^ Name ^ Description ^ | System - HA node sync | Allow access to authenticate this user for HA sync via XMLRPC (admin privilege) | | User - Config: Deny Config Write | If present, ignores requests from this user to write config.xml. | | User - Notices: View | This user can view system notices. | | User - Notices: View and Clear | This user can view and clear system notices. | | User - Services: Captive Portal login | Indicates whether the user is able to login on the captive portal. | | User - System: Copy files to home directory (chrooted scp) | Indicates whether this user is allowed to copy files to the home directory via SCP/SFTP.Note: User - System - Copy files (scp) conflicts with this privilege.Warning: Manual chroot setup required, see /usr/local/etc/rc.d/scponlyc. | | User - System: SSH tunneling | Indicates whether the user is able to login for tunneling via SSH when they have no shell access. Note: User - System - Copy files (scp) and System: Copy files to home directory (chrooted scp) conflict with this privilege. | | User - VPN: IPsec xauth Dialin | Indicates whether the user is allowed to dial in via IPsec xauth (Note: Does not allow shell access, but may allow the user to create SSH tunnels) | | User - VPN: L2TP Dialin | Indicates whether the user is allowed to dial in via L2TP | | User - VPN: PPPOE Dialin | Indicates whether the user is allowed to dial in via PPPOE | | WebCfg - AJAX: Get Queue Stats | Allow access to the 'AJAX: Get Stats' page. | | WebCfg - AJAX: Get Service Providers | Allow access to the 'AJAX: Service Providers' page. | | WebCfg - AJAX: Get Stats | Allow access to the 'AJAX: Get Stats' page. | | WebCfg - Crash reporter | Uploads crash reports to pfSense and or deletes crash reports. | | WebCfg - Dashboard (all) | Allow access to all pages required for the dashboard. | | WebCfg - Dashboard widgets (direct access). | Allow direct access to all Dashboard widget pages, required for some widgets using AJAX. | | WebCfg - Diagnostics: ARP Table | Allow access to the 'Diagnostics: ARP Table' page. | | WebCfg - Diagnostics: Authentication | Allow access to the 'Diagnostics: Authentication' page. | | WebCfg - Diagnostics: Configuration History | Allow access to the 'Diagnostics: Configuration History' page. (admin privilege) | | WebCfg - Diagnostics: CPU Utilization | Allow access to the 'Diagnostics: CPU Utilization' page. | | WebCfg - Diagnostics: DNS Lookup | Allow access to the 'Diagnostics: DNS Lookup' page. | | WebCfg - Diagnostics: GEOM Mirrors | Allow access to the 'Diagnostics: GEOM Mirrors' page. | | WebCfg - Diagnostics: Halt system | Allow access to the 'Diagnostics: Halt system' page. | | WebCfg - Diagnostics: Interface Traffic | Allow access to the 'Diagnostics: Interface Traffic' page. | | WebCfg - Diagnostics: Limiter Info | Allows access to the 'Diagnostics: Limiter Info' page | | WebCfg - Diagnostics: NDP Table | Allow access to the 'Diagnostics: NDP Table' page. | | WebCfg - Diagnostics: Packet Capture | Allow access to the 'Diagnostics: Packet Capture' page. | | WebCfg - Diagnostics: pf Table IP addresses | Allow access to the 'Diagnostics: Tables' page. | | WebCfg - Diagnostics: pfInfo | Allows access to the 'Diagnostics: pfInfo' page | | WebCfg - Diagnostics: pfTop | Allows access to the 'Diagnostics: pfTop' page | | WebCfg - Diagnostics: Ping | Allow access to the 'Diagnostics: Ping' page. | | WebCfg - Diagnostics: Reboot System | Allow access to the 'Diagnostics: Reboot System' page. | | WebCfg - Diagnostics: Reset states | Allow access to the 'Diagnostics: Reset states' page. | | WebCfg - Diagnostics: Routing tables | Allow access to the 'Diagnostics: Routing tables' page. | | WebCfg - Diagnostics: S.M.A.R.T. Status | Allow access to the 'Diagnostics: S.M.A.R.T. Status' page. | | WebCfg - Diagnostics: Show Source Tracking | Allow access to the 'Diagnostics: Show Source Tracking' page. | | WebCfg - Diagnostics: Show States | Allow access to the 'Diagnostics: Show States' page. | | WebCfg - Diagnostics: Sockets | Allow access to the 'Diagnostics: Sockets' page. | | WebCfg - Diagnostics: States Summary | Allow access to the 'Diagnostics: States Summary' page. | | WebCfg - Diagnostics: System Activity | Allows access to the 'Diagnostics: System Activity' page | | WebCfg - Diagnostics: Test Port | Allow access to the 'Diagnostics: Test Port' page. | | WebCfg - Diagnostics: Traceroute | Allow access to the 'Diagnostics: Traceroute' page. | | WebCfg - Firewall: Alias: Edit | Allow access to the 'Firewall: Alias: Edit' page. | | WebCfg - Firewall: Alias: Import | Allow access to the 'Firewall: Alias: Import' page. | | WebCfg - Firewall: Aliases | Allow access to the 'Firewall: Aliases' page. | | WebCfg - Firewall: EasyRule add/status | Allow access to the 'Firewall: EasyRule' add/status page. | | WebCfg - Firewall: NAT: 1:1 | Allow access to the 'Firewall: NAT: 1:1' page. | | WebCfg - Firewall: NAT: 1:1: Edit | Allow access to the 'Firewall: NAT: 1:1: Edit' page. | | WebCfg - Firewall: NAT: NPt | Allow access to the 'Firewall: NAT: NPt' page. | | WebCfg - Firewall: NAT: NPt: Edit | Allow access to the 'Firewall: NAT: NPt: Edit' page. | | WebCfg - Firewall: NAT: Outbound | Allow access to the 'Firewall: NAT: Outbound' page. | | WebCfg - Firewall: NAT: Outbound: Edit | Allow access to the 'Firewall: NAT: Outbound: Edit' page. | | WebCfg - Firewall: NAT: Port Forward | Allow access to the 'Firewall: NAT: Port Forward' page. | | WebCfg - Firewall: NAT: Port Forward: Edit | Allow access to the 'Firewall: NAT: Port Forward: Edit' page. | | WebCfg - Firewall: Rules | Allow access to the 'Firewall: Rules' page. | | WebCfg - Firewall: Rules: Edit | Allow access to the 'Firewall: Rules: Edit' page. | | WebCfg - Firewall: Schedules | Allow access to the 'Firewall: Schedules' page. | | WebCfg - Firewall: Schedules: Edit | Allow access to the 'Firewall: Schedules: Edit' page. | | WebCfg - Firewall: Traffic Shaper | Allow access to the 'Firewall: Traffic Shaper' page. | | WebCfg - Firewall: Traffic Shaper: Limiters | Allow access to the 'Firewall: Traffic Shaper: Limiters' page. | | WebCfg - Firewall: Traffic Shaper: Queues | Allow access to the 'Firewall: Traffic Shaper: Queues' page. | | WebCfg - Firewall: Traffic Shaper: Wizard | Allow access to the 'Firewall: Traffic Shaper: Wizard' page. | | WebCfg - Firewall: Virtual IP Address: Edit | Allow access to the 'Firewall: Virtual IP Address: Edit' page. | | WebCfg - Firewall: Virtual IP Addresses | Allow access to the 'Firewall: Virtual IP Addresses' page. | | WebCfg - Help pages | Show all items on help menu and allow access to Help shortcut links | | WebCfg - Hidden: Detailed Status | Allow access to the 'Hidden: Detailed Status' page. | | WebCfg - Hidden: Upload Configuration | Allow access to the 'Hidden: Upload Configuration' page. | | WebCfg - Interfaces: Bridge | Allow access to the 'Interfaces: Bridge' page. | | WebCfg - Interfaces: Bridge edit | Allow access to the 'Interfaces: Bridge : Edit' page. | | WebCfg - Interfaces: GIF | Allow access to the 'Interfaces: GIF' page. | | WebCfg - Interfaces: GIF: Edit | Allow access to the 'Interfaces: GIF: Edit' page. | | WebCfg - Interfaces: GRE | Allow access to the 'Interfaces: GRE' page. | | WebCfg - Interfaces: GRE: Edit | Allow access to the 'Interfaces: GRE: Edit' page. | | WebCfg - Interfaces: Groups | Create interface groups | | WebCfg - Interfaces: Groups: Edit | Allow access to the 'Interfaces: Groups: Edit' page. | | WebCfg - Interfaces: Interface Assignments | Allow access to the 'Interfaces: Interface Assignments' page. | | WebCfg - Interfaces: LAGG: | Allow access to the 'Interfaces: LAGG' page. | | WebCfg - Interfaces: LAGG: Edit | Allow access to the 'Interfaces: LAGG: Edit' page. | | WebCfg - Interfaces: PPPs | Allow access to the 'Interfaces: PPPs' page. | | WebCfg - Interfaces: PPPs: Edit | Allow access to the 'Interfaces: PPPs: Edit' page. | | WebCfg - Interfaces: QinQ | Allow access to the 'Interfaces: QinQ' page. | | WebCfg - Interfaces: QinQ: Edit | Allow access to 'Interfaces: QinQ: Edit' page | | WebCfg - Interfaces: VLAN | Allow access to the 'Interfaces: VLAN' page. | | WebCfg - Interfaces: VLAN: Edit | Allow access to the 'Interfaces: VLAN: Edit' page. | | WebCfg - Interfaces: WAN | Allow access to the 'Interfaces' page. | | WebCfg - Interfaces: Wireless | Allow access to the 'Interfaces: Wireless' page. | | WebCfg - Interfaces: Wireless: Edit | Allow access to the 'Interfaces: Wireless: Edit' page. | | WebCfg - OpenVPN: Client Export Utility | Allow access to the OpenVPN: Client Export Utility page. | | WebCfg - OpenVPN: Client Specific Override | Allow access to the 'OpenVPN: Client Specific Override' page. | | WebCfg - OpenVPN: Clients | Allow access to the 'OpenVPN: Clients' page. | | WebCfg - OpenVPN: Servers | Allow access to the 'OpenVPN: Servers' page. | | WebCfg - Package: Edit | Allow access to the 'Package: Edit' page. | | WebCfg - Package: Settings | Allow access to the 'Package: Settings' page. | | WebCfg - pfSense wizard subsystem | Allow access to the 'pfSense wizard subsystem' page. | | WebCfg - Services: Auto Config Backup: Backup Now | Create a new auto config backup entry. | | WebCfg - Services: Auto Config Backup: Restore | Restore from auto config backup. | | WebCfg - Services: Auto Config Backup: Settings | Configure the auto config backup system. | | WebCfg - Services: Captive Portal | Allow access to the 'Services: Captive Portal' page. | | WebCfg - Services: Captive Portal Voucher Rolls | Allow access to the 'Services: Captive Portal Edit Voucher Rolls' page. | | WebCfg - Services: Captive Portal Vouchers | Allow access to the 'Services: Captive Portal Vouchers' page. | | WebCfg - Services: Captive Portal Zones | Allow access to the 'Services: Captive Portal Zones' page. | | WebCfg - Services: Captive Portal: Allowed Hostnames | Allow access to the 'Services: Captive Portal: Allowed Hostnames' page. | | WebCfg - Services: Captive Portal: Allowed IPs | Allow access to the 'Services: Captive Portal: Allowed IPs' page. | | WebCfg - Services: Captive Portal: Edit Allowed Hostnames | Allow access to the 'Services: Captive Portal: Edit Allowed Hostnames' page. | | WebCfg - Services: Captive Portal: Edit Allowed IPs | Allow access to the 'Services: Captive Portal: Edit Allowed IPs' page. | | WebCfg - Services: Captive Portal: Edit MAC Addresses | Allow access to the 'Services: Captive Portal: Edit MAC Addresses' page. | | WebCfg - Services: Captive Portal: Edit Zones | Allow access to the 'Services: Captive Portal: Edit Zones' page. | | WebCfg - Services: Captive Portal: File Manager | Allow access to the 'Services: Captive Portal: File Manager' page. | | WebCfg - Services: Captive Portal: Mac Addresses | Allow access to the 'Services: Captive Portal: Mac Addresses' page. | | WebCfg - Services: Check IP Service | Allow access to the 'Services: Check IP Service' page. | | WebCfg - Services: Check IP Service: Edit | Allow access to the 'Services: Check IP Service: Edit' page. | | WebCfg - Services: DHCP Relay | Allow access to the 'Services: DHCP Relay' page. | | WebCfg - Services: DHCP Server | Allow access to the 'Services: DHCP Server' page. | | WebCfg - Services: DHCP Server: Edit static mapping | Allow access to the 'Services: DHCP Server: Edit static mapping' page. | | WebCfg - Services: DHCPv6 Relay | Allow access to the 'Services: