InfraLink utilizes Role Based Access Control (RBAC) to manage users' access to data and functionality. A User may have an active User Account, but that account must have at least one assigned User Role to have access to any data, features or functionality.
Assigning User Roles
To assign User Roles to a User Account:
- From the top-level navigation toolbar, select the Configure menu.
- Select Accounts to open the Accounts grid view.
- Apply filters, as necessary, to locate the desired User account.
- Select the desired User Account to open the User details panel along the right side of the viewing pane.
- Scroll down to the Roles section of the details panel and click the arrow to expand the Roles options.
- Click the Add ( + ) icon to access the scope drop-down options:
- To assign global privileges, select Global.
- A Grant Privileges to User window will open, listing all global and contract-level Roles.
- Note: Assigning contract-level Role(s) globally is discouraged, as that action will likely result in unintended/unauthorized access.
- Clicking the plus ( + ) icon to the left of a Role name will display the Role description, if one was created.
- Select the global User Role(s) to assign, as appropriate for the selected user.
- Select the Grant Privileges button to assign the selected Role(s).
- The granted Roles will be listed within the User details panel.
- A Grant Privileges to User window will open, listing all global and contract-level Roles.
- To assign Contract-level privileges, select Contract.
- A Grant Privileges to User window will open.
- All Contracts are listed on the left side of the window.
- All Contract-level roles are listed on the right side of the window.
- Select one or more Contracts, as appropriate for the User.
- Use keyword search and filters as necessary to narrow down the list and help with selection.
- Note: If assigned Roles will vary across Contracts, a separate add ( + ) Role action must be completed for each scenario.
- Select one or more Roles, as appropriate for the User.
- Use keyword search to help with the selection.
- Note: The selected Roles will be assigned for each of the selected Contracts.
- If assigned Roles vary across Contracts, a separate add ( + ) Role action must be completed for each scenario.
- Once all desired selections are made, click the Grant Privileges button.
- The granted privileges will now be listed in the User Details panel, grouped by Contract.
- To assign global privileges, select Global.
Note: InfraLink allows for both global and Contract-level roles to be assigned globally. If you assign a Contract-level role to the User Account globally, the User will have access to the respective business objects across all existing and future Contracts. Globally assigning Contract-level Roles is discouraged to avoid inadvertent expansion of User access.
Assign Only the Necessary Permissions
While an existing Role may include the desired Permissions for a user, it is important to consider if all Permissions within that Role are appropriate for the User. Select a Role within the User Roles grid view to review all Permissions included. Administrators should only grant Permissions that are necessary for the User's position and responsibilities.
Always create a new, user-appropriate Role instead of assigning excessive, unnecessary Permissions.
Unassigning User Roles
The privileges granted to a User Account can be revoked by an administrator at any time. To unassign a Role from a User Account:
- From the top-level navigation toolbar, select the Configure menu.
- Select Accounts to open the Accounts grid view.
- Apply filters, as necessary, to locate the desired User account.
- Select the desired User Account to open the User details panel along the right side of the viewing pane.
- Scroll down to the Roles section of the details panel and click the arrow to expand the Roles options.
- Select the check-box next to each Role you wish to remove.
- Use the expansion arrows (carrots) as necessary to locate the desired Role(s).
- Click the Remove (trashcan) icon to remove the selected Role(s).
- InfraLink will issue a warning, "Are you sure you want to remove selected role(s)?"
- Click Yes.
Deleting Contract-Specific Roles
You can remove contract-level roles on a per-Contract basis. For example, if a User Account has the "Technician" Role under Contract A, Contract B, and Contract C, you can remove the "Technician" role under Contract A but leave it assigned for Contracts B and C.