Permission Keys

eConnect controls what each user can do through permission keys. This page is a reference for every permission key in the system, grouped by the area it applies to, so you can quickly look up what a key does or link a colleague to the right section.

How permissions work

• A permission key grants the right to perform one specific action — for example create a user (UserCreate) or save a dashboard (UserGroupStorageSave).
• Related keys are grouped under a permission type (for example the Users type contains the create, update, delete, and manage-others keys).
• Keys are never assigned to a user directly. Instead, keys are collected into a Permission Group, and permission groups are assigned to users. See Adding Users for how that assignment is done.
• eConnect ships with a set of default permission groups — Admin, Operator, Viewer, ServiceOnly, SysAdmin, and SensitiveData. The Default Groups column shows which of these a key belongs to out of the box.
• These rights are enforced on the server / API, not just in the desktop client. Any application that talks to eConnect — the Windows (WPF) desktop app today, and the newer Electron app — is held to the same limits.

Not every key is visible to you

You can only see and assign the keys that have already been granted to you. If a key isn't in your list, your own permissions don't include it. A number of higher-level keys — such as switching your active user group or managing resellers — are reserved for system administrators and most users will never see them. These are listed under Administrative & High-Level Keys for completeness.

Storage keys & dashboards

Several features — most visibly saved dashboards — persist their state in a per-user-group storage area (the User Group Storage keys). Each saved item (a dashboard, a screen layout, or a general configuration value) is written under its own storage key. Because this is where dashboards live, the Save / Save Own / Remove / Remove Own permissions in Dashboards & Storage Keys decide who can create and change shared dashboards versus only their own. Saved queries (which dashboards draw their data from) are covered separately under Saved Queries.

Reading the tables

Each row is one permission key.

Column	Meaning
Friendly Name	The label shown in the application's permission editor. Where no translated label exists yet, the application shows the raw key — so in those rows the Friendly Name matches the Internal Key.
Internal Key	The exact key value stored in the database and used by the API. Useful for support and developers.
Default Groups	The default permission group(s) that include this key. — means the key is not in any default group and must be granted explicitly.
Description	What the key allows.

A 🆕 badge marks keys that are new in eConnect v11.

New in v11

The only permission key added since v10 is AI Providers → Manage (AiProvidersManage), which governs the new AI Assistant. Everything else on this page exists in v10 as well.

Core & Portal

Keys that apply to the main eConnect application and portal, regardless of which add-on products are licensed. Most day-to-day administration keys live here.

Users & Accounts

Friendly Name	Internal Key	Default Groups	Description
User creation	UserCreate	Admin	Create new user accounts within the current user group.
User removal	UserDelete	Admin	Remove user accounts from the current user group.
Users can manage other users	UsersManageOthers	Admin	Manage accounts and permissions belonging to other users, not just your own.
User updates	UserUpdate	Admin	Edit an existing user's profile, credentials, and settings.
User details remove	UserAttributeRemove	Admin	Delete extended attributes from a user.
User details update	UserAttributeUpdate	Admin	Add or change extended attributes (custom detail fields) stored on a user.

Permission Groups & Rights

Keys that control who can manage permissions themselves. Grant these carefully — they let a user change what other users can do.

Friendly Name	Internal Key	Default Groups	Description
User permission group creation	PermissionGroupCreate	Admin	Create new permission groups that bundle keys for assignment to users.
User permission group removal	PermissionGroupDelete	Admin	Delete a permission group, removing it from every user it was assigned to.
User permission group update	PermissionGroupUpdate	Admin	Rename a permission group or change its inheritance.
Permissions Modify	PermissionModifyRights	Admin	Add or remove permission keys inside a permission group.
User permission associate user	PermissionAssociateUser	Admin	Assign a permission group to a user.
User permission de-associate user	PermissionUnassociateUser	Admin	Remove a permission group from a user.

User Group Settings

Friendly Name	Internal Key	Default Groups	Description
User Group Setting Create	UserGroupAttributeCreate	Admin	Create user-group-level settings (configuration stored against the whole group).
User Group Setting Remove	UserGroupAttributeRemove	Admin	Delete user-group settings.
User Group Settings Update	UserGroupAttributeUpdate	Admin	Change existing user-group settings.

Logical Groups & Access Control

Logical groups organize sites, areas, and resources. Their ACLs and filters decide which users and data each group can reach.

