Project Access Rights
Access rights must be defined to authorize users to carry out specific actions on a project and its resources.
Access Control in DigitalSuite
DigitalSuite follows a twin-track approach to access control that combines profile-based access mechanisms at account level with role-based access mechanisms at project level.
When you register a user for your customer account, you assign the user a standard User or Administrator profile. Users with an Administrator profile have full access to the DigitalSuite platform while those with a User profile can only access project resources to which they have explicitly been granted access at project level.
For access control at project level, DigitalSuite uses roles that are assigned to users. A role represents a set of responsibilities for a user and the access rights to take the corresponding actions. Allocating specific access rights to a role grants these rights to all users who are members of the role. DigitalSuite allows you to define any number of roles and assign them to users as required. Users can be assigned multiple roles within a project in order to give them the access rights necessary to meet their responsibilities.
The role-based access you define at project level applies to all resources that belong to the project, with the exception of subprojects that are included. For a subproject, the access rights may differ from those defined for the main project.
For details on how the profile-based and role-based access control affect the project resources, refer to the Developer Guide. The Role Management module is the DigitalSuite Studio module for managing roles. The Project Configuration module is the module for allocating access rights to the roles.
Access Rights Types
DigitalSuite distinguishes between the following types of access rights:
- Designer. Designer access allows you to modify a project's resources and launch processes/web interfaces in Test, Acceptance, and Live mode.
- Supervisor. Supervisor access allows you to launch processes/web interfaces in Test mode and monitor launched processes in all modes. Supervisors cannot modify any project resources.
- User. User access allows you to launch web interfaces in Live mode and see tasks you have to perform. Users cannot see the processes they have launched.
- Observer. Observer access allows you to view all launched processes in read-only mode.
- Translator. Translator access allows you to create, read, update, and delete dictionaries for use with App Translator.