Security > Users > Entity Permissions
  
Entity Permissions
The granularity of ThingWorx security allows you to set any Entity with unique permissions. Organizations and organization units can be assigned read, write, subscribe, etc. permissions within Visibility rights. Users and User Groups can be assigned read, write, subscribe, etc. permissions within the Run Time and Design Time rights.
Set Permissions for a Thing
1. In Composer, in the left navigation, select Permissions.
2. Select Entity in the left frame.
3. Select the Thing to manage (a search box is available in the top bar if there are many items listed).
4. Click Edit Permissions button.
5. Select one of the three options: Visibility, Run Time, or Design Time.
6. Use the picker to search Users or Groups and locate a user or group (for Run Time and Design Time) or the Organization picker (for visibility).
7. Set the rights as applicable for the selected Thing. Each can be set to Allow (check), Deny (X), or Inherit (organizational chart).
8. Repeat for any entities, organizational units, or permissions to be edited.
9. Click Save.
* 
The Remove button allows you to terminate all rights of a selected user, group, organization, organizational unit from the selected item.
* 
The Bulk Set button allows you to apply a set of permissions to many users simultaneously. Use the check boxes to select users or user groups to update, then click Bulk Set. Set the appropriate rights in the Bulk Set dialog and click Done.
Run Time Override Permissions
It is possible to restrict permissions on very specific items or situations beyond the permission sets that generally apply. Follow these steps to set up an exception or override on standard permission sets.
1. Follow steps 1–4 above to access the user or group to override.
2. Select Run Time from the top bar.
3. In the Property, Service, or Event Overrides area; click the plus.
4. Choose a category or expand the tree to locate and select the item on which to set the override.
5. Use the picker to search Users or Groups and locate a user or group.
6. Set the rights for Property Read, Property Write, and others as applicable to Allow (check), Deny (X), or Inherit (organizational chart).
7. Repeat these steps for as many overrides as desired for the active item.
8. Click Save.
* 
The Bulk Set button allows you to apply a set of permissions to many users or groups under a single aspect simultaneously. Use the check boxes to select users and groups to update, then click Bulk Set. Set the appropriate rights in the Bulk Set dialog and click Done.
Entity Instance Permissions
Thing Templates and Thing Shapes have permissions on two levels: the thing directly or ALL things based on the Thing Shape or Thing Template during run time operations. You can toggle between the Entity and Entity Instances using the icon.