What roles and permissions are there in Maxem Energy Cloud?
The Role Management System (RMS) is a system where a user can manage a set of roles and assign these to their users. A role is created of a set of details, permissions and the users that are assigned to it. Within the system a user is able to create, read, update and delete the roles within their organization. These roles can then be assigned to a user within that organization to grant them that set of permissions.
To be able to manage roles the user should have the ‘Administrator’ role. Without this role the user won’t be able to see the roles (unless they have the permission to update user roles), update or delete roles.
Default roles list
These are the roles created at the root level organization (Maxem) and may or may not be propagated to all sub organizations.
Administrator
This role is meant for the administrators of an organization. The role has been created within the root level organization and is propagated to all the sub organizations. With this role the user has all the permissions that are within our system.
MEC Administrator
This role is meant for the Maxem Energy Cloud administrators. The role has been created within the root level organization and is only to be used within this organization. With this role the user has all the permissions that are within our system.
MEC Service
This role is meant for internal service accounts like for example Connect, Appsmith or Grafana. The role has been created within the root level organization and is only to be used within this organization. With this role the user has all the permissions that are within our system.
TU Self-Onboarding, EC Self-Onboarding
These roles are meant for users that register through the self registration route. The roles have been created within their respective organization and are propagated to all sub organizations. When a user registers through the self registration route these roles get assigned to the account that is created for them. With these roles the user has all the permissions that are within our system.
Protected roles
Some of the roles within our system are marked as protected. A role can be protected on updating or on deletion. This is a flag set within our database and can only be added/ deleted by Maxem. When a role has the update flag it is not possible to update the role in any way, shape or form. When a role has the deletion flag it is not possible to delete the role. These flags are to make sure that some roles always stay in the system and/ or can’t be updated.