34 lines
2.0 KiB
Markdown
34 lines
2.0 KiB
Markdown
# Intro
|
|
Roles will be split into two categories: **System Roles** and **Organizations Roles**.
|
|
System roles are global and apply to the entire system, while Organizations roles are specific to individual Organizations.
|
|
|
|
## System Roles
|
|
System roles are global and apply to the entire system. They include:
|
|
- **System Super Admin**: Has full access to all system features and settings. Can manage users, projects, organizations and applications. (SI)
|
|
- **System Admin**: Has access to most system features and settings. Can manage users, organizations, applications authorizations by projects. (BE)
|
|
- **System User**: Has limited access to system features and settings. Can view projects and applications, can manage own information, and organization where they are admin. (Others)
|
|
|
|
### System Super Admin
|
|
Get Access to the following with the following authorisations:
|
|
- **Users**: READ, CREATE, UPDATE, DELETE
|
|
- **Projects**: READ, CREATE, UPDATE, DELETE
|
|
- **Organizations**: READ, CREATE, UPDATE, DELETE
|
|
- **Applications**: READ, UPDATE
|
|
|
|
### System Admin
|
|
Get Access to the following with the following authorisations:
|
|
- **Users**: READ, CREATE, UPDATE, DELETE
|
|
- **Organizations**: READ, UPDATE
|
|
- **Applications**: READ
|
|
|
|
### System User
|
|
Get Access to the following with the following authorisations:
|
|
- **Users**: READ, UPDATE (own information only), READ (organization where they are admin), CREATE ( organization where they are admin), UPDATE (organization where they are admin), DELETE (organization where they are admin)
|
|
- **Projects**: READ ( of organization they are part of)
|
|
- **Organizations**: READ
|
|
- **Applications**: READ
|
|
|
|
## Organizations Roles
|
|
Organizations roles are specific to individual Organizations. They include:
|
|
- **Organization Admin**: Has full access to all organization features and settings. Can manage users of the organizations.
|
|
- **Organization User**: Has limited access to organization features and settings. Can view projects and applications, can manage own information |