Permissions and User Groups for ThingWorx Utilities

To help with the administration of each utility or task, a group has been created that contain users that have permissions to use administrative functions in each utility. The following tables describe the user groups and permissions for utilities and some specific actions.

User Group	Description	Utility
TW.RSM.RemoteServices	Users with access to the remote access actions such as File Transfer, Deployments, and Remote Connections. Users in this group will also be a member of member of the TW.RSM.RemoteAssets user group.	ThingWorx Remote Access and Control ThingWorx Software Content Management
TW.RSM.RemoteAssets	Users with access to view all TW.RSM.ManagedAsset assets.	ThingWorx Remote Access and Control ThingWorx Software Content Management
TW.RSM.Admin	Users with administrative access to ThingWorx Remote Access and Control and ThingWorx Software Content Management.	ThingWorx Remote Access and Control ThingWorx Software Content Management
PTC.BusinessProcessAdministrators	Users with permissions to cancel a workflow in the ThingWorx Workflow Manager and create and edit workflows in the ThingWorx Workflow Builder.	ThingWorx Workflow Builder ThingWorx Workflow Manager
PTC.BusinessProcessPerformers	Users can be selected as the performer of a user task in a workflow definition.	ThingWorx Workflow Builder ThingWorx Workflow Manager
PTC.Alert.Admin	Users with permissions to acknowledge alerts.	ThingWorx Alert Manager
PTC.ProductRelationshipAdministrators	Users with permissions to create, edit, and rename customers and assign assets to customers.	ThingWorx Product Relationship Manager
PTC.Asset.Admin	Users with permissions to create a new asset and edit properties for an existing asset in the ThingWorx Asset Manager. It also allows users to configure asset visibility.	ThingWorx Asset Manager

Utility or Task	Required Permissions
ThingWorx Composer	A user must have Create permission for entities, which is granted to users in the Administrators group or the Developers group.
Add/Remove Tile on ThingWorx Utilities Console	A user must have ServiceInvoke permission on the UpdateDataTableEntry service on the PTC.ConvergeConsole.DataTable DataTable thing.