---
description: what the scope of each function
---

# Functions in roles

This is the list of permissions that can be enabled on each role

<table data-header-hidden><thead><tr><th width="294.2504630188695">Devices</th><th>Description</th></tr></thead><tbody><tr><td><h3>Devices</h3></td><td></td></tr><tr><td><a href="../../device/manage-devices/device-detail-page">View Devices</a></td><td>Permission to view a device and its data</td></tr><tr><td><a href="../../device/manage-devices">Devices manage</a></td><td>Permission to change device settings, parameters, firmware and all others configurable data through <a data-mention href="../../device/manage-devices/device-detail-page">device-detail-page</a></td></tr><tr><td><a href="../../device/manage-devices/device-groups">Manage Groups</a></td><td>Permission to create/edit/delete groups </td></tr><tr><td><a href="../../device/manage-models">Manage Models</a></td><td>Permission to create/edit/delete device models</td></tr><tr><td><a href="../../device/manage-firmware">Manage Firmware </a></td><td>Permission to change a model firmware</td></tr><tr><td><a href="../../device/manage-devices/device-detail-page/recipes">Manage Recipes</a></td><td>Permission to change device recipes</td></tr><tr><td><a href="../../../device/manage-devices/device-list#generate-certificates">Manage Certificates</a></td><td>Permission to regenerate device MQTT certs</td></tr><tr><td><a href="../../device/manage-devices/device-detail-page/configuration">Manage Configuration</a></td><td>Permission to change machine parameters in the configuration tab</td></tr><tr><td><h3>Users</h3></td><td></td></tr><tr><td><a href="../manage-user">View Users</a></td><td>Permission to view organization users</td></tr><tr><td><a href="../manage-user">Manage Users</a></td><td>Permission to create/edit/delete users and manage their groups associations and roles</td></tr><tr><td><a href="">Manage Roles</a></td><td>Permission to create/edit/delete roles</td></tr></tbody></table>

