Role management
Role management is the mechanism responsible for ensuring that only authorized users consume protected platform resources. In other words, controlwhat a user can access and perform. Permissions are organized into domains, services, and resources that have actions. Thus, roles are assigned a set of permissions and users are related to these roles.
- Domain: it is the first level of organization of permissions and a way of grouping one or more services, being a logical and not a physical concept. For example, "platform" domain to indicate technology services, or "HCM" to indicate a module or management of a product;
- Service: is the second level of permissions, composed of elements that implement a set of functionality in a domain. For example: "cash flow" as responsible for the entry and exit of financial resources from a company;
- Resource: a resource is any computational item that requires some access control. For example: registrations, processes, reports, screens, etc.
- Action: is any operation that can be performed on a resource. For example: for a report, there are the actions of Create, Edit, Delete, Generate and Print. An action can be something very particular to a resource, as in the case of a Point Registration resource, which can present the Make Settlement action.
There are some native features and actions that are available when deploying the senior X Platform, however, there are no native or pre-defined roles available. Furthermore, in the concept of permission it is not possible to prevent a role from performing a certain action, but rather not to give it permission.
Example:Types of permissions
On the senior X Platform there are types of permissions that have the benefits of being scalable, flexible and auditable. Are they:
Managing roles
Roles are used to associate a user with a position within the organization or activity that will be performed. They are the essence of user management, as their architecture must support business rules at different levels of access permission.
Remember to configure a role so that you can apply it to multiple users. Prefer to create roles with functionalities that belong to the same domain, this way it will be simpler to manage your company's permissions.
Important
Only users who have administrator permission can make other users administrators (admin role).
It is not allowed to assign a role to your own user, the assignment must be granted by another user.
What do you need to do:
