# Data Watcher users

In Data Watcher, three types of users must be configured:

* Superusers
* Administrators
* Simple Users

#### Superusers

Data One and Data Watcher have the same Superusers!

#### Administrators

{% hint style="danger" %}
You must be a **Superuser** to configure Data Watcher Administrators!
{% endhint %}

To configure a **Data Watcher Administrator** follow these steps:

1. Go to **Setup** → **Users & Groups**.
2. Go to the **Internal Users** tab and click the **New User** button.
3. In the dialog window, fill in the edit boxes to create your user.
4. In the **GROUPS** edit box, select the group of Data Watcher Administrators to which your user must belong. If it does not exist, you must create it – see details below.
5. Go to the **Permissions** tab and assign Read **CONFIG** permission and Read + Write **DATAWATCHER** permissions. To assign permissions, switch the toggle button to ON.\
   Starting from TF8, new permissions have been added for Data Watcher when it is in a bundle with Data Mover. See permissions starting with DW on the [Creating internal users](/data-mover-1.21/security/users-and-groups/create-internal-users.md) page. To ensure compatibility with earlier versions of the software, the DATAWATCHER permission remains in the list and is only overwritten if at least one permission from the new list (i.e. the one starting with DW) is selected.\
   To detect permissions quickly, you can use the filter at the top of the window.
6. Click the **SAVE** button to confirm.

You do not have an **Internal Group for your Data Watcher Administrators**? Follow these steps to configure it:

1. Go to **Setup** → **Users & Groups**.
2. Go to the **Internal Groups** tab and click the **New Group** button.
3. In the dialog window, assign a name to the Group and select the User or Users that will belong to it.
4. Go to the **Permissions** tab and assign Read **CONFIG** permission and Read + Write **Data Watcher** permissions. To assign permissions, switch the toggle button to ON.
5. Click the **SAVE** button to confirm.

Once you have the Users and their Group ready, you **must run the `./dwt.sh -globcfg` command** to add the group to the `security.admin.groups`. You have successfully created your Data Watcher Administrator users.

As Administrators, the users will not have limitations in using Data Watcher and will access the Cut-off calendars and Dataflow Attributes sections as well.

#### Simple Users

You can configure **Data Watcher Simple Users** by following these steps:

1. As Superuser, go to **Setup** → **Users & Groups** and create a **New User** with Read **CONFIG** permission and Read + Write **DATAWATCHER** permissions.
2. The user must belong to a PRIMEUR Data Watcher Group of Users that must have the same permissions as the Users.

To check that the configuration is correct, log into PRIMEUR Data One with the newly created user. To check that access is limited to *simple user*, verify that the Cut-off calendars and Dataflow Attributes cards are not listed in the Setup section.

To sum up, these are the **groups**, **permissions** and **commands** that the 2 different users must have:

| APPLICATION Section                  | PRIMEUR DATA WATCHER ADMIN USER                                                                                     | PRIMEUR DATA WATCHER SIMPLE USER                                                                                 |
| ------------------------------------ | ------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------- |
| PRIMEUR DATA ONE Permissions         | <p>read CONFIG</p><p>read + write DATAWATCHER</p>                                                                   | <p>read CONFIG</p><p>read + write DATAWATCHER</p>                                                                |
| <p>PRIMEUR DATA ONE</p><p>Groups</p> | <p>PRIMEUR DATA WATCHER Administrators</p><p>With permissions:</p><p>read CONFIG</p><p>read + write DATAWATCHER</p> | <p>PRIMEUR DATA WATCHER</p><p>Users</p><p>With permissions:</p><p>read CONFIG</p><p>read + write DATAWATCHER</p> |


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.primeur.com/data-watcher-1.21/troubleshooting/data-watcher-users.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.