Organization User Roles and Access Permissions

Every organization user is assigned one or more roles while they are added to Axonator. The inherent purpose of having a role assigned to a user to define the set of access permissions he/she may have. These permissions define the extent of functionalities a user can access. 

The access permissions upon which roles are defined or created are – 

1. ACCESS_WEB_PORTAL – Users with this permission can access Axonator’s web portal, i.e. the app builder (builder.axonator.com) and web app (web.axonator.com). This permission must be provided to any user who is going to access either Axonator’s app builder or the web app.

2. APP_BUILDER – this permission gives users complete access to builder.axonator.com. Users with this permission can create forms, workflows, templates and add/remove users in apps.
   
3. APP_DRIVE – This permission gives  users access to web.axonator.com. Users with this permission can see data in apps.
   
4. SUPER_USER – Users with this permission have all access rights across all apps the user is a part of. Only a Super User can add or remove another Super User in the account.
   
5. ORG_IAM – Users with this permission can manage organization-level IAM (Identity and Access Management) settings. This permission allows the user to add/remove organization users and assign/create roles.
   
6. APP_IAM – Users with this permission can manage app-level IAM settings. This permission allows users to add/remove app users and assign/create app specific roles.
   
7. QR_ACCESS – Users with this permission can access the “generate QR” functionality.

Axonator’s builder allows you to either use default roles (with a set of pre-defined access permissions) or create custom ones (by manually selecting a mix of access permissions). 

The three default roles are –

1. Organization Admin – Anyone who is an Organization Admin has full privileges of the organization. This role has the full set of access permissions mentioned above, enabled by default.

2. Staff Member – Staff members can be added to any app in the organization. By default, they have the required permissions to view the app data on web.axonator.com.

3. App User – User who is assigned the role of App User can only access Axonator mobile apps to submit data. This role does not have any of the access permissions defined above. 

To create a custom role – 

• Login to builder.axonator.com
• Navigate to Organization users (from the top right profile icon or the Add option in the footer)
• Click on “roles” option, which is next to “Organization Users”.
• Click on “Add role”
• Now, provide a title and description (optional) to the role. 
• Select the permission/s the role will grant the user who will be assigned this role. 
• Click on Save Role.
  

You can now assign the newly created role to an existing or new user.