Friendly Name	Internal Key	Default Groups	Description
Logical Groups Add	LogicalGroupsAdd	Admin	Create logical groups used to organize sites, areas, and resources.
Logical Groups Remove	LogicalGroupsRemove	Admin	Delete a logical group.
Logical Groups Update	LogicalGroupsUpdate	Admin	Rename or reconfigure a logical group.
Logical Group User Add	LogicalGroupUserAdd	Admin	Add a user to a logical group.
Logical Group User Remove	LogicalGroupUserRemove	Admin	Remove a user from a logical group.
Logical Group Acl Remove	LogicalGroupAclRemove	Admin	Revoke a user's access rights to a logical group.
Logical Group Acl Save	LogicalGroupAclSave	Admin	Grant or update a user's access rights (ACL) to a logical group.
Logical Group Filter Add	LogicalGroupFilterAdd	Admin	Add a filter that scopes what a logical group can see.
Logical Group Filter Remove	LogicalGroupFilterRemove	Admin	Remove a logical group filter.

Plugins & Integrations

Keys for attaching and configuring installed product modules (plugins) within your user group. Registering brand-new plugins is a higher-level action — see Administrative & High-Level Keys.

Friendly Name	Internal Key	Default Groups	Description
Plugin associations add	PluginAssociationAdd	Admin	Attach an installed plugin (product module) to the current user group.
Plugin associations remove	PluginAssociationRemove	Admin	Detach a plugin from the current user group.
PluginAssociationReorder	PluginAssociationReorder	Admin	Change the display and processing order of associated plugins.
Plugin settings manage	PluginSettingManage	Admin	View and change configuration settings for an installed plugin.
Plugin instance attribute manage	PluginInstanceAttributeManage	Admin	Manage extended attributes on a plugin instance.
Event Status - Allow Comment Edit Other	PluginEventStatusAllowCommentEditOther	Admin	Edit comments left by other users on plugin event statuses.
Event Status - Allow Comment Edit Own	PluginEventStatusAllowCommentEditOwn	Admin, Viewer	Edit your own comments on plugin event statuses.
Event Status - See History	PluginEventStatusSeeHistory	Admin, Viewer	View the status and comment history on plugin events.

Saved Queries

Friendly Name	Internal Key	Default Groups	Description
Core Query Remove Any	CoreQueryRemove	Admin	Delete any shared core query.
Core Query Remove Own	CoreQueryRemoveOwn	Admin, Viewer	Delete core queries owned by the current user.
Core Query Save Any	CoreQuerySave	Admin, Viewer	Save shared core queries (used by dashboards) visible to the whole group.
Core Query Save Own	CoreQuerySaveOwn	Admin, Viewer	Save core queries owned by the current user.

Dashboards & Storage Keys

The User Group Storage area is a key/value store the application uses to persist saved dashboards, screen layouts, and general per-user-group configuration. Each stored item is written under a storage key. The permissions below decide who can save or remove those entries — either for the whole group (Save / Remove) or only the items a user owns (Save Own / Remove Own).

Friendly Name	Internal Key	Default Groups	Description
User Group Storage Remove	UserGroupStorageRemove	Admin	Delete shared user-group storage entries.
User Group Storage Remove Own	UserGroupStorageRemoveOwn	Admin, Viewer	Delete storage entries owned by the current user.
User Group Storage Save	UserGroupStorageSave	Admin	Save shared storage entries (dashboards, layouts, general configuration) for the whole user group.
User Group Storage Save Own	UserGroupStorageSaveOwn	Admin, Viewer	Save storage entries owned by the current user.

Jobs & Automation

Friendly Name	Internal Key	Default Groups	Description
User Job Create	User Job Create	Admin, Operator, Viewer	Create scheduled user jobs (automated recurring tasks).
User Job Delete	User Job Delete	Admin, Operator, Viewer	Delete a user job.
User Job Update	User Job Update	Admin, Operator, Viewer	Edit an existing user job or its schedule.
Job Action Create	Job Action Create	Admin, Operator	Add an action step to a job.
Job Action Delete	Job Action Delete	Admin, Operator	Delete a job action.
Job Action Update	Job Action Update	Admin, Operator	Edit a job action.

Alert Subscriptions

Friendly Name	Internal Key	Default Groups	Description
Alert Subscription - Add	QuerySubscriptions_Add	Admin, Viewer	Subscribe to alerts generated by a saved query.
Alert Subscription - Manage Other Users	QuerySubscriptions_Admin_Users	Admin	Manage alert subscriptions on behalf of other users.
Alert Subscription - Remove	QuerySubscriptions_Remove	Admin, Viewer	Remove an alert subscription.

Sessions & History

Friendly Name	Internal Key	Default Groups	Description
User Session History - All Group	UserSesionHistoryViewAllGroups	—	View user session and login history across all user groups.
User Session History - Current Group	UserSesionHistoryViewCurrentGroup	Admin	View user session and login history for the current user group.

