IAM scopes/Emedgene roles

In Emedgene, the smallest unit of access control is an Emedgene role in legacy Emedgene environments and an IAM scope in Illumina environments. Each IAM scope corresponds directly to an Emedgene role, both defining the same set of access permissions.

The table below lists IAM scopes / Emedgene roles and maps each of them to the predefined v38.0 IAM roles:

• Director (+v38)

• Full Access User (+v38)

• Analyst (+v38)

• IT Team (+v38)

IAM scope / Emedgene role	Description	v38.0 IAM roles
A
Acmg Tags	Allows the user to review ACMG classification	Director (+v38) Full Access User (+v38) Analyst (+v38)
Acmg Tags Edit	Allows the user to modify ACMG classification	Director (+v38) Full Access User (+v38) Analyst (+v38)
Add New Test	Allows the user to create a case	Director (+v38) Full Access User (+v38) Analyst (+v38)
Apidocs	Allows the user to view API docs	Full Access User (+v38) IT Team (+v38)
Auto Analysis	Allows the user to view the AI Shortlist prioritization results	Director (+v38) Full Access User (+v38) Analyst (+v38)
C
Candidate Compound With	Allows the user to merge and split compound variants	Director (+v38) Full Access User (+v38) Analyst (+v38)
Change Finalized Test Status	Allows the user to change the case status from "Finalized"	Director (+v38) Full Access User (+v38) Analyst (+v38)
Check Preset	Allows the user to mark presets as reviewed	Director (+v38) Full Access User (+v38) Analyst (+v38)
Comment	Allows the user to leave comments in the case activity log	Director (+v38) Full Access User (+v38) Analyst (+v38)
Comment Delete	Allows the user to delete comments in the case activity log	Director (+v38) Full Access User (+v38)
Create Custom Preset Group	Allows the user to create a custom filter preset group	Director (+v38) Full Access User (+v38) Analyst (+v38)
Create Report	Allows the user to create a report template	Director (+v38) Full Access User (+v38)
Create Variant	Allows the user to manually add variants to a case	Director (+v38) Full Access User (+v38) Analyst (+v38)
D
Detailed Version	Allows the user to view all services versions	Full Access User (+v38) IT Team (+v38)
Developer	Allows the user to access developer settings	Full Access User (+v38) IT Team (+v38)
Download	Allows the user to download files from the Lab tab	Director (+v38) Full Access User (+v38) Analyst (+v38)
Due Date	Allows the user to modify the case due date	Director (+v38) Full Access User (+v38) Analyst (+v38)
E
Edit Case Labels	Allows the user to apply and remove labels from a case	Director (+v38) Full Access User (+v38) Analyst (+v38)
Edit Test	Allows the user to modify case information	Director (+v38) Full Access User (+v38) Analyst (+v38)
Evidence	Allows the user to access the Evidence page	Director (+v38) Full Access User (+v38) Analyst (+v38)
Evidence Edit	Allows the user to edit the Evidence page	Director (+v38) Full Access User (+v38) Analyst (+v38)
Evidence Generate	Allows the user to generate initial evidence	Director (+v38) Full Access User (+v38) Analyst (+v38)
Evidence Pathogenicity Edit	Allows the user to assign, change, and remove variant pathogenicity	Director (+v38) Full Access User (+v38) Analyst (+v38)
Evidence Text Edit	Allows the user to add, modify, and remove variant interpretation notes	Director (+v38) Full Access User (+v38) Analyst (+v38)
G
Gene Lists Read Only	Allows the user to view the list of gene lists in Settings	Director (+v38) Full Access User (+v38) Analyst (+v38)
gnomAD Genome	Allows the user to view gnomAD Genome annotations	Director (+v38) Full Access User (+v38) Analyst (+v38)
K
Kms	Allows the user to access Curate	Director (+v38) Full Access User (+v38) Analyst (+v38)
Kms Create Gene	Allows the user to add a gene in Curate	Director (+v38) Full Access User (+v38) Analyst (+v38)
Kms Create Variant	Allows the user to add a variant in Curate	Director (+v38) Full Access User (+v38) Analyst (+v38)
Kms Delete Variant	Allows the user to delete a variant from Curate	Director (+v38) Full Access User (+v38)
Kms Export	Allows the user to: Export variants from Analyze to Curate Update the variant record in Curate with information from the current case	Director (+v38) Full Access User (+v38) Analyst (+v38)
Kms Export Data	Allows the user to export gene and variant data from Curate	Director (+v38) Full Access User (+v38)
