User roles and permissions

EAC users are granted specific permissions through their assigned role. Assigning a role to a user is equivalent to giving the user all the permissions for that role.

DI recognizes three categories of roles:

  • Utility roles. Utility roles are assigned to utility employees or, in select circumstances, Itron employees working on behalf of the utility with their permission. Utility roles have access to their assigned utility's tenants. This document focuses on utility roles. The following roles are utility roles:

    • Utility Manager. This role allows utility employees to perform most utility tasks in the EAC. However, they cannot approve DI application versions or install unapproved DI application versions.

    • Utility Tester. This role allows utility employees to selectively evaluate and approve or deny DI application versions.

    • Utility Support. This role allows Itron employees to act on behalf of the utility for specific service engagements. After the service engagement, this role is removed from Itron employees. Without this role, Itron employees cannot manage device groups or install/uninstall DI applications for a utility. This role has similar permissions to a combination of the Utility Manager and Utility Tester roles. With the utility's agreement, this role may be assigned to an Itron representative (typically project delivery personnel) during DI system deployment for the duration of the utility's on-boarding.

    • Utility Business Support. This role allows Itron employees to issue DI application licenses and check application usage within the utility’s tenant. This role may be assigned to an Itron representative (typically project delivery personnel) during DI system deployment for the duration of the utility's on-boarding.

  • Itron roles. Itron roles are assigned to Itron employees. Itron roles have access to Itron Identity services and utility tenants for support purposes. However, they do not have permissions to deploy applications in utility tenants. Itron roles are not described in this document.

  • DI Development Partner roles. DI Development Partner roles are assigned to third-party employees enrolled in the Itron DI Application Development Program. DI Development Partner roles have access to information about the applications they have developed, including related agents, containers, devices, and licenses. DI Development Partner roles are not described in this document.

When a user account is assigned multiple roles, only one role's permissions can be active at a time. To switch your active role:

  1. In the menu bar, click Account ().

  2. Click Switch Role.

  3. From the Role dropdown menu, select the wanted role from the list of roles your user account has been assigned.

  4. Click Switch Role.