Page History
...
The Users page allows for the creating, updating , and deleting of Chariot Users. A Chariot User may log into the Chariot Web UI and perform different actions based the the Roles assigned to that User. The main Chariot Users page shows a table of existing Chariot Users. Users can be added by clicking the "Add User" button, or they can be edited by clicking on the individual User in the table.
...
The Roles page allows for the creating, updating, and deleting of Chariot Roles. A Chariot Role is a collection of permissions that authorized viewing, editing , and/or controlling the Chariot MQTT Server. The main Chariot Roles page shows a table of existing Chariot Roles. Roles can be added by clicking the "Add Role" button, or they can be edited by clicking on the individual Role in the table.
...
- Name
- A unique name for the Chariot Role.
- Permissions
- A list of permissions for the Chariot Role.
- Permissions have the form <domain>:<action>
- The <domain> represents a service within Chariot that can be interacted with through the Chariot UI.
Some examples are:- user
- The User Service for managing Chariot UI users
- See the Chariot UI under the "Users" tab
- role
- The Role Service for managing Chariot UI roles
- See the Chariot UI under the "Roles" tab
- mqttuser
- The MQTT User Service for managing MQTT Credentials
- See the Chariot UI under the "MQTT Account Credentials" tab
- system
- The System Service for configuring Server Name, HTTP, Certificates , and Backup/Restore
- See the Chariot UI under the Web Server, Backup , or Certificates pages
- server
- The MQTT Server Service for configuring and controlling the MQTT server
- See the Chariot UI under the "MQTT Server Configuration" tab
- license
- The Licensing Service for licensing the Chariot MQTT Server software
- See the Chariot UI under the "License" tab
- user
- The <action> represents the scope of this permission for the associated domain.
The available actions are:- read
- The permission to read/view resources, configurations, and/or data
- create
- The permission to create new resources and/or configurations
- update
- The permission to update resources and/or configurations
- delete
- The permission to delete resources and/or configurations
- action
- The permission to perform any actions available from a service within Chariot (such as starting/stopping the MQTT server or activating a license)
- read
- The <domain> represents a service within Chariot that can be interacted with through the Chariot UI.
...
MQTT Account Credentials also contain the access control lists (ACLs) that control which MQTT topics a client can publish and/or subscribe on. MQTT Accounts Account Credentials can be added by clicking the "Add Credential" button, or they can be edited by clicking on the individual Credential in the table.
Tip |
---|
From Chariot release 2.5.0, to avoid manual configuration, the required ACLs can be generated from the Main Navigation → MQTT → Sparkplug → Tools menu and will automatically . Clicking one of the available options will provide a modal that will help you automatically generate ACLS to be added to the MQTT Account Credentials.
|
Add Credential
Clicking the "Add Credential" button will display a modal form for creating a new MQTT Credential.
...