Tenants and Roles

How access control works in CAST Imaging.

Tenants

A tenant is an isolated workspace inside one CAST Imaging instance. Each tenant has its own set of applications, users, and settings. Users in one tenant cannot see the applications in another tenant.

Tenants are useful when:

  • You host applications for multiple clients on one server.
  • You want to separate production and test environments.
  • Different teams need isolated workspaces.

A Super Admin can create and manage tenants.

Roles

A role controls what a user can see and do inside a tenant. Every user must have at least one role before they can access application data.

Default roles

Role What the user can do
Viewer Read application graphs and saved views
Editor Everything Viewer can do, plus add tags, annotations, custom links, and saved views
Admin Everything Editor can do, plus manage users and application settings
Super Admin Full access to all tenants and all settings

Custom roles

An Admin can create custom roles with specific permissions (READ, CREATE, UPDATE, DELETE) on individual features. This allows fine-grained access control.

Learn more