Permissions matrix
Access in Mole Hash is decided per site: a user is a member of a site with a role, and the role is a list of permissions written as scope:action. Account owners (the person who created the site) and platform superusers bypass all checks. Permissions gate both API calls and what appears in the sidebar — a panel whose permission you lack is simply not listed.
Roles are managed in Admin → Role Management (see Roles & permissions); members are assigned a role in Site → Site Management → Access.
Permissions
| Permission | What it allows | Panels it unlocks |
|---|---|---|
site:view | See the site, its statistics and read-only panels | Fleet Manager, Production, PoW Market, Activity, Reports, Security, Workers, Operator Stats, Site Management |
site:update | Edit site settings, capacity, racks, transformers, scan ranges | Site Management (edit) |
site:delete | Delete the site | Site Management |
members:view | See the member list | Site Management → Access |
members:invite | Invite users by e-mail | Site Management → Access |
members:remove | Remove a member | Site Management → Access |
members:role_update | Change a member's role | Site Management → Access |
roles:view | See roles and their permissions | Role Management |
roles:manage | Create, edit and delete custom roles | Role Management |
miners:view | See miners, telemetry, pools | Machines, Miner page, Pools |
miners:create | Add miners manually | Machines |
miners:update | Edit a miner (Edit miner dialog), map miners to racks | Miner page, Site Map mapping |
miners:delete | Delete miners | Machines |
miners:control | Send commands (reboot, start/stop, power mode, pools, firmware) | Commands, Power & Curtailment, Firmware, bulk actions in Machines |
power:view | See power and energy data | Energy |
power:manage | Curtailments, power targets, power schedules | Power & Curtailment, Scheduled Tasks |
alerts:view | See issues, alerts and triggers | Issues, Alerts & Triggers |
alerts:manage | Create/edit triggers, acknowledge alerts; also receives the patrol e-mails (low voltage, power loss) | Alerts & Triggers |
tickets:view | See repair tickets | Tickets |
tickets:manage | Create/update tickets, use the repair console, plan technicians | Tickets, Repair, Planning |
audit:view | See the audit trail | Activity (audit entries) |
work_orders:view / work_orders:manage | Work orders attached to tickets | Tickets |
inventory:view / inventory:manage | Parts and stock | Inventory |
calendar:sync | Sync planning with an external calendar | Planning |
facility_map:view / facility_map:manage | See / edit the site layout | Site Map |
vlan:view / vlan:manage | Network ranges and VLANs | Site Management → Network |
discovery:view / discovery:manage | See / configure Mole agents and scheduled scans | Mole Agents, Scheduled Tasks |
social:post | Post to the social registry | Social portal |
revenue:view | See revenue and earnings figures | Earnings; revenue cards on Fleet Manager and Production; Earnings sidebar item |
Default roles
| Permission | Owner | Admin | Operator | Repair Technician | Viewer |
|---|---|---|---|---|---|
site:view | ✓ | ✓ | ✓ | ✓ | ✓ |
site:update | ✓ | ✓ | |||
site:delete | ✓ | ||||
members:view | ✓ | ✓ | ✓ | ||
members:invite / remove / role_update | ✓ | ✓ | |||
roles:view / roles:manage | ✓ | ✓ | |||
miners:view | ✓ | ✓ | ✓ | ✓ | ✓ |
miners:create / miners:delete | ✓ | ✓ | |||
miners:update | ✓ | ✓ | ✓ | ✓ | |
miners:control | ✓ | ✓ | ✓ | ||
power:view | ✓ | ✓ | ✓ | ✓ | |
power:manage | ✓ | ✓ | |||
alerts:view | ✓ | ✓ | ✓ | ✓ | ✓ |
alerts:manage | ✓ | ✓ | |||
tickets:view | ✓ | ✓ | ✓ | ✓ | ✓ |
tickets:manage | ✓ | ✓ | ✓ | ✓ | |
audit:view | ✓ | ✓ | |||
work_orders:view | ✓ | ✓ | ✓ | ✓ | ✓ |
work_orders:manage | ✓ | ✓ | ✓ | ✓ | |
inventory:view | ✓ | ✓ | ✓ | ✓ | ✓ |
inventory:manage | ✓ | ✓ | ✓ | ✓ | |
calendar:sync | ✓ | ✓ | ✓ | ✓ | |
facility_map:view | ✓ | ✓ | ✓ | ✓ | ✓ |
facility_map:manage | ✓ | ✓ | ✓ | ✓ | |
vlan:view | ✓ | ✓ | ✓ | ✓ | |
vlan:manage | ✓ | ✓ | ✓ | ||
discovery:view | ✓ | ✓ | ✓ | ✓ | |
discovery:manage | ✓ | ✓ | ✓ | ||
social:post | ✓ | ✓ | ✓ | ✓ | |
revenue:view | ✓ | ✓ | ✓ | ✓ |
Hiding revenue from a role
Remove revenue:view from a role (or create a custom role without it) and its members no longer see the Earnings panel, nor the revenue/earnings cards on Fleet Manager and Production. Everything else stays visible.
Platform-level flags
- Superuser (set in Admin → User Management by another superuser): bypasses every site permission, sees every site, can upload firmware packages and set any user's password.
- Account owner: the user who created a site. Owners can set the password of their sites' members (Site Management → Access → Password) without knowing the current one; they cannot do this to another account owner.