Overview
In Vince Live, we have two types of users: Admins and Regular Users. Admins have complete access and do not require role assignments for permissions. Regular Users, on the other hand, need roles assigned by Admins to gain access to specific resources and actions within the system. This document outlines the process for creating and managing roles, assigning permissions, and the impact on user access.
1. User Types
- Admins:
- Have complete access to all resources and actions within the application.
- Do not require assigned roles for permissions.
- Regular Users:
- Require roles assigned by Admins to gain access to specific resources and actions.
- Access is based on the permissions associated with their assigned roles.
2. Role Management
- Creating Roles:
- Navigate to the Security screen.
- Click on the "Roles" section.
- Click the "Create Role" button.
- In the "Create Role" page, fill in the following fields:
- Name: Mandatory and must be unique.
- Description: Optional.
- Add Permissions: Configure permissions using the drop-down options for Apps, Resources, Resource Names, and Actions.
- Apps: Select from available applications (e.g., Foundation).
- Resources: Select the specific resources (e.g., workflows, connections, environments).
- Resource Names: Select specific resource names or use the * icon for all resources.
- Actions: Choose from *, Read, Write (where * denotes full access, Write denotes execution and edit access, and Read denotes only execution access).
- Assigning Permissions:
- Multiple permissions can be added to a single role.
- These roles can then be assigned to Regular Users to grant them access to resources based on the assigned permissions.
3. Role Assignment
- Assigning Roles to Users:
- Navigate to the "Users" tab in security screen.
- Select the required regular user.
- In Right side roles panel click on + icon.
- Select the required roles by checking the boxes next to their names.
- Click "OK" to assign the selected roles to the user.
- Assigned roles will be displayed in the users list for the user.
- Modifying Assigned Roles:
- To add or remove users from a role, use the + icon to open the roles list and make the necessary changes.
- Use the delete icon to remove roles from the user, confirmed by a pop-up.
4. Role and User Management
- Deactivating and Deleting Roles:
- Deactivate Role: Automatically removes the role from all assigned users, revoking their access to the associated resources.
- To deactivate a role, the user needs to click on the "Deactivate" button. When clicked, a pop-up will be displayed with the message "Do you want to deactivate the role?" along with "Yes" and "No" options. If the user clicks "Yes," the role will be deactivated and will be displayed with a red background.
- Activate Role: Reassigns the role to previously assigned users, restoring their access to the resources.
- To activate a role, the user needs to click on the "Activate" button. When clicked, a pop-up will be displayed with the message "Do you want to activate the role?" along with "Yes" and "No" options. If the user clicks "Yes," the role will be activated.
- Delete Role: Permanently removes the role from the system and all assigned users, revoking their access permanently.
- To delete a role, the user needs to click on the "Delete" button. When clicked, a pop-up will be displayed with the message "Do you want to delete the role “Role name”?" along with "Yes" and "No" options. If the user clicks "Yes," the role will be deleted.
- Modifying Roles:
- Admins can modify existing roles (permissions only; role names are disabled).
- After modification, user access is updated based on the new role permissions.
- Deactivating Users:
- Deactivated users will not be able to log in to the system.
5. User Interface
- Roles Screen:
- Displays a list of available roles.
- Provides options to create, view, edit, deactivate, and delete roles.
- Users Screen:
- Displays a list of all users.
- Shows assigned roles for each user.
- Provides options to add or remove roles for users.
6. Examples and Scenarios
- Example 1: Creating a Role:
- An Admin creates a role named "Workflow Manager" with permissions to view, edit, and execute workflows.