Server & System

Friendly Name	Internal Key	Default Groups	Description
Upload files to server	UploadFileToServerRight	Admin, Viewer	Upload files to the eConnect server.
SystemSettingsRemove	SystemSettingsRemove	SysAdmin	Delete system-wide settings.
SystemSettingsSave	SystemSettingsSave	SysAdmin	Create or change system-wide settings.

AI Assistant

New in eConnect v11. Controls the AI Assistant's providers, scope policies, and instructions.

Friendly Name	Internal Key	Default Groups	Description
🆕 AiProvidersManage	AiProvidersManage	SysAdmin	Configure AI providers, scope policies, and assistant instructions for the AI Assistant.

Video & Witness Devices

Keys for managing cameras / witness devices, device groups, and video export. Available where the Witness / video product is licensed.

Friendly Name	Internal Key	Default Groups	Description
Device add	DeviceAdd	Admin	Add a camera / witness device to the system.
Device remove	DeviceRemove	Admin	Remove a device from the system.
Device update	DeviceUpdate	Admin	Edit a device's configuration.
Video Local Export	Video Local Export	Admin	Export recorded video to local storage.
Video Manual Export	Video Manual Export	Admin	Manually export recorded video from a device.
Device details add	DeviceAttributeAdd	Admin	Add extended attributes (detail fields) to a device.
Device details removal	DeviceAttributeRemove	Admin	Remove a device's extended attributes.
Device details update	DeviceAttributeUpdate	Admin	Change a device's extended attributes.
Device group add	DeviceGroupAdd	Admin	Create a device group.
Device group removal	DeviceGroupRemove	Admin	Delete a device group.
Device group updates	DeviceGroupUpdate	Admin	Edit a device group.
Device group association add	DeviceGroupAssociationAdd	Admin	Add a device to a device group.
Device group association remove	DeviceGroupAssociationRemove	Admin	Remove a device from a device group.
Device group association update	DeviceGroupAssociationUpdate	Admin	Change a device-to-group association.
Device group settings add	DeviceGroupSettingAdd	Admin	Add a setting to a device group.
Device group setting remove	DeviceGroupSettingRemove	Admin	Remove a device group setting.
Device group setting update	DeviceGroupSettingUpdate	Admin	Change a device group setting.
Device deny add	DeviceDenyAdd	Admin	Deny a user or group access to specific devices.
Device deny removal	DeviceDenyRemove	Admin	Remove a device access denial.
Export server add	ExportServerAdd	Admin	Register a video export server.
Export server change ownership	ExportServerExportServerChangeOwnership	Admin	Reassign the ownership of a video export to another user.
Export server remove exports	ExportServerExportsRemove	Admin	Delete video exports.
Export server view all exports	ExportServerExportsViewAll	Admin	View all video exports within the current group.
Export Server - Global View All	ExportServerExportsViewAllGlobal	SysAdmin	View all video exports across every group (global scope).
Export server removal	ExportServerRemove	Admin	Remove a video export server.
Export server update	ExportServerUpdate	Admin	Update a video export server.

Point of Sale

Keys for point-of-sale (POS) data sources, transaction events, saved POS queries, and scoring rules.

Friendly Name	Internal Key	Default Groups	Description
Point of sale data entity add	POSDataEntityAdd	Admin, ServiceOnly	Register point-of-sale data entities (registers, terminals, sources).
Point of sale data entity removal	POSDataEntityRemove	ServiceOnly	Remove a point-of-sale data entity.
Point of sale data entity update	POSDataEntityUpdate	Admin, ServiceOnly	Update a point-of-sale data entity.
Point of sale data event add	POSDataEventAdd	ServiceOnly	Ingest point-of-sale transaction and data events (service accounts).
Point of sale data event removal	POSDataEventRemove	ServiceOnly	Remove point-of-sale data events.
Point of sale query removal	POSBIQueryRemove	Admin	Delete any shared point-of-sale query.
Point of sale query remove own	POSBIQueryRemoveOwn	Admin, Viewer	Delete point-of-sale queries owned by the current user.
Point of sale query save	POSBIQuerySave	Admin, Viewer	Save shared point-of-sale (business-intelligence) queries for the group.
Point of sale query save own	POSBIQuerySaveOwn	Admin, Viewer	Save point-of-sale queries owned by the current user.
Pos Score Add	Pos Score Add	—	Create point-of-sale scoring rules.
Pos Score Remove	Pos Score Remove	—	Delete point-of-sale scoring rules.
Pos Score Reprocess	Pos Score Reprocess	—	Re-run scoring against existing point-of-sale data.
Pos Score Update	Pos Score Update	—	Edit point-of-sale scoring rules.

Object Analytics

Keys for face recognition, subjects (people/objects of interest), tags, zones, license plates, and their detectors. Available where the Object Analytics / Face & License-Plate products are licensed.

