Roles and Permissions

Roles and permissions control who can view data and who can change settings on the meter. A role is a named and reusable set of permissions. You can assign one or more roles to a user. Use CAE to define roles and permissions and then push those settings to the meter.

Best practices

• Apply least privilege: Give each role only the permissions required for its tasks.

• Separate duties: Separate duties so that sensitive actions require different roles (for example, one role to configure, another to operate).

• Review regularly: Audit users and roles on a schedule and after staff changes.

• Stage and test: Validate roles and permissions with a non‑administrator account.

• Document changes: Keep a clear record of who changed what and when.

Available permissions

Permission	Description
Certificate Management	Upload and manage digital certificates to help ensure secure communication.
Comm Config	Configure communication modules, including protocols, baud rates, and network settings.
DSS Config	Update the Specific Settings Values using CAE.
File System Read and Write Access	Read and write access to the meter’s file system using SFTP.
File System Read-Only Access	Read-only access to the meter’s file system using SFTP.
Firmware Management	Install and manage firmware, including device templates.
Front Panel Config	Make configuration changes using the front panel.
Front Panel Restart	Restart the meter from the front panel.
ION Module Config	Configure ION modules, which are used to build custom logic and data processing within the meter.
Master Reset	Clear all accumulated energy values, logs, and waveforms.
Password Self-Management	Users can change their own passwords without administrator assistance.
Peak Demand Reset	Reset peak demand measurements. A configurable lockout period helps ensure resets are not performed too frequently.
Security Logs Access	View logs related to security events, such as login attempts, configuration changes, and authentication issues.
Terminal Access	Access the terminal using SSH or a serial console and run commands.
Test Mode Toggle	Enable or disable test mode to help ensure meter functionality without affecting billing data.
Time Synchronization	Configure time sync settings to help ensure the internal clock aligns with external sources.
User Management	Create, modify, and delete user accounts and roles, assign permissions, and manage credentials.