Out of the box, ApiOpenStudio comes with 5 default roles:
- Administrator: Ability to Manage Accounts, Applications, Users and User Roles.
- Account Manager: Manage an Account, Users and User Roles.
- Application Manager: Manage an Application, Users and User Roles.
- Developer: Manage resources for an application.
- Consumer: Consume resources for an application.
The default privileged roles are fixed. However you can create as many roles to give granular access to resources as you like. These roles can act alongside the token_role Security processor.
¶ Viewing roles
To manage the roles available in your system, click on Roles in the Main menu:
¶ Create a role
Click on the plus icon:
Enter the name of the new role in the pop up modal, and click on "Create":
¶ Rename a role
Click on the edit icon (pencil) next to the role that you want to rename.
Type in the new name for your role in the pop up modal and "Update":
NOTE: Permission will be denied if you try to rename a core default role.
¶ Delete a role
Click on the delete icon (trashcan) next to the role that you want to delete.
A modal will pop up, asking if you want to proceed:
NOTE: Permission will be denied if you try to delete a core default role.