Face Recognition Tools

Friendly Name	Internal Key	Default Groups	Description
FaceRecBulkEnroll	FaceRecBulkEnroll	Admin	Bulk-enroll faces from a batch of images.
FaceRecBulkExport	FaceRecBulkExport	Admin	Bulk-export face images and records.
FaceRecEnrolling	FaceRecEnrolling	Admin, ServiceOnly	Enroll faces — add a person's face to the recognition gallery.
FaceRecMerging	FaceRecMerging	Admin, ServiceOnly	Merge two face / subject records into one.
FaceRecReprocess	FaceRecReprocess	Admin, ServiceOnly	Re-run face recognition processing on existing data.
FaceRecSplitting	FaceRecSplitting	Admin, ServiceOnly	Split incorrectly merged faces or subjects apart.
FaceRecUnEnrolling	FaceRecUnEnrolling	Admin, ServiceOnly	Un-enroll faces — remove a face from the recognition gallery.

Subjects

Friendly Name	Internal Key	Default Groups	Description
ObjectAnalyticsSubjectRemove	ObjectAnalyticsSubjectRemove	Admin, ServiceOnly	Delete a subject record.
ObjectAnalyticsSubjectUpdate	ObjectAnalyticsSubjectUpdate	Admin, ServiceOnly	Edit a subject (person or object of interest) record.

Subject Detectors

Friendly Name	Internal Key	Default Groups	Description
ObjectAnalyticsSubjectDetectorAdd	ObjectAnalyticsSubjectDetectorAdd	Admin	Add a subject detector.
ObjectAnalyticsSubjectDetectorRemove	ObjectAnalyticsSubjectDetectorRemove	Admin	Remove a subject detector.
ObjectAnalyticsSubjectDetectorTransReprocess	ObjectAnalyticsSubjectDetectorTransReprocess	Admin	Reprocess a subject detector's detections/transactions.
ObjectAnalyticsSubjectDetectorUpdate	ObjectAnalyticsSubjectDetectorUpdate	Admin	Update a subject detector.

Tags

Tags can be applied to both subjects and license plates.

Friendly Name	Internal Key	Default Groups	Description
ObjectAnalyticsLicensePlateTagAssociate	ObjectAnalyticsLicensePlateTagAssociate	Admin, Operator, ServiceOnly	Apply a tag to a license plate.
ObjectAnalyticsLicensePlateTagAssociationUpdate	ObjectAnalyticsLicensePlateTagAssociationUpdate	Admin, Operator, ServiceOnly	Update an existing license-plate-to-tag association.
ObjectAnalyticsLicensePlateTagDissociate	ObjectAnalyticsLicensePlateTagDissociate	Admin, Operator, ServiceOnly	Remove a tag from a license plate.
ObjectAnalyticsSubjectTagAssociate	ObjectAnalyticsSubjectTagAssociate	Admin, Operator, ServiceOnly	Apply a tag to a subject.
ObjectAnalyticsSubjectTagAssociationUpdate	ObjectAnalyticsSubjectTagAssociationUpdate	Admin, Operator, ServiceOnly	Update an existing subject-to-tag association.
ObjectAnalyticsSubjectTagDissociate	ObjectAnalyticsSubjectTagDissociate	Admin, Operator, ServiceOnly	Remove a tag from a subject.
ObjectAnalyticsSubjectTagRemove	ObjectAnalyticsSubjectTagRemove	Admin, ServiceOnly	Delete subject tags.
ObjectAnalyticsSubjectTagUpdate	ObjectAnalyticsSubjectTagUpdate	Admin, ServiceOnly	Create or update subject tags (this key covers both add and update).

Zones

Friendly Name	Internal Key	Default Groups	Description
ObjectAnalyticsSubjectZoneAdd	ObjectAnalyticsSubjectZoneAdd	Admin	Assign a subject to a zone.
ObjectAnalyticsSubjectZoneRemove	ObjectAnalyticsSubjectZoneRemove	Admin	Remove a subject from a zone.
ObjectAnalyticsSubjectZoneReprocess	ObjectAnalyticsSubjectZoneReprocess	Admin, ServiceOnly	Reprocess subject zone calculations.
ObjectAnalyticsSubjectZoneUpdate	ObjectAnalyticsSubjectZoneUpdate	Admin	Update a subject's zone assignment.