DHCPv6 Relay' page. | | WebCfg - Services: DHCPv6 Server | Allow access to the 'Services: DHCPv6 Server' page. | | WebCfg - Services: DHCPv6 Server: Edit static mapping | Allow access to the 'Services: DHCPv6 Server : Edit static mapping' page. | | WebCfg - Services: DNS Forwarder | Allow access to the 'Services: DNS Forwarder' page. | | WebCfg - Services: DNS Forwarder: Edit Domain Override | Allow access to the 'Services: DNS Forwarder: Edit Domain Override' page. | | WebCfg - Services: DNS Forwarder: Edit host | Allow access to the 'Services: DNS Forwarder: Edit host' page. | | WebCfg - Services: DNS Resolver | Allow access to the 'Services: DNS Resolver' page. | | WebCfg - Services: DNS Resolver: Access Lists | Allow access to the 'Services: DNS Resolver: Access Lists' page. | | WebCfg - Services: DNS Resolver: Advanced | Allow access to the 'Services: DNS Resolver: Advanced' page. | | WebCfg - Services: DNS Resolver: Edit Domain Override | Allow access to the 'Services: DNS Resolver: Edit Domain Override' page. | | WebCfg - Services: DNS Resolver: Edit host | Allow access to the 'Services: DNS Resolver: Edit host' page. | | WebCfg - Services: Dynamic DNS client | Allow access to the 'Services: Dynamic DNS client' page. | | WebCfg - Services: Dynamic DNS clients | Allow access to the 'Services: Dynamic DNS clients' page. | | WebCfg - Services: IGMP Proxy | Allow access to the 'Services: IGMP Proxy' page. | | WebCfg - Services: IGMP Proxy: Edit | Allow access to the 'Services: IGMP Proxy: Edit' page. | | WebCfg - Services: NTP ACL Settings | Allow access to the 'Services: NTP ACL Settings' page. | | WebCfg - Services: NTP PPS | Allow access to the 'Services: NTP PPS' page. | | WebCfg - Services: NTP Serial GPS | Allow access to the 'Services: NTP Serial GPS' page. | | WebCfg - Services: NTP Settings | Allow access to the 'Services: NTP Settings' page. | | WebCfg - Services: PPPoE Server | Allow access to the 'Services: PPPoE Server' page. | | WebCfg - Services: PPPoE Server: Edit | Allow access to the 'Services: PPPoE Server: Edit' page. | | WebCfg - Services: RFC 2136 Client: Edit | Allow access to the 'Services: RFC 2136 Client: Edit' page. | | WebCfg - Services: RFC 2136 Clients | Allow access to the 'Services: RFC 2136 Clients' page. | | WebCfg - Services: SNMP | Allow access to the 'Services: SNMP' page. | | WebCfg - Services: UPnP | Allow access to the 'Services: UPnP' page. | | WebCfg - Services: Wake-on-LAN | Allow access to the 'Services: Wake-on-LAN' page. | | WebCfg - Services: Wake-on-LAN: Edit | Allow access to the 'Services: Wake-on-LAN: Edit' page. | | WebCfg - Status: Captive Portal | Allow access to the 'Status: Captive Portal' page. | | WebCfg - Status: Captive Portal Voucher Rolls | Allow access to the 'Status: Captive Portal Voucher Rolls' page. | | WebCfg - Status: Captive Portal Vouchers | Allow access to the 'Status: Captive Portal Vouchers' page. | | WebCfg - Status: Captive Portal: Expire Vouchers | Allow access to the 'Status: Captive Portal: Expire Vouchers' page. | | WebCfg - Status: Captive Portal: Test Vouchers | Allow access to the 'Status: Captive Portal: Test Vouchers' page. | | WebCfg - Status: CARP | Allow access to the 'Status: CARP' page. | | WebCfg - Status: CPU load | Allow access to the 'Status: CPU load' page. | | WebCfg - Status: DHCP leases | Allow access to the 'Status: DHCP leases' page. | | WebCfg - Status: DHCPv6 leases | Allow access to the 'Status: DHCPv6 leases' page. | | WebCfg - Status: DNS Resolver | Allow access to the 'Status: DNS Resolver' page. | | WebCfg - Status: Filter Reload Status | Allow access to the 'Status: Filter Reload Status' page. | | WebCfg - Status: Gateway Groups | Allow access to the 'Status: Gateway Groups' page. | | WebCfg - Status: Gateways | Allow access