Easy_solution/docs/Role_Hierarchy.md

Intro

Roles will be split into two categories: System Roles and Organizations Roles. System roles are global and apply to the entire system, while Organizations roles are specific to individual Organizations.

System Roles

System roles are global and apply to the entire system. They include:

• System Super Admin: Has full access to all system features and settings. Can manage users, projects, organizations and applications. (SI)
• System Admin: Has access to most system features and settings. Can manage users, organizations, applications authorizations by projects. (BE)
• System User: Has limited access to system features and settings. Can view projects and applications, can manage own information, and organization where they are admin. (Others)

System Super Admin

Get Access to the following with the following authorisations:

• Users: READ, CREATE, UPDATE, DELETE
• Projects: READ, CREATE, UPDATE, DELETE
• Organizations: READ, CREATE, UPDATE, DELETE
• Applications: READ, UPDATE

System Admin

Get Access to the following with the following authorisations:

• Users: READ, CREATE, UPDATE, DELETE
• Organizations: READ, UPDATE
• Applications: READ

System User

Get Access to the following with the following authorisations:

• Users: READ, UPDATE (own information only), READ (organization where they are admin), CREATE ( organization where they are admin), UPDATE (organization where they are admin), DELETE (organization where they are admin)
• Projects: READ ( of organization they are part of)
• Organizations: READ
• Applications: READ

Organizations Roles

Organizations roles are specific to individual Organizations. They include:

• Organization Admin: Has full access to all organization features and settings. Can manage users of the organizations.
• Organization User: Has limited access to organization features and settings. Can view projects and applications, can manage own information