Notifications

Friendly Name	Internal Key	Default Groups	Description
ObjectAnalyticsSubjectNotifyOptionAssociate	ObjectAnalyticsSubjectNotifyOptionAssociate	Admin	Associate a notification option with a subject.
ObjectAnalyticsSubjectNotifyOptionDissociate	ObjectAnalyticsSubjectNotifyOptionDissociate	Admin	Remove a notification option from a subject.
ObjectAnalyticsSubjectNotifyOptionRemove	ObjectAnalyticsSubjectNotifyOptionRemove	Admin	Delete a subject notification option.
ObjectAnalyticsSubjectNotifyOptionUpdate	ObjectAnalyticsSubjectNotifyOptionUpdate	Admin	Create or update a subject notification option — an alert rule for a subject (covers both add and update).

Regions

Friendly Name	Internal Key	Default Groups	Description
Object Analytics - Region Add	ObjectAnalyticsRegionAdd	Admin	Create an object-analytics region.
Object Analytics - Region Remove	ObjectAnalyticsRegionRemove	Admin	Delete an object-analytics region.
Object Analytics - Region Update	ObjectAnalyticsRegionUpdate	Admin	Update an object-analytics region.

Detection Data & Settings

Friendly Name	Internal Key	Default Groups	Description
Object Analytics - Data Add	ObjectAnalyticsDataAdd	ServiceOnly	Ingest object-analytics detection data (service accounts).
Object Analytics - Data Remove	ObjectAnalyticsDataRemove	ServiceOnly	Remove object-analytics detection data.
Object Analytics - Setting Lookup Save	ObjectAnalyticsSettingLookupSave	ServiceOnly	Save object-analytics setting lookups (service configuration).

Saved Queries

Friendly Name	Internal Key	Default Groups	Description
Object Analytics - Query Remove	ObjectAnalyticslQueryRemove	Admin	Delete any shared object-analytics query.
Object Analytics - Query Remove Own	ObjectAnalyticsQueryRemoveOwn	Admin, Viewer	Delete object-analytics queries owned by the current user.
Object Analytics - Query Save	ObjectAnalyticsQuerySave	Admin, Viewer	Save shared object-analytics queries for the group.
Object Analytics - Query Save Own	ObjectAnalyticsQuerySaveOwn	Admin, Viewer	Save object-analytics queries owned by the current user.

License Plates (LPR)

Friendly Name	Internal Key	Default Groups	Description
ObjectAnalyticsLicensePlateAdd	ObjectAnalyticsLicensePlateAdd	Admin, ServiceOnly	Add a license plate record.
ObjectAnalyticsLicensePlateRemove	ObjectAnalyticsLicensePlateRemove	Admin, ServiceOnly	Remove a license plate record.
ObjectAnalyticsLicensePlateUpdate	ObjectAnalyticsLicensePlateUpdate	Admin, ServiceOnly	Update a license plate record.
ObjectAnalyticsLicensePlateDetectedAdd	ObjectAnalyticsLicensePlateDetectedAdd	ServiceOnly	Record a detected license plate read (service accounts).
ObjectAnalyticsLicensePlateDetectorAdd	ObjectAnalyticsLicensePlateDetectorAdd	Admin, ServiceOnly	Add a license plate detector.
ObjectAnalyticsLicensePlateDetectorRemove	ObjectAnalyticsLicensePlateDetectorRemove	Admin, ServiceOnly	Remove a license plate detector.
ObjectAnalyticsLicensePlateDetectorUpdate	ObjectAnalyticsLicensePlateDetectorUpdate	Admin, ServiceOnly	Update a license plate detector.

Subject ↔ License Plate Associations

Friendly Name	Internal Key	Default Groups	Description
OaSubjectLicensePlateAssocAdd	OaSubjectLicensePlateAssocAdd	Admin, Operator, ServiceOnly	Associate a license plate with a subject (e.g. a vehicle's owner).
OaSubjectLicensePlateAssocRemove	OaSubjectLicensePlateAssocRemove	Admin, Operator, ServiceOnly	Remove a subject-to-license-plate association.

Incident Tracker

Keys for the Incident Tracker product — incident (case) records, their content, people of interest, and configuration.

Incidents & Access

Friendly Name	Internal Key	Default Groups	Description
Incident Tracker master incident removal	ITMasterIncidentRemove	Admin	Delete an incident record.
Incident Tracker master incident add	ITMasterIncidentsAdd	Admin, Viewer	Create incident (case) records in Incident Tracker.
Incident Tracker master incident update	ITMasterIncidentsUpdate	Admin, Viewer	Edit an incident record.
Incident Tracker permission add	ITMasterIncidentPermissionsAdd	Admin	Grant a user or group access to an incident.
Incident Tracker permission remove	ITMasterIncidentPermissionsRemove	Admin	Revoke access to an incident.
Incident Tracker permission update	ITMasterIncidentPermissionsUpdate	Admin	Change a user's or group's access to an incident.

