In most situations, every user is associated with an organisation and has exactly one out of five default roles inside this organisation. The five default roles are cumulative, i.e. a Theme Manager can do everything a Data Manager can do:
The structure of organisations is hierarchical. Each organisational structure has a root organisation, such as in this example:
Usually, every user has exactly one role inside one organisation. The user gets access to resources and functions of the system via privileges defined for the role. Some privileges depend on the hierarchical structure of the organisation sof the logged in user and the owner of a resource.
Example: A user belongs to «County A1» with role «Superuser». As a «Superuser», the user will be able to see all data sets for all suborganisations, and be able to create new user accounts and suborganisations in these suborganisations. If this is not desired, suborganisations can be created directly as children of the root organisation. You can create as many levels of suborganisations as you need.
|When you create a new user as an administrator, the system enforces association of the user with an organisation and a role.|