User Authorization¶
User Authorization management is primary about managing the user’s access to the system. The following two types of authorization are supported.
- Role-Based Authorization. Role defines a set of restrictions for a type of users or workspaces. It contains a set of Authorization Rules. Each user must be assigned at least one role. Multiple roles can be assigned to a user. Optionally, a workspace, especially a public workspace, can also be assigned a role. A workspace role can overwrite/upgrade/downgrade roles of users who work in the workspace.
- MAS-Based Authorization. When there are multiple Model Authority Sets (MAS) defined in the system, the Tool doesn’t restrict any users from viewing any of the MAS. However, the write access to each MAS can be assigned to each user which provides more flexibility on collaboratively modeling for RTOs and large organizations.
The Tool uses both authorization mechanisms together and determines the user’s access in different scenarios/contexts dynamically.