbox user — throughout the documentation, the terms '''NAN user''' and '''NMRhub user''' are used interchangeably.

	~~As a result, there is no functional difference between a NAN user and an NMRbox user — throughout the documentation, the terms~~ '''~~NAN user''' and '''NMRhub user''' are used interchangeably.~~		<big>'''The Role of Vetted PIs'''</big>

	~~===~~ The Role of Vetted PIs ~~===~~

	A key change introduced with NAN was the concept of '''vetted PIs''' and the formal linking of users to PI-led lab groups. Previously, users self-declared their roles (e.g., PI, graduate student), but these designations were not verified.		A key change introduced with NAN was the concept of '''vetted PIs''' and the formal linking of users to PI-led lab groups. Previously, users self-declared their roles (e.g., PI, graduate student), but these designations were not verified.
Line 22:		Line 13:
	* The NAN team to verify and approve PI status		* The NAN team to verify and approve PI status
	* Users to request access to a PI's lab group, which must be approved by the PI or their delegate		* Users to request access to a PI's lab group, which must be approved by the PI or their delegate
			<big>'''Seamless Access Through SSO'''</big>

	~~=== Seamless Access Through SSO ===~~		We have implemented '''Single Sign-On (SSO)''' across all NMRhub resources — including '''NMRbox''', '''NAN''', '''[https://nuscon.org/home NUScon]''', and the '''virtual NAN Operations Center''' — to enable seamless navigation and access across the ecosystem.

	We have implemented '''Single Sign-On (SSO)''' across all NMRhub resources — including '''NMRbox''', '''NAN''', '''NUScon''', and the '''virtual NAN Operations Center''' — to enable seamless navigation and access across the ecosystem.

	== Public User ==		== Public User ==

Mtest: /* NAN users and NMRbox users and NMRhub users—oh my! */

2025-06-13T20:03:55Z

NAN users and NMRbox users and NMRhub users—oh my!

← Older revision		Revision as of 20:03, 13 June 2025
Line 5:		Line 5:

	We have implemented SSO across NMRhub resources (NMRbox, NAN, NUScon, NMRhub, and the NAN virtual NAN operations center) for seamless navigation between them.		We have implemented SSO across NMRhub resources (NMRbox, NAN, NUScon, NMRhub, and the NAN virtual NAN operations center) for seamless navigation between them.

			== NAN Users and NMRbox Users and NMRhub Users—Oh My! ==

			NMRbox and NAN were both developed at UConn Health and operate on shared computational resources hosted by the HPC facility. NMRbox has served the NMR community for over a decade, during which users had '''NMRbox''' accounts.

			With the introduction of NAN, we wanted to avoid '''YAUA''' — ''Yet Another User Account''. To streamline access, we created the '''NMRhub''' landing site, which provides links to all computational resources hosted at UConn Health. At the same time, we rebranded NMRbox accounts as '''NMRhub users'''.

			As a result, there is no functional difference between a NAN user and an NMRbox user — throughout the documentation, the terms '''NAN user''' and '''NMRhub user''' are used interchangeably.

			=== The Role of Vetted PIs ===

			A key change introduced with NAN was the concept of '''vetted PIs''' and the formal linking of users to PI-led lab groups. Previously, users self-declared their roles (e.g., PI, graduate student), but these designations were not verified.

			Because '''dataset ownership in NAN is PI-based''', we added mechanisms for:
			* Users to update their account and request '''PI status'''
			* The NAN team to verify and approve PI status
			* Users to request access to a PI's lab group, which must be approved by the PI or their delegate

			=== Seamless Access Through SSO ===

			We have implemented '''Single Sign-On (SSO)''' across all NMRhub resources — including '''NMRbox''', '''NAN''', '''NUScon''', and the '''virtual NAN Operations Center''' — to enable seamless navigation and access across the ecosystem.

