Organizations maintain different levels of hierarchy. Users in an organization will hold various responsibilities based on this hierarchy. For privacy and security reasons, users might need different levels of access privileges in the organization.
To address this, Orchestly supports
Profiles . Every profile in your organization (except Admin) can be configured with unique privileges. By default, we provide four different profiles, each with its own level of privilege:
Admin, Service Admin, Manager and
User. Users can be assigned with these profiles when they are added to the organization. Learn more about
adding users.
Admin
Admin users belong to the top level of the hierarchy. These users have permission to perform all actions in the organization.
- Admin profile's job or field level permissions cannot be modified.
- The Admin profile cannot be deleted.
Service Admin
Service Admin falls just below the Admin profile in the hierarchy. These users can perform every action, but will not be able to view all the jobs in the organization. Although these are the initial permissions, they can be modified in the profile anytime.
- Both job and field-level permissions of the Service Admin profile can be modified.
- The Service Admin profile can be renamed or deleted.
Manager
The Manager profile falls third in the hierarchy. These users can perform every action, but will not be able to view all the jobs in the organization. Also, the users of this profile will be not able to access the Settings tab (i.e., they will not have access to Services, Blueprint, Customization, Automation, Users, or Access Control modules). Although these are the initial permissions, they can be modified in the profile anytime.
- Both job and field-level permissions of the Manager profile can be modified.
- The Manager profile can be renamed or deleted.
User
The User profile is only allowed to access the basic details, such as editing jobs assigned to them and requested by them. They can also pick up any unassigned job to work on it. Although these are the initial permissions, they can be modified in the profile anytime.
- Both job and field-level permissions of the User profile can be modified.
- The User profile can be renamed or deleted.
Job level permissions
| Admin
| Service Admin
| Manager
| User
|
View
| | | | |
Jobs assigned to others
| ✓
| X
| X
| X
|
Edit
| | | | |
Jobs assigned to me
| ✓
| ✓
| ✓
| ✓
|
Jobs assigned to others
| ✓
| ✓
| ✓
| X
|
Jobs requested by me
| ✓
| ✓
| ✓
| ✓
|
Team assigned to job
| ✓
| ✓
| ✓
| X
|
Delete
| | | | |
Jobs assigned to me
| ✓
| ✓
| ✓
| X
|
Jobs assigned to others
| ✓
| ✓
| ✓
| X
|
Jobs requested by me
| ✓
| ✓
| ✓
| X
|
Assign
| | | | |
Jobs to myself
| ✓
| ✓
| ✓
| ✓
|
My jobs to others
| ✓
| ✓
| ✓
| X
|
Jobs to others
| ✓
| ✓
| ✓
| X
|
Manage
| | | | |
Settings
| ✓
| ✓
| X
| X
|
Reports
| ✓
| ✓
| ✓
| X
|
Blueprint preview
| ✓
| ✓
| ✓
| ✓
|
Import Jobs | ✓ | X | X | X |
Field level permissions
The default and custom fields will be visible to all the users initially. Although these are the initial permissions, they can be modified in the profile at any point of time.
| Admin
| | | Service Admin
| | | Manager
| | | User
| | |
| Hide
| Read only
| Read/Write
| Hide
| Read only
| Read/Write
| Hide
| Read only
| Read/Write
| Hide
| Read only
| Read/Write
|
Title
| X
| X
| ✓
| X
| X
| ✓
| X
| X
| ✓
| X
| | ✓
|
Due On
| X
| X
| ✓
| X
| X
| ✓
| X
| X
| ✓
| X
| | ✓
|
Comments
| X
| X
| ✓
| X
| X
| ✓
| X
| X
| ✓
| X
| | ✓
|
Other fields
| X
| X
| ✓
| X
| X
| ✓
| X
| X
| ✓
| X
| | ✓
|
Add profile
- Navigate to and select Access Control from the left panel.
- Click Add Profile.
- Fill in the details:
- Profile Name: Give a name for your new profile.
- Clone From: Select a profile from which the new profile can be cloned.
- Cloning the profile creates a copy of its permissions for the new profile.
- Click Save .
Edit profile
- Navigate to and select Access Control from the left panel.
- Choose a profile you wish to edit.
- Click next to the profile name to edit the name.
- To edit job level permissions, toggle the button at the right end to enable/disable it.
- To edit field level permissions, click the radio button corresponding to the permission.
- Once the modifications are done, click Save .
Delete profile
- Navigate to and select Access Control from the left panel.
- Choose the profile you wish to delete.
- Click next to the profile name.
- If the profile is associated with no users, click Yes, delete and confirm your action.
- If the profile is associated with one or more users, the users have to be moved to a different profile before deleting.
- Select a profile from the dropdown list and click Ok .
- The user will be moved to the selected profile and the profile will be deleted.