---
title: "Scopes and Roles in NeuroFlo Apps"
canonical: "https://docs.rubiconwater.com/space/UMNC/2659745793/Scopes%20and%20Roles%20in%20NeuroFlo%20Apps"
format: markdown
---
> ℹ️ **Version** NF 2026.2
> Macro (toc)
> Macro (hiddenfragment-macro)
>
> ***This section is hidden from customers***
>
> This configuration is managed in the following files:
>
> [https://bitbucket.org/rubiconwater/openidconnect/src/develop/db_schema/src/main/resources/rubiconx/oidc/db/application/ref_data/system_scope.yaml](https://bitbucket.org/rubiconwater/openidconnect/src/develop/db_schema/src/main/resources/rubiconx/oidc/db/application/ref_data/system_scope.yaml)
>
> [https://bitbucket.org/rubiconwater/openidconnect/src/develop/db_schema/src/main/resources/rubiconx/oidc/db/application/ref_data/client.yaml](https://bitbucket.org/rubiconwater/openidconnect/src/develop/db_schema/src/main/resources/rubiconx/oidc/db/application/ref_data/client.yaml)
>
>
> need to add
>
> ***End of hidden section***
# What are Scopes?
Access to functionality in NeuroFlo apps is controlled with scopes.
> ℹ️ **Note**
> ℹ️
> ℹ️ Scopes are very similar to the *functions* that are used to configure access in older NeuroFlo applications, but Scopes can be associated with *both* roles and applications to configure which applications use those features and which roles have access to them.
You can configure the relationship between roles and scopes (and functions) in the [https://rubiconwater.atlassian.net/wiki/spaces/UMNC/pages/1979449436](https://rubiconwater.atlassian.net/wiki/spaces/UMNC/pages/1979449436) in DMS or SCADAConnect Forms. See [https://rubiconwater.atlassian.net/wiki/spaces/UMNC/pages/1985052754](https://rubiconwater.atlassian.net/wiki/spaces/UMNC/pages/1985052754)for details.
> ℹ️ **Scope Name and Scope Description**
> ℹ️
> ℹ️ Both Scope Name and Scope description are listed in the spreadsheet below. You may see either term in Rubicon release notes and documentation but *Scope Description* is the way that scopes are listed in Security Manager.
## Roles and Sub-Roles
A small number of roles (for example, SYSTEM ADMINSTRATOR) have sub-roles which give them access to a wider range of functions. But most roles do not have sub-roles by default.
You can check to see what sub-roles have been applied in your system in the DMS [https://rubiconwater.atlassian.net/wiki/spaces/UMNC/pages/1979547768](https://rubiconwater.atlassian.net/wiki/spaces/UMNC/pages/1979547768). To see what sub-roles a role has, check the **Sub-Role Privileges** tab of the Roles module for that role. Any role on that list for which *Grant Authority* privilege has been assigned is a sub-role of the parent role.
See [https://rubiconwater.atlassian.net/wiki/spaces/UMNC/pages/1983643715](https://rubiconwater.atlassian.net/wiki/spaces/UMNC/pages/1983643715).
> ℹ️ **Note**
> ℹ️
> ℹ️ - Note that role inheritance is only one level deep. Roles do not have sub-sub-roles.
> ℹ️ - You can prevent specific scopes and functions from being inherited by parent roles so, even if you have a role with a sub-role, you may not have access to the full functionality of the sub-role.
# Default Configuration
These tables show the default scope configurations for NetworkConnect (NC), SiteConnect (SC), CustomerConnect (CC), and MeterConnect (MC):
> ℹ️ **Note**
> ℹ️
> ℹ️ If a scope doesn’t have default roles it is not available by default (for example, it may only be used by specific customers). You can change the default configuration in the [https://rubiconwater.atlassian.net/wiki/spaces/UMNC/pages/1979449436](https://rubiconwater.atlassian.net/wiki/spaces/UMNC/pages/1979449436).