Kms Import Network Variant	Allows the user to import network variants to Curate	Director (+v38) Full Access User (+v38)
Kms Update Acmg	Allows the user to modify ACMG classification in Curate	Director (+v38) Full Access User (+v38) Analyst (+v38)
Kms Update Disease Id	Allows the user to change a gene-related disease in Curate	Director (+v38) Full Access User (+v38) Analyst (+v38)
Kms Update Gene Interpretation	Allows the user to add, modify, and remove gene interpretation notes in Curate	Director (+v38) Full Access User (+v38) Analyst (+v38)
Kms Update Gene Note	Allows the user to add, modify, and remove gene notes in Curate	Director (+v38) Full Access User (+v38) Analyst (+v38)
Kms Update Gene Transcript Ref Sequence	Allows the user to update a gene selected transcript in Curate	Director (+v38) Full Access User (+v38)
Kms Update Interpretation	Allows the user to add, modify, and remove variant interpretation notes in Curate	Director (+v38) Full Access User (+v38)
Kms Update Note	Allows the user to add, modify, and remove variant interpretation notes in Curate	Director (+v38) Full Access User (+v38)
Kms Update Pathogenicity	Allows the user to assign, change, and remove variant pathogenicity in Curate	Director (+v38) Full Access User (+v38) Analyst (+v38)
Kms Update Transcript	Allows the user to update variant transcript in Curate	Director (+v38) Full Access User (+v38) Analyst (+v38)
KMS Update Versions	Allows the user to update variant versions in Curate	Full Access User (+v38)
L
Load Bam Igv	Allows the user to load alignment files from a case under review to the desktop IGV application	Director (+v38) Full Access User (+v38) Analyst (+v38)
M
Manage AI ACMG	Allows the user to manage ACMG configuration	Director (+v38) Full Access User (+v38)
Manage Auto Analysis Tier	Allows the user to update AI Shortlist mode	Director (+v38) Full Access User (+v38)
Manage Case Default Page	Allows the user to manage the default Case page	Director (+v38) Full Access User (+v38)
Manage Case Identifier	Allows the user to manage case identifiers	Director (+v38) Full Access User (+v38)
Manage Case Participants	Allows the user to add or remove case participants	Director (+v38) Full Access User (+v38)
Manage Column Order	Allows the user to manage analysis column order setting	Director (+v38) Full Access User (+v38)
Manage Empty Trash	Allows the user to empty the cases trash bin	Director (+v38) Full Access User (+v38)
Manage Encryption Settings	Allows the user to configure encryption using own key from KMS and add searchable fields	Full Access User (+v38)
Manage Gene List Visibility	Allows the user to manage gene list visibility	Director (+v38) Full Access User (+v38)
Manage Gene Lists	Allows the user to manage gene lists	Director (+v38) Full Access User (+v38)
Manage Kit Bed	Allows the user to manage kits and bed uploads	Director (+v38) Full Access User (+v38)
Manage Labels	Allows the user to manage labels	Director (+v38) Full Access User (+v38)
Manage Multiple Tags	Allows the user to enable multiple tagging	Director (+v38) Full Access User (+v38)
Manage Organization Dbs	Allows the user to manage organization databases	Director (+v38) Full Access User (+v38)
Manage Platform Version	Allows the user to manage platform version	Director (+v38) Full Access User (+v38)
Manage Poc	Allows the user to update POC	Director (+v38) Full Access User (+v38)
Manage Pon	Allows the user to add or delete PONs	Director (+v38) Full Access User (+v38)
Manage Pipeline Versions	Allows the user to update pipeline version	Director (+v38) Full Access User (+v38)
Manage Quality Parameters	Allows the user to manage sample quality configurations	Director (+v38) Full Access User (+v38)
Manage Report Timestamp	Allows the user to manage report timestamp	Director (+v38) Full Access User (+v38)
Manage S3 Credentials	Allows the user to manage organization's S3 credentials	Director (+v38) Full Access User (+v38)
Manage Sv Annotation	Allows the user to manage SV annotation thresholds	Director (+v38) Full Access User (+v38)
Manage Test Presets	Allows the user to create presets from gene lists	Director (+v38) Full Access User (+v38) Analyst (+v38)
Manage Url Pattern	Allows the user to manage organization URL pattern	Director (+v38) Full Access User (+v38)