Incident Content

Friendly Name	Internal Key	Default Groups	Description
Incident Tracker details add	ITAttributeAdd	Admin, Viewer	Add detail fields to an incident.
Incident Tracker details removal	ITAttributeRemove	Admin	Remove an incident's detail fields.
Incident Tracker details update	ITAttributeUpdate	Admin, Viewer	Change an incident's detail fields.
Incident Tracker comment add	ITCommentAdd	Admin, Viewer	Add a comment to an incident.
Incident Tracker comment removal	ITCommentRemove	Admin	Delete an incident comment.
Incident Tracker comment update	ITCommentUpdate	Admin	Edit an incident comment.
Incident Tracker attachment add	ITAttachmentAdd	Admin, Viewer	Attach a file to an incident.
Incident Tracker attachment removal	ITAttachmentRemove	Admin	Remove an incident attachment.
Incident Tracker attachment update	ITAttachmentUpdate	Admin, Viewer	Update an incident attachment.
Incident Tracker media add	ITMediaAdd	Admin, Viewer	Add media (images or video) to an incident.
Incident Tracker media removal	ITMediaRemove	Admin	Remove incident media.
Incident Tracker media updating	ITMediaUpdate	Admin, Viewer	Update incident media.

People

Friendly Name	Internal Key	Default Groups	Description
ITPersonAdd	ITPersonAdd	Admin, Viewer	Add a person of interest to Incident Tracker.
ITPersonCaseAssociationAdd	ITPersonCaseAssociationAdd	Admin, Viewer	Associate a person with an incident / case.
ITPersonRemove	ITPersonRemove	Admin	Delete a person of interest.
ITPersonUpdate	ITPersonUpdate	Admin	Edit a person of interest.

Configuration & Lookups

Friendly Name	Internal Key	Default Groups	Description
Incident Tracker incident type add	ITTypeAdd	Admin	Create incident types (categories).
Incident Tracker incident type removal	ITTypeRemove	Admin	Delete an incident type.
Incident Tracker incident type update	ITTypeUpdate	Admin	Edit an incident type.
ITLocationAdd	ITLocationAdd	Admin	Create incident locations.
ITLocationRemove	ITLocationRemove	Admin	Delete an incident location.
ITLocationUpdate	ITLocationUpdate	Admin	Edit an incident location.
ITResolutionAdd	ITResolutionAdd	Admin	Create incident resolution options.
ITResolutionRemove	ITResolutionRemove	Admin	Delete an incident resolution option.
ITResolutionUpdate	ITResolutionUpdate	Admin	Edit an incident resolution option.
ITActivityStatusAdd	ITActivityStatusAdd	Admin	Create incident activity statuses.
ITActivityStatusRemove	ITActivityStatusRemove	Admin	Delete an incident activity status.
ITActivityStatusUpdate	ITActivityStatusUpdate	Admin	Edit an incident activity status.
ITActivityActionAdd	ITActivityActionAdd	Admin, Viewer	Add an activity action to an incident.
ITActivityActionRemove	ITActivityActionRemove	Admin	Remove any activity action from an incident.
ITActivityActionRemoveOwn	ITActivityActionRemoveOwn	Admin, Viewer	Remove your own activity actions from an incident.
Incident Tracker server add	ITServerAdd	Admin	Register an Incident Tracker server.
Incident Tracker server removal	ITServerRemove	Admin	Remove an Incident Tracker server.
Incident Tracker server update	ITServerUpdate	Admin	Update an Incident Tracker server.

Saved Queries

Friendly Name	Internal Key	Default Groups	Description
ITPersonCaseAssociationRemove	ITPersonCaseAssociationRemove	Admin, Viewer	Remove a person from an incident / case.
ITQueryRemove	ITQueryRemove	Admin	Delete any shared Incident Tracker query.
ITQueryRemoveOwn	ITQueryRemoveOwn	Admin, Viewer	Delete Incident Tracker queries owned by the current user.
ITQuerySave	ITQuerySave	Admin, Viewer	Save shared Incident Tracker queries for the group.
ITQuerySaveOwn	ITQuerySaveOwn	Admin, Viewer	Save Incident Tracker queries owned by the current user.

Casino Connect

Keys for the Casino Connect product — patrons (entities), bet sessions, journals, and related reference data.

