Skip to main content
F
Ferdinand_TW4-Participant
4-Participant
June 19, 2025
Solved

User group cannot see data and menus in MashUp Runtime

  • June 19, 2025
  • 2 replies
  • 669 views
Users belonging to a UserGroup cannot see data and Menus in MashUps.  
The userGroup is part of a organisation. The organisation has visibility of all components within the project, including mashups, things, menus, and everything existing in the project.

However, users in the not-Administrators groups only partially see the components at runtime. Attached is an example of the homepage:

FB_10925218_1-1750318277259.png

 

And this is how Administrators group see the same Mashup: 
FB_10925218_2-1750318277268.png

 

So, the userGroup don't see data and menus, but can see widgets, styleTheme and images. 
 
For comparison, I tried to check the permissions of the image and the menu, which are set exactly the same way (I am attaching a screenshot of only one for simplicity):
FB_10925218_3-1750318277272.png

 

 FB_10925218_4-1750318277274.png
Naturally, by adding the UserGroup to the Administrators group, they can see everything correctly, but this is not the solution.
Best answer by AdamK_93

Hi @Ferdinand_TW ,

 

You should not compare settings to an Administrative access. Administrators have all access over the platform, hence they do not need explicit permissions to run/view anything.

 

Based on your details, I would say you must explicitly need to grant Runtime Permissions to the "non-administrative" UserGroup you mentioned, to be able to execute services like "GetEffectiveMenu" on "LabMenu".

However I'm not sure whether you use a Service to execute it, or you directly added the Services to a mashup.

 

So here are some steps that I'd suggest:

 

  1. If you have a Helper Thing which executes the GetEffectiveMenu service on a specific menu (LabMenu), you must grant Execute Runtime permission to the "System" user on the LabMenu, becuase it is wrapped service, and Execute runtime permission to the UserGroup on the Helper Thing.
    just an example: AdamK_93_0-1750665735300.png

     

  2. If you have the LabMenu added as data service (direct service call) in a mashup, you must explicitly need to grant Execute runtime permission to the UserGroup you mentioned on that specific menu (and all the rest if needed)

 

If the specific users have Visibility over the entities, and only runtime errors are occured, then you need to grant execute runtime permissions on all the required Entities for the usergroups explicity. (or if wrapped, then only to the helper thing, and "System" user access to the subsequent 'wrapped' services)

 

Here you can find more details about the System user.

PTC.Support - System User (Wrapped Service Usage) 

 

Hope the above helps solving your case.

 

Regards,

Adam

2 replies

V
19-Tanzanite
Velkumar19-Tanzanite
19-Tanzanite
June 19, 2025

Hi @Ferdinand_TW 

 

Do you see any errors in the application log? If so, could you please share the application logs here?

 

We also need to grant permissions to the PlatformSubsystem for certain functionalities. You can find the exact issue in the application log.

 

/VR

F
Ferdinand_TW4-ParticipantAuthor
4-Participant
June 19, 2025

Thank you @Velkumar , here the logs

Ferdinand_TW_0-1750339188438.png

It seems that the user (DGer...) has not authorization for some services, both custom and native in thingworx. 
Navigating to one of this service, there are no authorizations set to some group or user for the single service. 
Why is this happening? 
Also adding access in runtime to the single service, the situation is the same. 

A
AdamK_9313-AquamarineAnswer
13-Aquamarine
June 23, 2025

Hi @Ferdinand_TW ,

 

You should not compare settings to an Administrative access. Administrators have all access over the platform, hence they do not need explicit permissions to run/view anything.

 

Based on your details, I would say you must explicitly need to grant Runtime Permissions to the "non-administrative" UserGroup you mentioned, to be able to execute services like "GetEffectiveMenu" on "LabMenu".

However I'm not sure whether you use a Service to execute it, or you directly added the Services to a mashup.

 

So here are some steps that I'd suggest:

 

  1. If you have a Helper Thing which executes the GetEffectiveMenu service on a specific menu (LabMenu), you must grant Execute Runtime permission to the "System" user on the LabMenu, becuase it is wrapped service, and Execute runtime permission to the UserGroup on the Helper Thing.
    just an example: AdamK_93_0-1750665735300.png

     

  2. If you have the LabMenu added as data service (direct service call) in a mashup, you must explicitly need to grant Execute runtime permission to the UserGroup you mentioned on that specific menu (and all the rest if needed)

 

If the specific users have Visibility over the entities, and only runtime errors are occured, then you need to grant execute runtime permissions on all the required Entities for the usergroups explicity. (or if wrapped, then only to the helper thing, and "System" user access to the subsequent 'wrapped' services)

 

Here you can find more details about the System user.

PTC.Support - System User (Wrapped Service Usage) 

 

Hope the above helps solving your case.

 

Regards,

Adam

    Terms & ConditionsCookie settingsAccessibility statement