Users can be assigned multiple roles for each site. The following roles are available:
Tenant Admin
The Tenant Admin is the highest administrative role within a tenant.
Roles and Permissions:
▪Read and edit tenant metadata
▪Add and remove users from the tenant
▪Retrieve tenant administrators
▪Assign and remove users from the “Tenant Administrator” role
▪Manage systems in the tenant
▪Manage local gateways
▪Manage sites in the tenant
▪Has all the permissions of a Site Administrator for each site
▶ The Tenant Admin is responsible for the tenant's basic organizational and technical structure, but generally does not work with jobs on a day-to-day basis.
Site Admin
The Site Admin manages one or more sites within a tenant.
Tasks and permissions:
▪Read and edit site metadata
▪Read role assignments for identities (users and groups) in the site
▪Read site administrators in the site
▪Read job designers in the site
▪Read consumers in the site
▪Read identities (users and groups) in the tenant
▪Assign and remove identities (users and groups) from site-specific roles such as Site Administrator, Job Designer, and Consumer
▪Manage system links
▪Read basic system data
▪Read basic gateway data
▪Read all job executions for a site
▪View all permissions of a Job Designer for this site
▶ The site administrator ensures that users within the site have the appropriate permissions and can work efficiently.
Job Designer
The Job Designer is responsible for creating and maintaining jobs.
Tasks and permissions:
▪Edit jobs
▪View job details (job definition)
▪Add and delete jobs
▪Test systems
▪Retrieve metadata from systems
▪Test gateways
▪All permissions of a consumer for this website
▶ The Job Designer performs technical and subject-matter-specific tasks but does not have access to the tenant's or site's administrative settings.
Consumer
The Consumer is the end-user role.
Tasks and permissions:
▪Read site metadata
▪Read tenant metadata
▪Read system links
▪Read jobs
▪Read own job runs
▪Run jobs
▶ Consumers use the jobs provided by job designers without changing their configuration.
Interaction between Roles
The roles build upon one another functionally:
▪The Tenant Admin creates and manages the tenant and the sites.
▪The Site Admin organizes users and permissions within a site.
▪The Job Designer creates the business content (jobs).
▪The Consumer uses this content for their daily work.