## Scope Groups and Scopes with Applications and Default Roles
| | | | | | | | |
| --- | --- | --- | --- | --- | --- | --- | --- |
| **SCOPE GROUP** | **SCOPE DESCRIPTION** | **SCOPE NAME** | **NC** | **SC** | **CC** | **MC** | **DEFAULT ROLES** |
| ### **Irrigation Unit Management** | View Irrigation Units | irrigation-units.read | Y | Y | Y | | Planner |
| Scada Operator |
| Scada Administrator |
| SP Operator |
| Owner |
| Manage Irrigation Units | irrigation-units.write | Y | Y | Y | | Planner |
| Manage Irrigation Units for Unmetered Service Points | irrigation-units.write-unmetered | | | Y | | |
| View Irrigation Units Plantings | irrigation-units:plantings.read | Y | Y | Y | | Planner |
| Owner |
| SP Operator |
| Manage Irrigation Units Plantings | irrigation-units:plantings.write | Y | Y | Y | | Planner |
| SP Operator |
| Manage Irrigation Units Plantings Special Fields | irrigation-units:plantings.special-write | Y | Y | Y | | Planner |
| Supervisor |
| System Administrator |
| Manage Crop Types | crop-types.special-write | Y | | | | Planner |
| Supervisor |
| System Administrator |
| ### **Site Operations** | View Site Notes | sites:notes.read | Y | Y | | Y | View Object |
| Manage Site Notes | sites:notes.write | Y | Y | | Y | Scada Operator |
| Meter Reader |
| View Site Details | sites.read | Y | Y | Y | Y | Planner |
| Scada Operator |
| Scada Supervisor |
| Scada Administrator |
| View Object |
| SP Operator |
| Data Entry |
| Owner |
| Public View |
| Customer Service Operator |
| Manage Site Details | sites.write | Y | Y | | Y | Scada Operator |
| Meter Reader |
| Scada Supervisor |
| Scada Administrator |
| Manage Privileged Site Details | sites.admin | Y | Y | | | Scada Administrator |
| Poll Site Tags | sites:tags.poll | Y | Y | | | Scada Operator |
| Scada Supervisor |
| Scada Administrator |
| Send Setpoint to Site | sites:tags.send | Y | Y | Y | | Scada Operator |
| Scada Supervisor |
| Scada Administrator |
| Record Tag Values | sites:tags.write | Y | Y | | Y | Scada Operator |
| Data Entry |
| Manage Tag Settings | sites:tags.admin | Y | Y | | | Scada Administrator |
| Acknowledge Alarms | sites:tags:alarms.ack | Y | Y | | | Scada Operator |
| | | | | | | FC Irrigator |
| Manage Tags Alarm Settings | sites:tags:alarms.admin | Y | Y | | | Scada Operator |
| View Site Image | sites:images.read | Y | Y | | Y | View Object |
| Manage Site Image | sites:images.write | Y | Y | | Y | Scada Administrator |
| Scada Operator |
| Planner |
| Meter Reader |
| Data Entry |
| View Meter Readings | meter-readings.read | Y | Y | Y | Y | Meter Reader |
| View Object |
| SP Operator |
| Owner |
| Record Meter Readings | meter-readings.write | Y | Y | Y | Y | Meter Reader |
| Record Special Meter Readings | meter-readings.special-write | Y | Y | | | Meter Reader |
| ### **Network Management** | View Site Work Assigments | site-assignments.read | Y | | | | Planner |
| Assign Work on Sites | site-assignments.write | Y | | | | Planner |
| View Setflows | sites:setflows.read | Y | Y | | | View Object |
| Manage Setflows | sites:setflows.write | Y | Y | | | Scada Operator |
| ### **Party Management** | View Customer Details | customers.read | Y | Y | | Y | Planner |
| Scada Operator |
| Meter Reader |
| Customer Service Operator |
| Manage Customer Details | customers.write | Y | | | | System Administrator |
| Manage Own Customer Details | customers.write-self | Y | | Y | | Owner |
| SP Operator |
| System Administrator |
| Manage Customer Roles | customer.roles.write | Y | | | | System Administrator |
| Customer Service Operator |
| View Staff Details | staff.read | Y | | | | Planner |
| Scada Operator |
| Scada Supervisor |
| Scada Administrator |
| Supervisor |
| System Administrator |
| Manage Staff Details | staff.write | Y | | | | System Administrator |
| Manage Own Staff Details | staff.write-self | Y | Y | | | System Administrator |
| Manage Staff Roles | staff.roles.wriite | Y | | | | System Administrator |
| View Documents/Forms | documents.read | Y | | Y | | System Administrator |
| Owner |
| SP Operator |
| Planner |
| Manage Documents/Forms | documents.write | Y | | | | System Administrator |
| ### **Water Ordering** | View Water Account | water-accounts.read | Y | Y | Y | Y | View Property |
| Owner |
| View Object |
| SP Operator |
| Planner |
| Scada Administrator |
