User Role Definition
User management documents.
Description: An Organization Admin has full administrative privileges within their organization. They can manage users, assign predefined roles, access all organization projects and data, and configure organization-specific settings. They cannot create or modify roles, as all roles are predefined by the application. However, they can assign those roles to the users they create. Every organization owner, created during the signup process, is automatically assigned the Organization Admin role and can assign it to other users.
Permissions:
- Manage users and assign predefined roles
- Access all projects and data across the organization
- Edit organization-specific settings
- View and export all reports
- Manage all projects across the organization
- Add collaborators to the project
Restrictions:
- Cannot create or modify roles (roles are predefined by the application)
- Cannot manage other organizations outside their own
- Cannot access or modify system-wide settings beyond their organization
Access Flow:
- Automatically assigned to the organization owner during signup.
- Can be assigned by the organization owner or Superuser.
- Role definitions can only be modified by Superuser.
Description: A user who can access both their own and shared projects. They can manage project profiles and perform data-related tasks but cannot manage users or organization settings.
Permissions:
- Manage their own projects
- Manage the profiles of the shared projects
- View reports
- Upload and validate data
- Generate charts and exports
Restrictions:
- Cannot manage users or organization settings
- Can only manage their own projects and shared project profiles
- No permissions to create or assign roles
- Limited to assigned projects and data
Access Flow:
- Created and assigned by the organization admin.
- Requires email verification for activation.
Description: A user who can view and contribute to assigned projects with limited editing rights.
Permissions:
- View assigned projects
- Manage the profiles of the shared projects
- Submit data entries
- Comment on project data
Restrictions:
- Cannot create/manage projects
- Cannot manage users or organization settings
- Limited editing rights; no project profile management
- Cannot generate exports or reports beyond viewing
Access Flow:
- Created and assigned by the organization admin.
- Requires email verification for activation.
Description: A read-only role for users needing access to specific shared views or reports. No permissions to edit or upload any data.
Permissions:
- View shared reports
- View limited project information
Restrictions:
- Read-only access only
- Cannot edit, upload, or submit any data
- No access to project management or settings
- Limited to specific shared reports or views
Access Flow:
- Created and assigned by the organization admin.
- Requires email verification for activation.
Description: Can access only the shared projects, use visualization tools of that project but has no rights to manage the project.
Permissions:
- View shared projects
- View limited project information(Visualizers, Reports)
Restrictions:
- Cannot modify or manage projects
- Cannot access organization settings or user management
- Not a member of the organization
- Can only view shared projects after signup
- Cannot subscribe without individual package selection
Access Flow:
- Receives an email with a signup link.
- After signup, gains view-only access to shared projects.
- Not added to the owning organization.
- Can subscribe to packages independently.
Description: The Single User role provides full access to all features and capabilities, similar to an Organization Admin, but is intended for individual users not affiliated with any organization. This role is applicable when the account is registered as a personal account via the signup process.
Permissions:
- Full access to all their own projects and data
- Create, manage, and delete personal projects
- Upload, validate, and analyze data
- Generate and export charts and reports
- Configure personal account settings
Restrictions:
- Cannot manage or invite other users
- No access to organization-specific settings or features
- Role assignment and user management unavailable
- Scope limited to personal projects and data only
- Cannot have collaborators on the project
Access Flow:
- Automatically assigned when signing up without joining or creating an organization.
- Operates as an independent, self-managed account.