Roles

Overview

Roles can be assigned in two ways:

To an Organization Unit, which assigns the role to all users within that unit.
Directly to an individual user, giving them the permissions associated with the role.

Admin Role: Super Administrator

The Super Administrator role has unique restrictions due to its system-forming nature:

Delete Restriction: The Super Administrator role cannot be deleted. If an attempt is made, the system will display a message: “Super Administrator role cannot be deleted as it is system-forming.”
Manage Permissions: The permissions of the Super Administrator role cannot be modified. Any attempt to change them will display the message: “Super Administrator role has all permissions by default and cannot be changed.”
Edit Role Name: The role name cannot be edited. If an administrator tries to rename the role, a message will appear: “Super Administrator role cannot be edited, as it is system-forming.”

Actions

Various actions can be performed on roles, including creating new roles, managing permissions, and deleting roles.

New Role

When creating a new role, a popup window is displayed. This window includes fields for:

Role Name: Specifies the name of the role.
Default Role: Marks the role as a default role for new users.
Public Role: Defines whether the role can be viewed by other users.

Default Role

If a role is marked as "default," it will be automatically assigned to new users. This ensures that all new users have a predefined set of permissions without requiring manual assignment.

Public Role

Public roles are visible to other users within the system. While this feature has no usage within the Identity module itself, it can be leveraged in other areas of the system for user role transparency.

Manage Permissions

The Manage Permissions feature allows administrators to add or remove permissions for the selected role, defining what actions users with this role can perform. For more details on permissions, refer to the Permissions section.

Manage Users

Users can assign or remove roles for users through the following methods: Manual Role and Permission Management:

Assign Role: Role can be assigned to users directly through the user’s permission settings popup.
Remove Role: Role can be removed from the user’s permission settings popup.

Roles Assigned via Organization Units:

If a role is assigned to a user through an organization unit, the role cannot be removed from the user’s popup. Instead, it must be managed within the organization unit’s details, as described in Organization Units: Details: Members and Roles.

Manage Organization units

This action enables administrators to assign or remove roles for organization units. Once a role is assigned to an organization unit, all users within that unit will inherit the role's permissions.

Delete

The Delete action removes the role from the system entirely.