Skip to main content
The Apps page, available from the left-hand sidebar, is where you manage KODE OS. In Launchpad, KODE OS is the primary application and consolidates all products into a single building operating system. Your channel partner activates KODE OS and enables products across your building portfolio. Once activated, you can assign KODE OS to users and specify a role that defines their permissions and allowed actions for each KODE OS product.
Apps page showing KODE OS listed with Active status, activation date, URL, and number of assigned users

The Apps page displays KODE OS with its status, activation date, URL, and user count

Only users with the Admin role in Launchpad can assign KODE OS and respective application roles. Refer to the list of available Launchpad roles for client organizations.
Selecting KODE OS gives you access to three sections: Details, Roles, and Users.

Details

This section provides an overview of KODE OS for your organization and the products enabled across your building portfolio. Use the Details section to:
  • View KODE OS application information
  • View which products are enabled for your organization
KODE OS Details page displaying general information with name, activation date, users, URL, and status, followed by product cards showing Cloud BMS, FTT, FDD, OSS, BBI, AssetOps, Building Data Hub, EnerG, and Document Hub with the number of enabled buildings for each

The KODE OS Details section shows application information and enabled products with building counts

Roles

This section lists the KODE OS roles in your organization. You can create roles and define per-product Read and Write permissions for each role. Use the Roles section to:
  • View all KODE OS roles
  • Create new roles and edit or delete existing ones
  • Define per-product permissions for each role
See the roles section for more details on KODE OS roles.
KODE OS Roles page showing a table of roles including role name, description, and permissions count, with a search bar and Add Role button

The Roles page lists all KODE OS roles with their name, description, and number of permissions

Users

This section lists users in your organization and shows their KODE OS access and assigned role. You can assign KODE OS to users and change their role from here. Use the Users section to:
  • View which users have KODE OS access
  • View or change the role assigned to each user
  • Assign KODE OS to users who do not have access yet
KODE OS Users page showing users grouped by role with expandable accordion sections for View Only, SuperAdmin, and other roles, with a search bar and Assign User button

The Users page groups users by their assigned KODE OS role, with expandable sections for each role

KODE OS roles

KODE OS uses Role-Based Access Control (RBAC) to govern what each user can access. Instead of assigning permissions individually to each user, you assign permissions to roles. Users then inherit those permissions based on the role assigned to them. A role defines permissions at the product level, letting you scope access to specific capabilities without granting full access to every product.
A user in Launchpad can only have one KODE OS role assigned to them at a time.
Selecting a role from the Roles page opens its detail page, where you can view the role name, description, and the full list of assigned permissions organized by group.
Module access such as Building BI edit comes from the Cloud BMS role permissions. Building assignment also limits which sites appear after sign-in. Change the role or buildings on the user record when someone reports missing sites or tools.
Role detail page for Engineering Manager showing account details with name and description, and a permissions table with groups like Buildings, Areas, Dashboards, Datasources, Devices, and General with green Read and orange Write permission badges

A role detail page shows account details and a permissions table with color-coded Read and Write indicators per group

Three users have access to every product. Within each product, their role’s Read and Write permissions define what they can view and do.

Permission structure

Permissions are organized into modules and submodules that correspond to KODE OS product areas. Each submodule supports two permission types:
  • Read — enables users to view information or access specific features within a module (shown in green in the role editor)
  • Write — grants users the ability to modify, create, or delete data and configurations within a module (shown in orange in the role editor)
The permission modules include:
Dashboards, Datasources, Sharings, Templates
Pipelines, Schedule
General, Areas, Dashboards, Datasources, Devices, Miscellaneous, Points, Systems, Tags
General, Assets, Dashboard, Data Sources, Discovery Logs, Notification Policies, Schedule Logs, Schedules, Task Templates, Tasks
Admin, Audit, Connectivity, Dashboards, Deployment Audit, Energy Dashboard, FDD, FTT, Graphics, Marker Icons, Mass Write, MultiTrend, OSS, Schedules
General (Get users, Assign buildings to users, Create users, Delete users)

