Users & Roles

Kener uses role-based access control (RBAC) to manage who can do what inside the dashboard. Every user is assigned one or more roles, and every role carries a set of granular permissions.

​

Owner account

The first user created during initial setup is automatically designated as the owner. The owner account has two permanent constraints enforced at the database and controller level:

• The owner is always assigned the admin role and cannot be removed from it.
• The owner account cannot be deactivated.

These restrictions prevent an instance from being left in an unmanageable state.

​

Built-in roles

Kener ships with three readonly built-in roles. Their names, IDs, and permission sets are fixed and cannot be edited or deleted.

​

Custom roles

You can create custom roles with any combination of permissions. Role ID rules: lowercase letters, numbers, underscores, and hyphens only (e.g. viewer, ops_team). The IDs admin, editor, and member are reserved.

​

Creating a role

​

Editing a role

Click the pencil icon next to any custom role to change its name or toggle its status between ACTIVE and INACTIVE. Inactive roles cannot be assigned to users.

​

Deleting a role

Click the trash icon next to a custom role. You will be asked what to do with users currently assigned to that role:

• Remove assignments — the users lose this role but keep any other roles they have.
• Migrate to another role — all users in the deleted role are moved to the target role you select. The target role must be active.

​

Permissions reference

Each permission controls a specific set of API actions. Use the accordions below to see what each permission grants.

Monitors

Permission ID	What it grants
monitors.read	View monitors and monitoring data
monitors.write	Create, update, delete, and clone monitors

Incidents

Permission ID	What it grants
incidents.read	View incidents and comments
incidents.write	Create, update, and delete incidents and comments

Maintenances

Permission ID	What it grants
maintenances.read	View maintenances and events
maintenances.write	Create, update, and delete maintenances and events

Pages

Permission ID	What it grants
pages.read	View pages
pages.write	Create, update, and delete pages

Triggers

Permission ID	What it grants
triggers.read	View triggers
triggers.write	Create, update, delete, and test triggers

Alerts

Permission ID	What it grants
alerts.read	View alert configurations and alert history
alerts.write	Create, update, and delete alert configurations

API Keys

Permission ID	What it grants
api_keys.read	View API keys
api_keys.write	Create and update API keys
api_keys.delete	Delete API keys

Users

Permission ID	What it grants
users.read	View users
users.write	Manage users, invitations, and verification

Roles

Permission ID	What it grants
roles.read	View roles, permissions, and user assignments
roles.write	Create, update, and delete roles
roles.assign_permissions	Add and remove permissions from roles
roles.assign_users	Add and remove users to and from roles

Settings

Permission ID	What it grants
settings.read	View site settings and subscriptions config
settings.write	Update site settings and subscriptions config

Subscribers

Permission ID	What it grants
subscribers.read	View subscribers
subscribers.write	Manage subscribers and subscriptions

Email Templates

Permission ID	What it grants
email_templates.read	View email templates
email_templates.write	Update email templates

Images

Permission ID	What it grants
images.write	Upload and delete images

​

Assigning permissions to a role

​

Inviting users

If an invited user never sets their password, you can resend the invitation from their settings panel (click the gear icon next to the user in the table).

​

Managing existing users

Users are listed in the Manage → Users table with columns for Name, Email, Verified status, Role(s), and Active status. You can filter between Active and Inactive users using the toggle at the top of the page. Click the gear icon on any user (other than yourself) to open the settings panel. You need the users.write permission to see this button.

​

Assigning users to roles from the Roles page

You can also manage the membership of a specific role from Manage → Roles by clicking the Users button on the role row. The panel shows all current members and lets you add or remove users, provided you have the roles.assign_users permission.