Roles and permissions
Every account has one role. Roles decide which pages and actions you have; security rules then decide which products you may open.
The six roles#
| Role | Can |
|---|---|
| Viewer | Read debriefs and their own trends. Pilot accounts linked to an aircrew record see only their own sorties. |
| Maintainer | Manage tankers, cameras, calibration and work orders. Reads debrief data, not imagery, by default. |
| ML engineer | Model registry, evaluation, rubric tuning and datasets. |
| Instructor | Upload sorties, review assessments, manage aircrew and redact video. |
| Security officer | Classification policy, release review, clearances, custody, checkpoints and exports. |
| Administrator | Everything, including users and system configuration. |
Named permissions#
Operations pages check named permissions rather than rank:
| Permission | Granted to |
|---|---|
fleet | Maintainer, administrator |
maintenance | Maintainer, instructor, ML engineer, administrator |
models | ML engineer, administrator |
aircrew | Instructor, administrator |
security | Security officer, administrator |
redact | Instructor, security officer, administrator |
users, config | Administrator |
Clearance and need to know#
Having a role is not enough to open a video. A security officer records each account's clearance, citizenship and aircrew link; until then the policy's role defaults apply. See who can open what.
Was this page helpful?