In Vince Live, we implement attribute-based access control (ABAC) to provide highly granular control over user roles and permissions. This allows for fine-tuned access management and ensures that roles are only applicable to users with the "User" permission setting, while users with the "Admin" permission have unrestricted access. This documentation provides an overview of roles in Vince Live and their significance in the access control system.

• Role Creation and Workflow Association The primary step in configuring roles is to create them according to your specific requirements. By defining roles, you establish distinct groups with predefined access privileges. When creating or editing workflows, these roles can be associated with them. Each workflow linked to a role becomes a rule within that specific role. This setup enables efficient management of permissions based on user roles.
• Configurable Access Levels Within Vince Live, you have the flexibility to determine access levels at a detailed level for specific features. For instance, you can define whether users are allowed read-only or read-write access to features such as users, connections, and workflows. This fine-grained control ensures that users have appropriate permissions based on their role and responsibilities within the organization.
• Deny Rules for Enhanced Access Control In addition to defining allow rules, Vince Live also supports the inclusion of deny rules. This feature is particularly useful when granting access to multiple areas. Deny rules allow you to explicitly restrict access to certain features or functionalities, even if they are allowed by default based on a user's role. This capability adds an extra layer of control and security to your access management strategy.

Roles in Vince Live, implemented through attribute-based access control (ABAC), enable precise control over user permissions and access levels. By associating workflows with roles, you can define specific rules and restrictions for different user groups. This fine-grained access management allows for efficient customization of user privileges and ensures that users have the appropriate level of access to features and functionalities within Vince Live. Additionally, the inclusion of deny rules provides added flexibility and control over access control policies. With Vince Live's robust role-based access control system, you can confidently manage user permissions and safeguard sensitive data and workflows.

Defining user roles in Vince Live allows organizations to customize access levels and grant specific privileges to individuals based on their responsibilities and requirements. This flexible user management system ensures secure and efficient utilization of the software's capabilities.

Managing Permissions for Roles in Vince Live

In the Permissions section of Vince Live, administrators can tailor role permissions using four key drop-downs : App, Resource, Resource Name, and Actions.

• App Drop-down: Selecting an application loads relevant options in the Resource drop-down.

• Resource Drop-down: Based on the selected App, it displays resources such as API Clients, Connections, Dashboard, Environment, Gateway, Group, Meta data, Role, User, Variable, and Webhook, Workflow.

• Resource Name Drop-down: Lists specific items under the selected Resource (e.g., connections).

• Actions Drop-down: Offers choices like *, Read, and Write.

  *: Grants full access (Read and Write) to the selected resource.

  Read: Provides read-only access.

  Write: Allows create and modification access.

App:

The "App" dropdown in Vince Live serves as a means to categorize the diverse range of resources available within the application. It primarily distinguishes between "Foundation" and "Custom Tables," maintaining a clear separation.

Foundation

Foundation encapsulates the essential entities integral to Vince Live. These entities constitute the core components of the application, forming the backbone of its functionalities.