Role Management
Smart Trading Cloud uses a role-based access control method to manage the access of user groups to specific actions in the Smart Trading Cloud services. The access level is defined by a role (namely, the permissions this role has) that can be assigned to one or more of your user groups.
When you (as an account administrator) activate a Smart Trading Cloud service, the following service-defined roles are automatically added to your default groups:
- The Administrator role is assigned to the Administrators group. A user with this role can access the Smart Trading Cloud Account Service and modify any organization account settings.
- The Regular User role is assigned to the All Users group. A user with this role can log in to Smart Trading Cloud but cannot access the Smart Trading Cloud Account Service.
- Viewer: A user with this role can access the Smart Trading Cloud Account Service and view all the settings.
To allow several of your regular users to access a specific service (not all the services) as administrators, create a dedicated group for them and add the role of the service administrator to this group.
Create a new role with permissions
- Go to the Role Management page (
on the left navigation bar).
- In the left pane where roles are listed, next to Service, select a service you want to add roles to. Note that the service must allow adding custom roles.
- On the toolbar above the available roles, click Create.
- On the Create Role dialog, enter a role name, for example, Editor.
- In ID, enter a unique role ID, for example, Editor_1.
Note The role ID can contain uppercase letters, lowercase letters, numbers, and symbols "-" (dash), "_" (underscore), and "." (dot).
- In description, briefly specify what this role allows to do (for example, The users who can make edits).
- Click Save.
- In the roles list, select the newly created role.
- In the right pane, go to the Permissions tab.
- Click Add and select the permissions you want to add to this role.
Duplicate/edit/delete a role
- Go to the Role Management page (
on the left navigation bar).
- In the left pane where roles are listed, next to Service, select a service from which you want to duplicate, edit, or delete a role. Note that the service must allow duplicating, editing, or deleting a role.
- On the toolbar above the available roles, click Duplicate, Edit, or Delete.
Add a role to a user group
- Go to the Role Management page (
on the left navigation bar).
- In the left pane where roles are listed, next to Service, select a service you want to manage access to.
- In the roles list, review what each role allows and select the required role.
- In the right pane, on the Groups tab, click Add and select a group to assign this role to.
- or -
- Go to the User Management page (
on the left navigation bar).
- In User Groups, select the user group you need from the list.
- In the right pane, under the group name, expand Group Roles.
- Find the service you want to manage access to and click
.
- On the Add Service Role dialog, select the role you want to assign to this user group and click Add.
Next time the users of this group open the service, they will be allowed to perform actions specified in role permissions.