User Access

Key Points: User Access

1. Determine user access
integrate uses Role Based Access Control (RBAC) to determine user access. This means that instead of configuring specific access for each individual user, users are assigned to groups, and access is configured on a group-level basis. This speeds up the onboarding process, as new users can simply be added to an existing access group based on their position.

2. User who does not belong to an access group
Access is denied by default. This means a user who does not belong to part of any access group will not have any access, and will just see a blank integrate home screen.

3. User who belongs to multiple groups
If a user is added to multiple groups, they will gain access to everything that each of those groups can access. For example, a user could be a member of ten groups, and only one of those groups would need to have access to a particular feature for the user to be able to access it.

4. Edit user access and group membership
Navigate to settings > group. This page will show a list of all access groups, along with their members. The full list of users can be seen on the right, along with their group membership. To edit group membership, click the pencil icon next to the group. 

To edit the group name, add a description or remove existing members click the cross next to the user's name. To add a member, click show member selector to see a full list of users. Status can be changed to blocked to turn off a group's access, or delete it entirely.

5. Access vs role
To edit a group's privileges, click access, role, or output next to the group name:

Access - Determines which features in the system users have access to, and which will be listed on their homepage.

Role - Determines how much users can do within those features. For example, permission to view the the part list is granted under access, but permission to edit the part list is granted under role.

Output - Determines which production outputs users can generate.

Note: Granting additional access to users can increase monthly subscription fees. Granting additional roles does not affect billing.