Understand Kener Roles and Permissions
mainKener uses a Role-Based Access Control (RBAC) system. Users are assigned one or more roles, which contain specific permissions following a domain.action format. Permissions are enforced at both the route level (UI access) and the action level (API operations).
Built-in Roles
Three readonly roles are provided by default and cannot be edited or deleted:
admin: Full access, includingapi_keys.delete.editor: All permissions exceptapi_keys.delete.member: Read-only access (all.readpermissions only).
Permission Domains
Permissions are grouped into the following domains:
monitors,incidents,maintenances,pages,triggers,alerts,subscribers,email_templates,images: Standardread/writeactions.api_keys:read,write,delete.users:read,write.settings:read,write.roles:read,write,assign_permissions,assign_users.