Entities & Groups

Friendly Name	Internal Key	Default Groups	Description
Casino connect entity add	CasinoConnectEntityAdd	Admin, ServiceOnly	Add a Casino Connect entity (patron / player record).
Casino connect entity remove	CasinoConnectEntityRemove	Admin, ServiceOnly	Remove a Casino Connect entity.
Casino connect entity update	CasinoConnectEntityUpdate	Admin, ServiceOnly	Update a Casino Connect entity.
Patron Bet Defaults Override	Patron Bet Defaults Override	Admin	Override the default bet parameters for a patron.
Casino connect entity attribute add	CasinoConnectEntityAttributeAdd	Admin, ServiceOnly	Add attributes to a Casino Connect entity.
Casino connect entity attribute remove	CasinoConnectEntityAttributeRemove	Admin, ServiceOnly	Remove Casino Connect entity attributes.
Casino connect entity attribute update	CasinoConnectEntityAttributeUpdate	Admin, ServiceOnly	Update Casino Connect entity attributes.
Entity Group Add	CasinoConnectEntityGroupAdd	Admin, ServiceOnly	Create a Casino Connect entity group.
Entity Group Associate	CasinoConnectEntityGroupAssociate	Admin, ServiceOnly	Add an entity to a Casino Connect entity group.
Entity Group Deassociate	CasinoConnectEntityGroupDeAssociate	Admin, ServiceOnly	Remove an entity from a Casino Connect entity group.
Entity Group Remove	CasinoConnectEntityGroupRemove	Admin, ServiceOnly	Remove a Casino Connect entity group.
Entity Group Update	CasinoConnectEntityGroupUpdate	Admin, ServiceOnly	Update a Casino Connect entity group.

Bet Sessions

Friendly Name	Internal Key	Default Groups	Description
Bet Session Location Add	CasinoConnectBetLocationAdd	Admin, ServiceOnly	Add a bet session location (table or area).
Bet Session Location Remove	CasinoConnectBetLocationRemove	Admin	Remove a bet session location.
Bet Session Location Update	CasinoConnectBetLocationUpdate	Admin, ServiceOnly	Update a bet session location.
Bet Session Add	CasinoConnectBetSessionAdd	Admin, Viewer, ServiceOnly	Create a bet session (a patron's rated play).
CasinoConnectBetSessionRecalculate	CasinoConnectBetSessionRecalculate	Admin	Recalculate the totals and ratings of a bet session.
Bet Session Remove	CasinoConnectBetSessionRemove	Admin	Delete any bet session.
Bet Session Remove Own	CasinoConnectBetSessionRemoveOwn	Admin, Viewer, ServiceOnly	Delete bet sessions you created.
Bet Session Update	CasinoConnectBetSessionUpdate	Admin, ServiceOnly	Update any bet session.
Bet Session Update Own	CasinoConnectBetSessionUpdateOwn	Admin, Viewer, ServiceOnly	Update bet sessions you created.

Journals & Records

Friendly Name	Internal Key	Default Groups	Description
Casino connect journal event add	CasinoConnectJournalEventAdd	ServiceOnly	Record Casino Connect journal events (service accounts).
Casino connect journal event remove	CasinoConnectJournalEventRemove	ServiceOnly	Remove Casino Connect journal events.
Casino connect journal event update	CasinoConnectJournalEventUpdate	ServiceOnly	Update Casino Connect journal events.
Casino connect journal query remove	CasinoConnectJournalQueryRemove	Admin	Delete any shared journal query.
Casino connect journal query remove own	CasinoConnectJournalQueryRemoveOwn	Admin, Viewer	Delete journal queries owned by the current user.
Casino connect journal query save	CasinoConnectJournalQuerySave	Admin, Viewer	Save shared Casino Connect journal queries for the group.
Casino connect journal query save own	CasinoConnectJournalQuerySaveOwn	Admin, Viewer	Save journal queries owned by the current user.
CasinoConnectCountdownAdd	CasinoConnectCountdownAdd	ServiceOnly	Add a Casino Connect countdown record (service accounts).
CasinoConnectCountdownRemove	CasinoConnectCountdownRemove	ServiceOnly	Remove a Casino Connect countdown record.
Casino connect tito record save	CasinoConnectTitoRecordsSave	ServiceOnly	Save TITO (ticket-in / ticket-out) records (service accounts).
CasinoConnectRouletteRecordsSave	CasinoConnectRouletteRecordsSave	ServiceOnly	Save roulette game records (service accounts).
Currency Remove	CasinoConnectCurrencyRemove	ServiceOnly	Remove currency count records.
Currency Save	CasinoConnectCurrencySave	ServiceOnly	Save currency count records (service accounts).

Reference Data

Friendly Name	Internal Key	Default Groups	Description
Game Type Add	CasinoConnectGameNameAdd	Admin, ServiceOnly	Add a Casino Connect game type / name.
Game Type Remove	CasinoConnectGameNamesRemove	Admin	Remove a Casino Connect game type / name.
Game Type Update	CasinoConnectGameNamesUpdate	Admin	Update a Casino Connect game type / name.
CasinoPhotoAdd	CasinoPhotoAdd	Admin, ServiceOnly	Add a patron photo.
CasinoPhotoRemove	CasinoPhotoRemove	Admin, ServiceOnly	Remove a patron photo.
CasinoPhotoUpdate	CasinoPhotoUpdate	Admin, ServiceOnly	Update a patron photo.
CasinoBlackjackTipsAdd	CasinoBlackjackTipsAdd	Admin	Add blackjack strategy tips.
CasinoBlackjackTipsRemove	CasinoBlackjackTipsRemove	Admin	Remove blackjack strategy tips.
CasinoBlackjackTipsUpdate	CasinoBlackjackTipsUpdate	Admin	Update blackjack strategy tips.