to the 'Status: Gateways' page. | | WebCfg - Status: Interfaces | Allow access to the 'Status: Interfaces' page. | | WebCfg - Status: IPsec | Allow access to the 'Status: IPsec' page. | | WebCfg - Status: IPsec: Leases | Allow access to the 'Status: IPsec: Leases' page. | | WebCfg - Status: IPsec: SADs | Allow access to the 'Status: IPsec: SADs' page. | | WebCfg - Status: IPsec: SPD | Allow access to the 'Status: IPsec: SPD' page. | | WebCfg - Status: Logs: DHCP | Allow access to the 'Status: Logs: DHCP' page. | | WebCfg - Status: Logs: Firewall | Allow access to the 'Status: Logs: Firewall' page. | | WebCfg - Status: Logs: Gateways | Allow access to the 'Status: Logs: System: Gateways' page. | | WebCfg - Status: Logs: Resolver | Allow access to the 'Status: Logs: System: Resolver' page. | | WebCfg - Status: Logs: Settings | Allow access to the 'Status: Logs: Settings' page. | | WebCfg - Status: Logs: System | Allow access to the 'Status: System Logs: General' page. | | WebCfg - Status: Logs: VPN | Allow access to the 'Status: Logs: VPN' page. | | WebCfg - Status: Monitoring | Allow access to monitoring status page | | WebCfg - Status: NTP | Allow access to the 'Status: NTP' page. | | WebCfg - Status: OpenVPN | Allow access to the 'Status: OpenVPN' page. | | WebCfg - Status: Package logs | Allow access to the 'Status: Package logs' page. | | WebCfg - Status: Services | Allow access to the 'Status: Services' page. | | WebCfg - Status: System Logs: Firewall (Dynamic View) | Allow access to the 'Status: System Logs: Firewall (Dynamic View)' page | | WebCfg - Status: System Logs: Firewall Log Summary | Allow access to the 'Status: System Logs: Firewall Log Summary' page | | WebCfg - Status: System Logs: IPsec VPN | Allow access to the 'Status: System Logs: IPsec VPN' page. | | WebCfg - Status: System Logs: IPsec VPN | Allow access to the 'Status: System Logs: IPsec VPN' page. | | WebCfg - Status: System Logs: NTP | Allow access to the 'Status: System Logs: NTP' page. | | WebCfg - Status: System Logs: OpenVPN | Allow access to the 'Status: System Logs: OpenVPN' page. | | WebCfg - Status: System Logs: Portal Auth | Allow access to the 'Status: System Logs: Portal Auth' page. | | WebCfg - Status: System Logs: Routing | Allow access to the 'Status: System Logs: System: Routing' page. | | WebCfg - Status: System Logs: Wireless | Allow access to the 'Status: System Logs: System: Wireless' page. | | WebCfg - Status: Traffic Graph | Allow access to the 'Status: Traffic Graph' page. | | WebCfg - Status: Traffic Shaper: Queues | Allow access to the 'Status: Traffic Shaper: Queues' page. | | WebCfg - Status: UPnP Status | Allow access to the 'Status: UPnP Status' page. | | WebCfg - Status: Wireless | Allow access to the 'Status: Wireless' page. | | WebCfg - VPN: IPsec | Allow access to the 'VPN: IPsec' page. | | WebCfg - VPN: IPsec: Edit Phase 1 | Allow access to the 'VPN: IPsec: Edit Phase 1' page. | | WebCfg - VPN: IPsec: Edit Phase 2 | Allow access to the 'VPN: IPsec: Edit Phase 2' page. | | WebCfg - VPN: IPsec: Edit Pre-Shared Keys | Allow access to the 'VPN: IPsec: Edit Pre-Shared Keys' page. | | WebCfg - VPN: IPsec: Mobile | Allow access to the 'VPN: IPsec: Mobile' page. | | WebCfg - VPN: IPsec: Pre-Shared Keys List | Allow access to the 'VPN: IPsec: Pre-Shared Keys List' page. | | WebCfg - VPN: IPsec: Settings | Allow access to the 'VPN: IPsec: Settings' page. | | WebCfg - VPN: L2TP | Allow access to the 'VPN: L2TP' page. | | WebCfg - VPN: L2TP: Users | Allow access to the 'VPN: L2TP: Users' page. | | WebCfg - VPN: L2TP: Users: Edit | Allow access to the 'VPN: L2TP: Users: Edit' page. | | WebCfg - XMLRPC Interface Stats | Allow access to the 'XMLRPC Interface Stats' page. | | WebCfg - XMLRPC Library | Allow access to the 'XMLRPC Library' page. |