*Published: 2025* *Author: Carefree Support* User permissions in CarefreeSCADA determine what actions each team member can take within the system. When a Manager creates a new user, they assign a role that controls what that person can see and do. Choosing the right role for each team member ensures that operators have the access they need while sensitive functions like user management and alarm configuration remain protected. For instructions on adding users and assigning roles, see [[User Management]]. ## Manager The Manager role has full access to all features in CarefreeSCADA. Managers are typically supervisors or system administrators responsible for the overall configuration and oversight of the platform. A Manager can: - Add, edit, and remove team members and change user roles - View and modify alarm configurations (modes, limits, delays, and notification settings) - Send test alarms - Access and manage the On-Call Roster (see [[Alarm Notification and On-Call Roster]]) - View the [[Audit Log]] - Access all site data, dashboards, trends, controls, and analytics - Operate site controls (with authentication) ## Operator-L1 The Operator-L1 role is for experienced operators who need full operational access but do not manage users or system-level configuration. An Operator-L1 can: - View all site data, dashboards, trends, and alarm status - Acknowledge alarms - Modify alarm modes (Disabled / No-Call / Callout) and alarm limits - Operate site controls and change setpoints (with authentication) An Operator-L1 **cannot**: - Add, edit, or remove team members - Change alarm escalation or notification configuration ## Operator-L2 The Operator-L2 role is suited for operators who monitor the system and acknowledge alarms, but should not adjust alarm limits or operate controls. An Operator-L2 can: - View all site data, dashboards, trends, and alarm status - Acknowledge alarms - Modify alarm modes (Disabled / No-Call / Callout) An Operator-L2 **cannot**: - Change alarm limits (high/low setpoints) - Operate site controls - Manage users ## Operator-L3 The Operator-L3 role is for team members who need to monitor the system and acknowledge alarms but should not make any configuration changes. An Operator-L3 can: - View all site data, dashboards, trends, and alarm status - Acknowledge alarms An Operator-L3 **cannot**: - Modify alarm modes or limits - Operate site controls - Manage users ## Read-Only The Read-Only role provides view-only access to CarefreeSCADA. This is useful for stakeholders, administrators, or outside parties who need visibility into the system without the ability to make any changes. A Read-Only user can: - View all site data, dashboards, trends, and alarm status A Read-Only user **cannot**: - Acknowledge alarms - Modify any alarm configuration - Operate site controls - Manage users --- *For instructions on assigning roles when creating users, see [[User Management]].* ___ <a href="ACS_Logo"><img src="https://advancedcontrol.com/wp-content/uploads/2020/08/ACS_Modified_Primary_Black_Text.png" title="source: carefreescada.advancedcontrol.com" width="200" style="float: right"/></a><i style="font-size:80%;">&copy; 2025 Advanced Control Systems, LLC<br>CarefreeSCADA, CarefreeIoT, and CarefreeLite are registered trademarks of Advanced Control Systems.<br>Email: [email protected]</i>