Entities, roles, and permissions

Entities

The HERE platform provides different levels of access control.

Entity Description
Organization An organization (org) scopes all the users, apps, resources within the same security namespace. When you log into platform.here.com as a user, you must enter your organization ID.
Project A project is an access controlled collection of resources (catalogs, pipelines and schemas). Any user can create new projects. Both org admins and project admins can manage projects. The HERE platform credit usage report contains usage of all of the resources in a project, automatically retrieved by project ID. For more information on managing projects with projects manager, see Manage Projects.
Group A group is a collection of users and apps. Any user can create new groups. Both org admins and group admins can manage group memberships. For more information, see Manage Groups.

Roles and permissions

The platform enables secure team collaboration using HERE account authentication and authorizes access based on the following roles and permissions.

User

Granted basic access to platform functionality for users and applications.

Org admin

There can be multiple admins within an organization and each organization must have at least one admin. See Roles and permissions for more information. To perform admin tasks including managing users, apps, groups and permissions, open the Access Manager from the launcher. The org admin role extends the user role with the following task permissions:

  • Invite new users
  • Manage users
  • Manage groups

Group admin

Extends the user role with the following task permissions:

  • Manage groups for which the group admin is the designated administrator

Project admin

Extends the user rule with the following task permissions:

  • Manage projects for which the project admin is the designated administrator

Org inviter

Extends the user role with this task permission:

  • Invite new users

Monitoring dashboards editor

Extends the user role with the following task permissions:

  • Edit monitoring dashboards
  • Edit notification channels
  • Edit alerts
  • See alert events in dashboards

Member

A user who is a member of a group.

results matching ""

    No results matching ""