| Scada Operator |
| Network Administrator |
| Meter Reader |
| Customer Service Operator |
| Manage Water Account Details | water-accounts.write | Y | Y | Y | | Owner |
| SP Operator |
| View Customer Entitlement Report | water-accounts:reports:customer_entitlement.read | Y | Y | Y | | |
| View Water Orders | water-orders.read | Y | Y | Y | | View Object |
| SP Operator |
| Planner |
| Scada Operator |
| Owner |
| Customer Service Operator |
| Manage Water Orders | water-orders.write | Y | Y | Y | | SP Operator |
| Planner |
| Customer Service Operator |
| Manage Water Orders with special write to bypass validation rules | water-orders-special-write | Y | Y | | | Planner |
| Manage Unsatisfied Water Orders | water-orders-write-unsatisfied | Y | Y | Y | | SP Operator |
| Customer Service Operator |
| View Rotations | rotations.read | Y | Y | | | Planner |
| Scada Operator |
| Scada Administrator |
| SP Operator |
| Manage Rotations | rotations.write | Y | | | | Planner |
| Scada Administrator |
| View Water Order Activity | water-orders:activities.read | Y | Y | Y | | Planner |
| View Plan Details | plans.read | Y | Y | | | Planner |
| Supervisor |
| Manage Plans | plans.write | Y | | | | Planner |
| Supervisor |
| Manage Planning Areas | planning-areas.admin | Y | | | | Area Administrator |
| View Maintenance Schedules | maintenance-schedules.read | Y | | | | Planner |
| SCADA Operator |
| View Object |
| SP Operator |
| Owner |
| Customer Service Operator |
| Area Administrator |
| Manage Maintenance Schedules | maintenance-schedules.write | Y | | | | Planner |
| Area Administrator |
| ### **Billing** | View Invoices | invoices.read | | | Y | | Owner |
| View Property |
| View Object |
| SP Operator |
| View Billing Accounts | billing-accounts.read | Y | Y | Y | | Planner |
| Financial Administrator |
| ### **Messaging** | Create Call Request | call-requests.write | | | Y | | |
| Send a Message to a Customer | messages.write-customer | | | | | Planner |
| Send a Message to a Planner | messages.write-planner | | | | | SP Operator |
| Send a Message to a Staff Member | messages.write-staff | | | | | Planner |
| Scada Operator |
| Scada Supervisor |
| Scada Administrator |
| Supervisor |
| System Administrator |
| Read Messages | messages.read | Y | Y | Y | | Planner |
| Owner |
| SP Operator |
| View Communication Types | communication-types.read | y | | | | System Administrator |
| Manage Communication Types | communication-types.write | y | | | | System Administrator |
| ### **Audit** | View Entity Audit Events | entity-events.read | Y | Y | | | Planner |
| Scada Operator |
| Scada Administrator |
| System Administrator |
| View Party Account Audit Events | party-account-events.read | Y | | | | Planner |
| System Administrator |
| ### **Water Trading** | Make or Complete Trades on Behalf of Others | trades.broker | Y | | | | |
| View Trades | trades.read | Y | | Y | | |
| | Contract to Buy an Offered Entitlement | trades.buy | | | Y | | |
| | Offer an Entitlement for Sale | trades.sell | | | Y | | |
## Default Roles with their Scope Groups and Scopes
| | | |
| --- | --- | --- |
| **ROLE** | **SCOPE GROUP** | **SCOPE DESCRIPTION** |
| ### **Area Administrator** | Water Ordering | Manage Planning Areas |
| View Maintenance Schedules |
| Manage Maintenance Schedules |
| | | |
| ### **Customer Service Operator** | Site Operations | View Site Details |
| Party Management | View Customer Details |
| Manage Customer Roles |
| Water Ordering | View Water Account |
| Manage Water Orders |
| | View Maintenance Schedules |
| | | |
| ### **Data Entry**
** ** | Site Operations | View Site Details |
| Record Tag Values |
| Manage Site Image |
| | | |
| ### **Financial Administrator** | Billing | View Billing Accounts |
| | | |
| ### **Meter Reader**
** ** | Site Operations | Manage Site Notes |
| Manage Site Details |
| Manage Site Image |
| View Meter Readings |
| Record Meter Readings |
| Record Special Meter Readings |
| Party Management | View Customer Details |
| Water Ordering | View Water Account |
| | | |
| ### **Network Administrator** | Water Ordering | View Water Account |
| | | |
| ### **Owner**
** ** | Irrigation Unit Management | View Irrigation Units |
| View Irrigation Units Plantings |
| Site Operations | View Site Details |
| Party Management | Manage Own Customer Details |