Sensitive

Sensitive data. Not granted to any default group — must be added explicitly to a permission group.

Friendly Name	Internal Key	Default Groups	Description
Live Shoe	CasinoLiveShoe	SensitiveData	View live shoe (card-count) information. Sensitive — not granted to any default group.

Casino Baccarat

Keys for the Casino Baccarat product — tables, event/wager logs, and saved queries. Several side-bet keys are sensitive and are not part of any default group.

Friendly Name	Internal Key	Default Groups	Description
Baccarat Dragon 7	BaccaratDragon7	SensitiveData	View baccarat Dragon 7 side-bet data. Sensitive.
Baccarat Dragon Bonus	BaccaratDragonBonus	SensitiveData	View baccarat Dragon Bonus side-bet data. Sensitive.
Baccarat Live Reveal	BaccaratLiveReveal	—	Reveal live baccarat outcomes. Highly sensitive — belongs to no default group and must be granted explicitly.
Baccarat Pair Probability	BaccaratPairProbability	SensitiveData	View baccarat pair-probability data. Sensitive.
Baccarat Panda 8	BaccaratPanda8	SensitiveData	View baccarat Panda 8 side-bet data. Sensitive.
Baccarat table add	BaccaratTableAdd	Admin, ServiceOnly	Add a baccarat table.
Baccarat table removal	BaccaratTableRemove	Admin, ServiceOnly	Remove a baccarat table.
Baccarat table update	BaccaratTableUpdate	Admin, ServiceOnly	Update a baccarat table.
Baccarat event log add	BaccaratLogAdd	ServiceOnly	Record baccarat event logs (service accounts).
Baccarat event log remove	BaccaratLogRemove	ServiceOnly	Remove baccarat event logs.
Baccarat wager add	BaccaratWagerAdd	ServiceOnly	Record baccarat wagers (service accounts).
Baccarat wager removal	BaccaratWagerRemove	ServiceOnly	Remove baccarat wagers.
Baccarat Query Remove	CasinoBaccaratQueryRemove	Admin	Delete any shared baccarat query.
Baccarat Query Remove Own	CasinoBaccaratQueryRemoveOwn	Admin, Viewer	Delete baccarat queries owned by the current user.
Baccarat Query Save	CasinoBaccaratQuerySave	Admin, Viewer	Save shared baccarat queries for the group.
Baccarat Query Save Own	CasinoBaccaratQuerySaveOwn	Admin, Viewer	Save baccarat queries owned by the current user.

Administrative & High-Level Keys

These keys are not part of any default permission group and are rarely visible to ordinary operators. They govern system-wide and reseller-level actions — registering plugins, creating or switching user groups, and managing resellers. They must be granted explicitly, and most customers will never see or need them.

Friendly Name	Internal Key	Default Groups	Description
Plugin add	PluginAdd	—	Register a new plugin / product module in the system.
Plugin get database connection string	PluginGetConnectionString	—	Read a plugin's database connection string.
Plugin removal	PluginRemove	—	Remove a registered plugin from the system.
Plugin set database connection string	PluginSetConnectionString	—	Set a plugin's database connection string.
Plugin update	PluginUpdate	—	Update a registered plugin definition.
Plugin instance creation	PluginInstanceCreate	—	Create a new instance of an installed plugin.
Plugin instance removal	PluginInstanceRemove	—	Remove a plugin instance.
Plugin instance update	PluginInstanceUpdate	—	Update a plugin instance.
Plugin service location save	PluginServiceSave	—	Set the service location (endpoint) for a plugin.
Reseller creation	ResellerCreate	—	Create a new reseller organization.
Reseller removal	ResellerRemove	—	Remove a reseller organization.
Reseller can view other resellers	ResellersViewOthers	—	View resellers other than your own.
Reseller update	ResellerUpdate	—	Update a reseller organization.
User group creation	UserGroupCreate	—	Create a new user group (top-level site / tenant grouping).
User group removal	UserGroupRemove	—	Remove a user group.
User group update	UserGroupUpdate	—	Update a user group.
User Group Change	ChangeSessionUserGroupID	—	Switch the active session to a different user group.

See also

• Adding Users — how to assign a permission group to a user.