Create a custom profile

---

When the default profiles don’t fit, build your own profile from a chosen set of roles and scope it to specific applications or domains.

---

Create the profile

Use the Profiles tab > Add New Profile option:

Then assign the roles and/or applications/domains you want the profile to grant:

Select the roles

Click the edit icon in the Roles column to open the Set Roles for dialog, whose title shows the name of the profile you are assigning roles to:

• The Application Owner and Viewer Read Only roles are displayed as toggles at the top, each labelled with the component it belongs to (Application and Viewer). If you enable either of them, no other roles can be assigned and the roles under Other roles are disabled. A hint below the toggles states that any profile with at least one role has minimum viewer access, so a profile built only from roles under Other roles can still view results in CAST Imaging Viewer.
• Under Other roles, the remaining roles are grouped by component - Dashboards and Viewer - in collapsible panels. Each panel header shows how many of its roles are selected, for example 2 of 3 selected. Click Select all on the right of the header to select all the roles of that component, and click it again to deselect them.
• The Search roles or components field matches component names as well as role names, so searching for a component lists all of its roles.
• The total number of selected roles is displayed at the bottom left of the dialog, next to Cancel and Confirm.

Scope access by application or domain

Within any profile (custom or predefined) you can restrict access to specific applications and/or domains. By default only the Admin profile has access to all applications and domains, so for other profiles you must explicitly grant access - otherwise users will not see any data.

Grant access to applications without a domain

Applications that have not been assigned a domain are grouped under No Domain. Select No Domain in the Domains tab of the Applications/domains selector, where it is listed above the named domains, to grant the profile access to all of them:

• Everyone assigned the profile gains access to every application that has no domain, including applications onboarded or imported later.
• The choice is saved with the profile and is pre-selected when you reopen it.

Enabling Select all supersedes this choice, since it already grants access to every application.

Example: a profile that can add or import applications

To let users onboard new applications:

• Grant the Application Owner role
• Grant the All applications/domains permission