Permissions Overview

Settings -> Permissions

The DCH includes a permissions management system that allows Organisation administrators to control access for other users in the system. Users are identified in the platform via their email addresses, i.e., DCH 'usernames' are email addresses.

The authorisation system is a role-based system consisting of Rolesets and User Groups. I.e., you can create Rolesets that represent 'access to resources' in the system and assign Rolesets to users. In DCH resources are things like Sites and Buildings, and they 'belong to' Organisations. User Groups and Rolesets also belong to Organisations. A Roleset in DCH is a list of paired access types (e.g. read access) with resources (e.g. a particular Site). User Groups exist to simplify bulk management of permissions in DCH; they are a way of grouping Rolesets together. A User is granted permissions in the system by either assigning Rolesets to them directly, or by adding them into User Groups, where they inherit the permissions of the Rolesets associated with the group. I.e., to give someone edit access to all your Sites you could setup a series of edit permission Rolesets (one for each Site), and then create a User Group that includes all those Rolesets and, then add the user to that User Group.

There is an invitation mechanism that allows you to assign specific Rolesets to users or add users to User Groups. This invitation system can be used for both existing DCH users and to bring new users into the platform. Once users are in the system* you can directly update the set of Rolesets assigned to them or update the list of User Groups they are members of.

Your ability to manage permissions depends on your current permission levels.

It is not possible to change the username (email address) of a user using the tooling. If this is needed, you can invite the new user (new email address) to the platform with the permissions required and revoke access to the existing username.