Security Roles

A security role is a set of privileges and the level of access to various actions/functions within the platform. Security roles allow you to configure the security items, that is, the access privileges on CRUD operations for entities who belong to the open data model.

Users with elevated privileges (admin users) can control data access by setting up the organizational structure to protect sensitive data and configuring various organization layers to allow communication, collaboration or reporting.

You can grant even more granular access privileges in FintechOS, by associating security roles to digital journeys, workflows, analytics and Portal Profiles. Such security roles are then associated to a user, hence the user will be able to see those digital journeys, workflows, analytics or Portal Profiles. Such an example is given in Access to Portal Profiles based on Security Roles. The data is automatically filtered based on the privileges and level of access defined within the security role via the security items.

The lowest level of access privileges you can grant to users in FintechOS is on attribute level.

Default Security Roles

The following table describes the access rights level of the default security roles:

Security Role	Description
Debugger Users	This is a development role: it is used by the implementation team to debug issues on the Portal using the Debugger in the kit.
Developer	This is a development role: it is used by the implementation team to create users that access a restrictive part of the designer, not admin user.
Guest	This is a role inherited by the platform; it doesn’t have any special platform access meaning.
JobServer	This role is used by the JobServer service to execute scripts from the platform with a specific schedule (see Schedule Jobs).
Registered Users	Users with this security role have access rights to edit their account from My Account and to access a minimum list of entities in order to log in without errors in the application.
User Management	Users with this role can manage the application users without having elevated privileges. NOTE  System users who have been granted the User Management security role cannot manage existing Administrator users.
Integration Users	A role designed for integration with other systems. It is not an actual user, but rather a process that authenticates and calls various functions exposed inside the platform.
Widget	This is a role inherited by the platform; it doesn’t have any special platform access meaning.

 

New security roles can be added to the list depending on your business needs and to each give security items with specific CRUD operations. Lastly, attach the security role created to the element you wish to give access to e.g. form driven flow or report.