Create KODE OS roles

Follow the steps outlined below to create a new KODE OS role.
1

Open KODE OS in Apps

From the left-hand sidebar, open Apps and select KODE OS.
2

Go to the Roles page

Within KODE OS, navigate to the Roles page.
3

Create a new role

Click +Add Role to start creating a new role.
4

Configure role details

Enter a name and description for the role, then define permissions. You can also click Copy From Another Role to base the new role on an existing one and modify the permissions as needed.
Edit Role page showing name and description fields, a Copy From Another Role button, and a permissions section organized by product groups like BuildingBI and BuildingDataHub with Read and Write checkboxes for each submodule

The role editor shows General Information, a Copy From Another Role option, and per-product permissions with Read and Write checkboxes

See the permissions reference for more details.
5

Save the role

Click Save. The role is now available when assigning KODE OS to users.

Edit KODE OS roles

To edit an existing role:
1

Select the role

From the Roles page, select the role you want to edit. The role detail page opens.
2

Click Edit

Click Edit to open the role editor. Modify the name, description, or permissions as needed.
3

Save changes

Click Save to apply the changes. Click Cancel to discard them.
Some modules display a warning icon next to their name. Hover over the icon to see which permissions are connected and must be selected together.

Delete KODE OS roles

To delete a role, select it from the Roles page and click Delete on the role detail page. Confirm the deletion in the dialog.
You cannot delete a role if users are still assigned to it. Reassign or remove those users before deleting the role.

Assign KODE OS roles

Follow the steps outlined below to assign KODE OS and a role to a user.
1

Open KODE OS in Apps

From the left-hand sidebar, open Apps and select KODE OS.
2

Go to the Users page

Within KODE OS, navigate to the Users page.
3

Assign a KODE OS role to a user

Click +Assign User, select the users, and click +Assign User(s) to confirm.

Configure user management permissions

You can control which roles are allowed to manage users in KODE OS by configuring the Users > General permissions within a role. This determines who can view, create, assign, and delete users, and optionally restricts those actions with constraints.
1

Open the role editor

Navigate to Apps > KODE OS > Roles, select the role you want to configure, and click Edit.
2

Navigate to Users permissions

In the Permissions section, scroll down to Users > General. You see Read and Write permission options for user management.
Users General permissions showing Read permission with Get users and Constraints link, and Write permissions with Assign buildings to users, Create users, and Delete users checkboxes

The Users > General permissions section provides Read and Write controls for user management within KODE OS

3

Configure Read permissions

Check Get users under Read to allow users with this role to view other users. Click Constraints to restrict visibility to users assigned to the same buildings.
Get users constraints dialog with AssignedInSameBuilding checkbox selected

The Get users constraint limits visibility to users assigned to the same building

4

Configure Write permissions

Check the Write permissions to allow user management actions. Each permission can have constraints applied through the Manage Constraints link.
Users General section with all Write permissions checked including Assign buildings to users, Create users with Manage Constraints link, and Delete users with Manage Constraints link

Write permissions control user creation, deletion, and building assignment, with optional constraints for each

Toggle
Allows users with this role to assign buildings to other users.
Toggle
Allows users with this role to create new users. Click Manage Constraints to restrict which roles the created users can have.
Toggle
Allows users with this role to delete users. Click Manage Constraints to restrict which roles can be deleted.
5

Set role constraints (optional)

For Create users and Delete users, click Manage Constraints to specify which roles the current role is allowed to create or delete. Select the AllowedRoles constraint and choose the permitted roles from the dropdown.
Create users constraints dialog showing AllowedRoles constraint with IN operator and Engineering role selected

The Create users constraint restricts which roles this role can assign to new users

6

Save

Click Save to apply the user management permissions for this role.

Role constraints

Beyond Read and Write permissions, KODE OS roles can include constraints that limit scope and visibility. Constraints appear next to eligible permissions in the role editor. Common constraint examples include: A Super Admin role typically sees all buildings regardless of individual assignment. A role limited to assigned buildings requires building assignment before those sites appear in KODE OS.
Changes to a role apply to every user assigned to that role. Launchpad Admins can change their own KODE OS role when they need to validate permissions.
Last modified on August 19, 2026