01 Roles EN

🇬🇧 English · 🇮🇷 فارسی

Roles & workflow

1. Operator (you)

Owner of the infrastructure:

1. Installs one panel (NodePanel) — the command center.
2. Installs one node (NodeAgent) on each server.
3. Registers each node in the panel with its master key and certificate.
4. Creates plans (quota, duration, max users).
5. Creates a customer then a subscription per buyer → receives a customer key (shown only once).
6. Hands the customer key + node gRPC address + node certificate to the buyer.

Don't mix the three keys:

Key	Created	Access
master key	at node install	full node control from the panel (HTTPS :8090).
core key (optional)	at install (generated by default)	manage ONLY the Xray core config from a PasarGuard panel (gRPC :62050).
customer key	when a subscription is created	only that customer's users, quota-enforced (gRPC :62050).

2. Customer (node buyer)

Has their own PasarGuard panel:

1. Adds your node like a normal node (gRPC address + certificate + customer key).
2. Creates end users in their panel; users land on the node under their tenant.
3. When their subscription quota/expiry runs out, their users are auto-disconnected.

The customer has no access to the core config; if their panel pushes config it is ignored (the node stays connected).

3. End user

Nothing to do with this system; just receives a subscription link from the customer. For the link to work, the customer's inbound settings must match the node's real inbound (see Connect from PasarGuard).

4. Sales bot (external)

• Uses the panel Bearer token to create customers/subscriptions and to suspend/resume/renew/topup.
• Uses signed webhooks (HMAC-SHA256) for usage/overage events to update the wallet.
• Details: API & Webhooks.