	== Public User ==		== Public User ==

Mtest at 20:02, 13 June 2025

2025-06-13T20:02:08Z

← Older revision		Revision as of 20:02, 13 June 2025
Line 1:		Line 1:
	== ~~'''Overview'''~~ ==		== NAN users and NMRbox users and NMRhub users—oh my! ==
	~~This page describes~~ the ~~different~~ user ~~roles within~~ the NAN ~~portal, including what each role can access~~ and do		NMRbox and NAN were both developed at UConn Health on shared computational resources operating out of the HPC facility. NMRbox has been utilized by the NMR community for over a decade and users had "NMRbox" accounts. With the introduction of NAN we did not want YAUA—Yet Another User Account. We decided to create the NMRhub landing space with links to the computational resources hosted at UConn Health and rebranded NMRbox users as NMRhub users. Thus, there is no difference between a NAN user or NMRbox user and we call them "NMRhub users". Throughout the wiki documentation the terms NAN user and NMRhub user are used interchangeably.

	== ~~'''~~Public User~~'''~~ ==		One key change in NMRhub user accounts was made with the introduction of NAN and that was the concept of vetted PIs and the linking of users to PIs. In the past we let users self-declare if they were a PI, graduate student, etc., but those designations were not vetted. As dataset ownership in NAN is based on PIs we added the ability for users to update their accounts and request PI status. We verify the PI status and then approve the change to the account. We also created the ability for users to request access to a PIs lab-group which must be approved by the PI or their delegate.

			We have implemented SSO across NMRhub resources (NMRbox, NAN, NUScon, NMRhub, and the NAN virtual NAN operations center) for seamless navigation between them.

			== Public User ==
	A user who is not authenticated with an NMRhub account.		A user who is not authenticated with an NMRhub account.

Line 14:		Line 18:
	* The '''[https://usnan.nmrhub.org/operations/kibana-public Public View]''' of the Virtual NAN Operations Center (vNOC)		* The '''[https://usnan.nmrhub.org/operations/kibana-public Public View]''' of the Virtual NAN Operations Center (vNOC)

	== ~~'''~~Standard NAN User~~'''~~ ==		== Standard NAN User ==
	An authenticated user with an NMRhub account.		An authenticated user with an NMRhub account.

Line 26:		Line 30:
	* The ability to create '''Literature Vignettes'''		* The ability to create '''Literature Vignettes'''

	== ~~'''~~Principal Investigator (PI)~~'''~~ ==		== Principal Investigator (PI) ==
	Includes everything a standard NAN User sees, plus:		Includes everything a standard NAN User sees, plus:
	* Access to '''[[Lab Administration]]''' for:		* Access to '''[[Lab Administration]]''' for:
Line 35:		Line 39:
	* Ability to create '''Literature Vignettes'''		* Ability to create '''Literature Vignettes'''

	== ~~'''~~PI Delegate~~'''~~ ==		== PI Delegate ==
	A lab-group member designated by the PI with delegate permissions.		A lab-group member designated by the PI with delegate permissions.

Line 42:		Line 46:
	* All actions are performed as the PI once switched		* All actions are performed as the PI once switched

	== ~~'''~~Facility Manager (Staff)~~'''~~ ==		== Facility Manager (Staff) ==
	A user designated as staff for an NMR facility.		A user designated as staff for an NMR facility.

Line 55:		Line 59:
	* The '''[https://usnan.nmrhub.org/operations/kibana-fm Facility Dashboard]''' of vNOC		* The '''[https://usnan.nmrhub.org/operations/kibana-fm Facility Dashboard]''' of vNOC

	== ~~'''~~Knowledgebase / Website Content Provider~~'''~~ ==		== Knowledgebase / Website Content Provider ==
	A NAN user with content editing privileges.		A NAN user with content editing privileges.

Line 63:		Line 67:
	* Edit any page with built-in content management tools on the portal		* Edit any page with built-in content management tools on the portal

	== ~~'''~~UHF Reviewer~~'''~~ ==		== UHF Reviewer ==
	A user added to the reviewer pool for Ultra-High Field (UHF) requests.		A user added to the reviewer pool for Ultra-High Field (UHF) requests.

	* All PIs from labs with access to 1.1 GHz instruments are automatically added		* All PIs from labs with access to 1.1 GHz instruments are automatically added

	== ~~'''~~UHF Administrator~~'''~~ ==		== UHF Administrator ==
	A privileged user who helps run the UHF system.		A privileged user who helps run the UHF system.

Line 74:		Line 78:
	* Assists the UHF Operations Committee and current cycle chair		* Assists the UHF Operations Committee and current cycle chair

	== ~~'''~~UHF Operations Committee Member~~'''~~ ==		== UHF Operations Committee Member ==
	A user with broad oversight of UHF review activities.		A user with broad oversight of UHF review activities.

