Permissions

Permissions specify the particular actions that can be executed on resources within an organization.

Role-Permission Relationship

• Permissions are assigned to roles instead of being granted directly to individual users.

• When a user is assigned a role, they automatically inherit all the permissions associated with that role, simplifying and enhancing the efficiency of access management.

Adding Permission

• To add a new permission navigate through the side panel by selecting Settings > Access Management > Roles & Permissions.

• Click on the Role name for which the permission is to be added and then click on "Add Permission" button.

• You can also add permissions during the Add Role workflow.

Permission Configuration

• Name required string A descriptive name for the permission.

• Allow Resource Creation boolean Toggle to enable/disable different entity creation.

• Allow Site Creation boolean Checkbox for site creation access.

• Allow Pipeline Creation boolean Checkbox for pipeline creation access.

• Allow Source Creation boolean Checkbox for source creation access.

• Allow Destination Creation boolean Checkbox for destination creation access.

• Select Sites options Choose one or more sites.

• Select Pipelines options Choose one or more pipelines.

• Select Sources options Choose one or more sources.

• Select Destinations options Choose one or more destinations.

• Access Type required enum

  • Read: Allows users to view resources.\

  • Write: Allows users to modify or update resources. Write access automatically includes read access.

  • Delete: Allows users to delete resources. Delete access automatically includes both read and write privileges.

In the resource selection dropdowns, such as Select Sites or Select Pipelines, you have the option to choose one or multiple resources at once. For convenience, there is an "All" selection available for each resource. For instance, selecting All Sites will apply the permission to all sites within a specific organization. In Observo's resource hierarchy, Sources, Sinks, and Pipelines are nested under Sites. Therefore, if specific sites are selected, only the resources (Sources, Sinks, Pipelines) associated with those selected sites will be available for further selection.

Additionally, implicit read access is granted to any Sources and Sinks associated with a Pipeline. For example, if you grant write access to Demo-Pipeline, implicit read access will also be provided for the sources and sinks connected to that pipeline. Similarly, granting read access to all pipelines will automatically provide read access to all related sources and sinks.

Permissions List

• All the permissions within the role are visible in the permissions page in tabular view.

Permissions List Actions

User can perform certain actions on a permission which can be accessed by clicking the three dots menu icon at the end of each permission list row.\

Action	Description
Edit Permission	Allows to edit the permission. It will open the same Permission modal that was available while creating a new permission with form values pre filled.
Delete Permission	Delete the permission from the system.