diff --git a/docs/Role_Hierarchy.md b/docs/Role_Hierarchy.md new file mode 100644 index 0000000..2dfb715 --- /dev/null +++ b/docs/Role_Hierarchy.md @@ -0,0 +1,34 @@ +# Intro +Roles will be split into two categories: **System Roles** and **Organizations Roles**. +System roles are global and apply to the entire system, while Organizations roles are specific to individual Organizations. + +## System Roles +System roles are global and apply to the entire system. They include: +- **System Super Admin**: Has full access to all system features and settings. Can manage users, projects, organizations and applications. (SI) +- **System Admin**: Has access to most system features and settings. Can manage users, organizations, applications authorizations by projects. (BE) +- **System User**: Has limited access to system features and settings. Can view projects and applications, can manage own information, and organization where they are admin. (Others) + +### System Super Admin +Get Access to the following with the following authorisations: +- **Users**: READ, CREATE, UPDATE, DELETE +- **Projects**: READ, CREATE, UPDATE, DELETE +- **Organizations**: READ, CREATE, UPDATE, DELETE +- **Applications**: READ, UPDATE + +### System Admin +Get Access to the following with the following authorisations: +- **Users**: READ, CREATE, UPDATE, DELETE +- **Organizations**: READ, UPDATE +- **Applications**: READ + +### System User +Get Access to the following with the following authorisations: +- **Users**: READ, UPDATE (own information only), READ (organization where they are admin), CREATE ( organization where they are admin), UPDATE (organization where they are admin), DELETE (organization where they are admin) +- **Projects**: READ ( of organization they are part of) +- **Organizations**: READ +- **Applications**: READ + +## Organizations Roles +Organizations roles are specific to individual Organizations. They include: +- **Organization Admin**: Has full access to all organization features and settings. Can manage users of the organizations. +- **Organization User**: Has limited access to organization features and settings. Can view projects and applications, can manage own information \ No newline at end of file