Hierarchy of Permissions and Roles

Four Levels of Roles

Every company has different kinds of users with different responsibilities and widely varying security requirements. To enable you to create roles with permissions that correspond to your data and user environment, Iasta SmartSource provides a hierarchy of roles that consists of four levels:

    1. System-Wide: Users are assigned a system-wide role when the user is created in the Companies and Users area. Permissions in system-wide roles apply to features, functions, and objects throughout the subdomain.
    2. Project: Each project has a set of assigned users that are called project attendees. Each attendee (user) on the project team is assigned a role for that project. In this way you can assign a user to a project management role for one project without giving them all the project management permissions for all projects.
    3. Survey: A project can include multiple surveys. Each survey has its own team of assigned users called survey attendees. Each survey attendee is assigned a role for that survey which allows you to assign survey evaluation roles to different internal subject matter experts for different surveys.
    4. Contract: Each contract has a set of assigned users called contract attendees. Each attendee (user) on the contract is assigned a role for that specific contract. In this way you can assign a user to a contract administrator role for one contract without giving contract administration permissions for all contracts.

As you move down the hierarchy of roles, the scope of the permissions decreases as it becomes more granular. In some cases, the same permission is available at all levels but the scope of the permission is radically different.

Initial Roles provided by Iasta SmartSource

Iasta SmartSource generally creates the following commonly used roles with logical sets of permissions for new subdomains:

Administrators of the subdomain can modify or delete the roles provided by Iasta SmartSource as well as create new roles.

Related Topics:

Different Set of Permissions Available at Each Level

Default Roles