This section describes how permissions are structured in your instance.

For information on how to change the setting of your instance refer to Configuring Your Instance.
For information on managing users refer to Managing Users
For information on managing user groups refer to Managing User Groups

Permissions are organized into groups in a hierarchy structure. Rather than assigning permissions to each user individually, users are grouped together, and then permissions are allocated to the group. The extent of the permissions provided will be based on the roles assigned within that group.

Groups

A group can consist of several subgroups, which can also contain their own subgroups.

Users can be assigned to multiple groups on different levels. They have to be added manually to each group and/or subgroup.

NavVis IVION comes with a default list of groups, which you can edit in User Management > Groups.

Each default group has a name and a set of permissions applied to it. The permissions control what kind of content members of the group can create, view, and publish. You can edit the permissions of a group via User Management > Groups.

If a user is in the Editor group, this means they have edit permissions, if a user is in the Viewer group this means they only have permission to view.

Users can only see groups they are a member of.

Default Groups

Level	Group
{{glossary.IVION Instance}}	Everyone
{{glossary.IVION Instance}}	Global Admin
{{glossary.Site}}	Admin (Site Admin)
	Editor
	Viewer

Default View/Edit {{glossary.Site}} Permissions

Access to feature/function

No access to feature/function

Page/ Side Menu/ Action	Function/Feature	Everyone
Page/ Side Menu/ Action	Function/Feature	User Groups
Home page
User profile
Sites overview
Sites search
Instance settings	Instance configuration
Instance settings	Subscription
User management	Managing users
	Defining user permissions
	Managing groups instance level
	Managing groups site level
View Site Permissions
View Settings
Search
Routing
{{glossary.Dataset}}s viewer	Dataset tree viewer
	Edit dataset name
	Edit dataset permissions
{{glossary.POI}} types	View POI type
	Create POI types
	Edit POI types
{{glossary.Point of Interest (POI)}}	Setting a View for a POI
	Create POI
	Edit POI
Share
{{glossary.Site Model}} attributes	View
{{glossary.Site Model}} attributes	Edit
Mark & Measure tool
Crop and Download
Point Cloud Cleanup tool
Processing Data
Settings	Site configuration
	Download data
	Task manager
Site Setup Permissions
View Settings
Datasets viewer
Share
Dataset management
Dataset alignment
Site model editor
Navigation graph
Vector map
Settings	Hidden images
Settings	Edit site location
Publish
View Draft
3D Model management

Group Permissions

After an instance is created, a Global Admin or Site Admin can make changes to the groups by assigning or removing permissions:

IVION New View Permission

Permission title	Function/feature	Everyone	Global Admin	Site Admin	Editor	Viewer
Create POI categories	POI Management
Create POIs	POI Management
Create vector maps	Vector maps in Dataset Management
Create user groups	User Group Management
Make content public	Access Management
View View site model attributes	Site Model Creation
Edit site model attributes	Site Model Creation
Crop and download point clouds	Crop and Download
View Draft	Publishing
Use measurement tool	Mark and Measure
Save measurement	Mark and Measure
Export POI audit records	POI Management
Manage data	Dataset Management
Data processing	NavVis IVION Processing
Publish data	Publishing

Global Admin

Global admins have access to all sites, site content, and functions in an instance.

By default, every instance has a global admin account. The first user to log in automatically becomes a global admin.

Members of the global admin group can add more users to this group.

{{glossary.Site}} Admin

Site admins have full access to their sites' content. A user can be a site admin of multiple sites.

Everyone

All users added to are automatically part of the Everyone group. This applies to {{glossary.Registered user}}s with individual sign-in credentials as well as {{glossary.Guest User}}s, who do not have their own sign-in credentials.

Everyone users (these are users that are not part of any group) will only be able to see public sites (they cannot access private sites). In reverse that means that Everyone users will be able to access all public sites.
The Everyone user group can be edited by selecting the General tab in the site drop-down menu on the Groups page, here you can also adjust the permissions the Everyone Group has.

{{glossary.Guest User}}s

Users that are added to , are not automatically added to a group apart from the Everyone group. They are considered guest users and their permissions are limited to viewing, navigating, and searching within . By default, these users do not have creation or editing permissions. To give users additional permissions, add them to an existing group or create a new group with the appropriate permissions.

Note: Users that are not added to a group will not count against applicable user licenses. However, users will count against applicable user licenses once they become part of a group.

Data Processing Rights

Users with Data Processing rights will be permitted to perform the following actions:

Upload unprocessed data
Launch processing tasks
Work with processed data

Note: Users can access the add to dataset management button and copy data to NavVis IVION even if they do not have permission to access the dataset management page.

FAQ

How are permissions managed in NavVis IVION?

Permissions are managed using groups, where users are added to a group and permissions are granted to that group.

Can a user belong to multiple groups?

Yes, users can be assigned to multiple groups but must be added manually to each group and/or subgroup.

What is the hierarchy of groups in NavVis IVION?

NavVis IVION’s group system is hierarchical, allowing a group to have multiple subgroups.

What are the default groups available in NavVis IVION?

The default groups include Everyone, Global Admin, Site Admin, Editor, and Viewer.

What permissions do users in the Viewer group have?

Users in the Viewer group only have permission to view content.

Can guest users create or edit content?

No, guest users do not have creation or editing permissions by default.

What actions can users with Data Processing rights perform?

Users with Data Processing rights can upload unprocessed data, launch processing tasks, and work with processed data.

How can permissions for the Everyone group be edited?

Permissions for the Everyone group can be edited via the General tab in the site drop-down menu on the Groups page.

What is the role of a Global Admin?

Global admins have access to all sites, site content, and functions in an instance.

I cannot use the NavGraph, but users with higher permissions can

Issue description

Root cause

Troubleshooting Procedure