Practical Internet of Things Security - Second Edition

Policy management 

CSPs support the definition of roles, the creation of groups, and the allocation of permissions to these objects. Watson IoT, for example, supports predefined security roles to enforce access controls across the cloud IoT implementation. Three categories exist: user roles, application roles, and gateway roles.

Devices themselves can have roles applied to them, and service roles such as backend-trusted can also be configured. Administrators can also define custom roles to meet their unique system needs. The following are the predefined security roles available within Watson IoT: 

Role type	Roles
User roles	Administrator Operator Developer Analyst Reader
Application roles	Standard Operations Backend-trusted