/
Role-Based Access Control Types and Permissionsit might be

Role-Based Access Control Types and Permissionsit might be

Jan 21, 2019

The Hyalto Role-Based Access Control (RBAC) system utilizes specific roles and permissions for different access to both the provider portal and client portals.
Below is a list of all the permissions that Hyalto uses:

Permissions

Account Management

This permission provides a user with the ability to manage account related services in Hyalto. This includes:

  • Accounts - Allows the user to access Client accounts.
  • API Keys - Enables users to have access to the API keys, which can include the ability to create or destroy those API keys.
  • Authentication Types - Allows the user to select which type of authentication the client can use. i.e. MFA
  • Contacts - Provides access to both the Service Provider and client contact information.
  • Customization - Enables access to Branding, allowing the user to customize the color scheme of the portal.
  • Roles - Allows the user to set or change roles for other users.
  • Users - Allows the user to access information about users including username and password reset.
  • Notifications - Allows the user to setup email notification events upon certain actions by the portal and enable/disable notifications all together.
Service Management

Allows users to have access to Services and allowing access to the Marketplace

For a Service provider, this allows access to the Automator Marketplace.
For a Client, this allows access to the Solution Marketplace.

Solution Management
(Provider Only)

Allows users to manage Solutions. This includes:

  • Pricing - Enables or restricts the ability to manage pricing information associated with a Solution.
    • SKU's - Enables or restricts access to SKU information associated to a pricing unit within a Solution.
    • Unit Price - Enables or restricts access to the pricing unit for a Solution.
    • Contracts - Enables or restricts access to Contract management for Solutions.
  • Solutions - Enables or restricts access the Solutions.
ASA ManagementAllows users to manage the ASA configuration inside Automators.
AuditAllows users to manage the Audit logs. 
HooksAllows users to manage API hooks and write an endpoint for 3rd party software.
Managed AccessAllows users to access a client's account using a proxy username (system@client_domain.com)

Attributes

CreateAllows the permission to create objects.
Example: Create solutions, VM's users, etc...
ReadAllows to permission to only view the object but no action can be applied.
Example: view a vApp but cannot power it on/off or view solutions but cannot modify a price, etc...
UpdateAllows the permission to modify objects.
Example: change a Solution name, change VM name, Change contract duration, etc...
DeleteAllows the permission to delete objects
Example: Delete a VM, delete a contract, delete a user, etc...