Manager	Organizational admin (manager) role	Director (+v38) Full Access User (+v38)
Manager Edit Variant Tags	Allows the user to manage variants tag	Director (+v38) Full Access User (+v38)
Manager Support Access	Allows the user to enable or disable support access in the Management tab	Director (+v38) Full Access User (+v38)
N
Network	Allows the user to see available networks, request to join, etc.	Director (+v38) Full Access User (+v38)
Network Create	Allows the user to create new network	Director (+v38) Full Access User (+v38)
Network Manage	Allows the user to manage network	Director (+v38) Full Access User (+v38)
P
Pheno Score Col	Allows the user to see the Phenomatch score in the Analysis table	Director (+v38) Full Access User (+v38) Analyst (+v38)
Phenomatcher	Allows the user to filter by phenotipic match	Director (+v38) Full Access User (+v38) Analyst (+v38)
Preset Create	Allows the user to create presets from analyze and settings page	Director (+v38) Full Access User (+v38) Analyst (+v38)
Preset Delete	Allows the user to delete a preset from the list of available Filterset in a preset group	Director (+v38) Full Access User (+v38) Analyst (+v38)
Preset Group Create	Allows the user to delete a preset from the list of available Filterset in a preset group	Director (+v38) Full Access User (+v38) Analyst (+v38)
Preset Group Default	Allows the user to assign a default preset group	Director (+v38) Full Access User (+v38)
Preset Group Download	Allows the user to download a legacy preset group JSON file	Director (+v38) Full Access User (+v38) Analyst (+v38)
Preset Group Hide	Allows the user to hide a preset group	Director (+v38) Full Access User (+v38) Analyst (+v38)
Preset Group Revert	Allows the user to revert a migrated preset group	Director (+v38) Full Access User (+v38) Analyst (+v38)
Preset Group Upload	Allows the user to upload a JSON file to the create new preset group	Director (+v38) Full Access User (+v38) Analyst (+v38)
Preset Lock	Allows the user to lock and unlock of a preset	Director (+v38) Full Access User (+v38)
Preset Manage	Allows the user to view/edit a preset in JSON format	Director (+v38) Full Access User (+v38)
R
Re Analysis Filter	Allows the user to see reanalysis candidates	Director (+v38) Full Access User (+v38) Analyst (+v38)
Re Upload Tab	Allows the user to re-upload files	Director (+v38) Full Access User (+v38) Analyst (+v38)
Render Template	Allows the user to preview a report template	Director (+v38) Full Access User (+v38)
Report	Allows the user to download a report file	Director (+v38) Full Access User (+v38) Analyst (+v38)
Report Preview	Allows the user to review a report in a case that has not been finalized yet	Director (+v38) Full Access User (+v38) Analyst (+v38)
S
Sanger Edit	Allows the user to mark variant for Sanger sequencing confirmation	Director (+v38) Full Access User (+v38) Analyst (+v38)
Storage Provider	Allows the user to manage storage providers	Director (+v38) Full Access User (+v38) IT Team (+v38)
T
Tag Variant	Allows the user to tag a variant	Director (+v38) Full Access User (+v38) Analyst (+v38)
Test Status	Allows the user to update test status	Director (+v38) Full Access User (+v38) Analyst (+v38)
Test Status Move To Trash	Allows the user to change test status to Move to Trash	Director (+v38) Full Access User (+v38)
Test Status To Finalized	Allows the user to change case status to Finalized	Director (+v38) Full Access User (+v38)
Transcript Edit	Allows the user to change the default transcript for a variant	Director (+v38) Full Access User (+v38) Analyst (+v38)
U
Unknown Phenomatch	Allows the user to access the Phenomatch with Unknown filter	Director (+v38) Full Access User (+v38) Analyst (+v38)
Upload	Allows the user to upload sample files	Director (+v38) Full Access User (+v38) Analyst (+v38)
User	Regular user role	Director (+v38) Full Access User (+v38) Analyst (+v38)
User Management	Allows the user to manage user access	Director (+v38) Full Access User (+v38)
User Read	Grants the user access to organizational data	Director (+v38) Full Access User (+v38) Analyst (+v38)
User Rerun Case	Allows the user to rerun cases	Director (+v38) Full Access User (+v38) Analyst (+v38)
V
Versions Tab	Allows the user to access the Versions tab	Director (+v38) Full Access User (+v38) Analyst (+v38)