view the UI

*

*

*

access the controller - view

*

*

*

*

access the controller - modify

*

query provenance

*

access restricted components

*

access all policies - view

*

access all policies - modify

*

access users/user groups - view

*

access users/user groups - modify

*

retrieve site-to-site details

*

view system diagnostics

*

*

proxy user requests

*

access counters