Roles and permissions matrix¶
Rillsoft Integration Server controls access rights through two independent, combinable role types: user roles (folder-independent) and folder roles (folder-dependent). A user usually holds both role types at the same time — for example the user roles Project manager, iCalendar user, and access to the timeline module, plus the folder role Root folder user.
Important
Not to be confused: the resource pool also has “roles” in the sense of employees’ professional qualifications (e.g. to group personnel by field of work). That is a separate concept unrelated to access rights, see Roles.
User roles (folder-independent)¶
User roles define rights for activities that are not tied to a specific folder: user management, working with portfolios, the resource pool, holiday planning, and the iCalendar and DMS add-ons. Rillsoft Integration Server provides seven predefined user roles: Administrator, Client Administrator, Project manager, Project user, iCalendar user, Vacation planning-user, and Vacation planning supervisor.
Rights group |
Example rights |
|---|---|
User management |
Create/change/delete users and clients; client sharing; manage roles; sync with LDAP/Redmine |
Work with portfolio |
Read/create/change/delete portfolio; cross-project links |
Manage resource pool |
Read/change/lock/unlock resource pool |
Vacation planning |
Change vacation account, enter/accept/cancel vacation, enter sick leave |
Work with the iCalendar add-on |
Read user/client/project/portfolio calendar |
Work with DMS |
Create/read/change/delete/restore documents, manage folder structure |
Full list of rights and management: see User roles.
Folder roles (folder-dependent)¶
Folder roles determine which projects a user may work with in a given folder, and how (read, change, etc.). Rights assigned to a parent folder apply by default to its subfolders as well.
Rights group |
Example rights |
|---|---|
Folder structure |
Create/change/delete/restore folder |
Project |
Create/read/change/delete/lock/unlock project |
Email notification |
Watch project/milestone changes, negative effort, and cross-project link conflicts |
Timesheet |
Enter/accept timesheet |
iCalendar & timeline |
Access to add-on modules in the browser window |
Full list of rights and management: see Folder roles.
Assigning a user¶
How to assign both role types to a user is described step by step in Customize user access rights.
Related topics¶
User roles — user roles in detail, create a new role
Folder roles — folder roles in detail, create a new role
Customize user access rights — assign roles to a user
Roles — professional qualifications in the resource pool (different concept)
permissions matrix, user roles overview, folder roles overview, access rights, permissions, user roles, folder roles, manage permissions, it-administration