| Water Ordering | View Water Account |
| Manage Water Account Details |
| View Water Orders |
| View Maintenance Schedules |
| Billing | View Invoices |
| | Messaging | Read Messages |
| | | |
| ### **Planner**
** ** | Irrigation Unit Management | View Irrigation Units |
| Manage Irrigation Units |
| View Irrigation Units Plantings |
| Manage Irrigation Units Plantings |
| Manage Irrigation Units Plantings Special Fields |
| Manage Crop Types |
| Site Operations | View Site Details |
| Manage Site Image |
| Network Management | View Site Work Assigments |
| Assign Work on Sites |
| Party Management | View Customer Details |
| View Staff Details |
| | View Documents/Forms |
| Water Ordering | View Water Account |
| View Water Orders |
| Manage Water Orders |
| Manage Water Orders with special write to bypass validation rules |
| View Rotations |
| Manage Rotations |
| View Water Order Activity |
| View Plan Details |
| Manage Plans |
| View Maintenance Schedules |
| Manage Maintenance Schedules |
| Billing | View Billing Accounts |
| Messaging | Send a Message to a Customer |
| Send a Message to a Staff Member |
| Read Messages |
| Audit | View Entity Audit Events |
| View Party Account Audit Events |
| | | |
| ### **Public View** | Site Operations | View Site Details |
| | | |
| ### **Scada Administrator**
** ** | Irrigation Unit Management | View Irrigation Units |
| Site Operations | View Site Details |
| Manage Site Details |
| Manage Privileged Site Details |
| Poll Site Tags |
| Send Setpoint to Site |
| Manage Tag Settings |
| Manage Site Image |
| Party Management | View Staff Details |
| Water Ordering | View Water Account |
| View Rotations |
| Manage Rotations |
| Messaging | Send a Message to a Staff Member |
| | | |
| ### **Scada Operator**
** ** | Irrigation Unit Management | View Irrigation Units |
| Site Operations | Manage Site Notes |
| View Site Details |
| Manage Site Details |
| Poll Site Tags |
| Send Setpoint to Site |
| Record Tag Values |
| Acknowledge Alarms |
| Manage Tags Alarm Settings |
| Manage Site Image |
| Network Management | Manage Setflows |
| Party Management | View Customer Details |
| View Staff Details |
| Water Ordering | View Water Account |
| View Water Orders |
| View Rotations |
| View Maintenance Schedules |
| Messaging | Send a Message to a Staff Member |
| | | |
| ### **Scada Supervisor**
** ** | Site Operations | View Site Details |
| Manage Site Details |
| Poll Site Tags |
| Send Setpoint to Site |
| Party Management | View Staff Details |
| View Staff Details |
| Messaging | Send a Message to a Staff Member |
| | | |
| ### **SP Operator**
** ** | Irrigation Unit Management | View Irrigation Units |
| View Irrigation Units Plantings |
| Manage Irrigation Units Plantings |
| Site Operations | View Site Details |
| Party Management | Manage Own Customer Details |
| Water Ordering | View Water Account |
| Manage Water Account Details |
| View Water Orders |
| Manage Water Orders |
| View Rotations |
| View Maintenance Schedules |
| Billing | View Invoices |
| Messaging | Send a Message to a Planner |
| | Read Messages |
| | | |
| ### **Supervisor** | Irrigation Unit Management | Manage Irrigation Units Plantings Special Fields |
| Manage Crop Types |
| Party Management | View Staff Details |
| Water Ordering | View Plan Details |
| Manage Plans |
| Messaging | Send a Message to a Staff Member |
| | | |
| ### **System Administrator**
** ** | Irrigation Unit Management | Manage Irrigation Units Plantings Special Fields |
| Manage Crop Types |
| Party Management | Manage Customer Details |
| Manage Own Customer Details |
| Manage Customer Roles |
| View Staff Details |
| Manage Staff Details |
| Manage Own Staff Details |
| Manage Staff Roles |
| View Documents/Forms |
| Manage Documents/Forms |
| Messaging | Send a Message to a Staff Member |
| Read Communication Types |
| Manage Communication Types |
| Audit | View Party Account Audit Events |
| | | |
| ### **View Object**
** ** | Site Operations | View Site Notes |
| | View Site Details |
| | View Site Image |
| | View Meter Readings |
| Network Management | View Setflows |
| Water Ordering | View Water Account |
| View Water Orders |
| View Maintenance Schedules |
| Billing | View Invoices |
| | | |
| ### **View Property** | Water Ordering | View Water Account |
| Billing | View Invoices |