Mmaciejewski: /* Overview */

2025-06-02T14:35:25Z

Overview

← Older revision		Revision as of 14:35, 2 June 2025
Line 1:		Line 1:
	== '''Overview''' ==		== '''Overview''' ==
	This page describes the different user roles within the NAN portal, including what each role can access and do~~. User roles determine the level of access and available actions within the system.~~		This page describes the different user roles within the NAN portal, including what each role can access and do

	== '''Public User''' ==		== '''Public User''' ==
Line 6:		Line 6:

	They have view-only access to:		They have view-only access to:
	* The '''Resource Connector''' (lists facilities, instruments, configurations, searchable by services)		* The '''[[Resource Connector]]''' (lists facilities, instruments, configurations, searchable by services)
	* The '''Knowledgebase''' (introductory content on how NMR can be used in research)		* The '''Knowledgebase''' (introductory content on how NMR can be used in research)
	* The '''Vignette Library''' (summaries of papers using NMR)		* The '''Vignette Library''' (summaries of papers using NMR)
Line 12:		Line 12:
	* All '''Public Datasets''' including those in the Knowledgebase		* All '''Public Datasets''' including those in the Knowledgebase
	* '''Published Collections'''		* '''Published Collections'''
	* The '''Public View''' of the Virtual NAN Operations Center (vNOC)		* The '''[https://usnan.nmrhub.org/operations/kibana-public Public View]''' of the Virtual NAN Operations Center (vNOC)

	== '''Standard NAN User''' ==		== '''Standard NAN User''' ==
Line 22:		Line 22:
	* The ability to '''reassign datasets''' to other lab members for 3 months after harvesting		* The ability to '''reassign datasets''' to other lab members for 3 months after harvesting
	* '''UHF Access''' (view/submit requests if granted by their PI)		* '''UHF Access''' (view/submit requests if granted by their PI)
	* ~~The~~ '''My Permissions ~~Matrix~~''' (shows what permissions their PI has granted)		* '''My Permissions''' (shows what permissions their PI has granted)
	* The '''User ~~View~~''' of vNOC		* The '''[https://usnan.nmrhub.org/operations/kibana-user User Dashboard]''' of vNOC
	* The ability to create '''Literature Vignettes'''		* The ability to create '''Literature Vignettes'''

	== '''Principal Investigator (PI)''' ==		== '''Principal Investigator (PI)''' ==
	~~A user who leads a lab group in NAN.~~		Includes everything a standard NAN User sees, plus:
			* Access to '''[[Lab Administration]]''' for:
	Includes everything a ~~Standard~~ NAN User sees, plus:
	* Access to '''Lab Administration''' for:
	** Creating and managing Projects		** Creating and managing Projects
	** Adding ~~Funding Sources~~		** Adding funding sources
	** Managing lab users and permissions		** Managing lab users and permissions
	* The '''~~Lab Group View~~''' of vNOC (summary of lab-wide data)		* The '''[https://usnan.nmrhub.org/operations/kibana-pi PI Dashboard]''' of vNOC (summary of lab-wide data)
	* Ability to create '''Literature Vignettes'''		* Ability to create '''Literature Vignettes'''

Line 48:		Line 46:

	They have:		They have:
	* Access to the '''Facility Dashboard''' for:		* Access to the '''[[Facility Dashboards\|Facility Dashboard]]''' for:
	** Editing facility, instrument, and probe details		** Editing facility, instrument, and probe details
	** Managing users and instrument records		** Managing users and instrument records
Line 54:		Line 52:
	* Real-time updates to the portal based on dashboard changes		* Real-time updates to the portal based on dashboard changes
	* Unrestricted access to all datasets collected within their facility		* Unrestricted access to all datasets collected within their facility
	* Ability to '''reassign''' or '''purge datasets'''		* Ability to '''reassign''' or '''purge datasets collected within their facility'''
	* The '''Facility ~~Manager View~~''' of vNOC		* The '''[https://usnan.nmrhub.org/operations/kibana-fm Facility Dashboard]''' of vNOC
	* Privileged access in the Dataset Browser to support users
	* Ability to create '''Literature Vignettes'''

	== '''Knowledgebase / Website Content Provider''' ==		== '''Knowledgebase / Website Content Provider''' ==