How does roles and permissions (to access EV Portal) work?
Concrete example for a certain user with two Access Groups (2 entry records below), each with its role(s):
Key principle when assigning/updating/removing Groups and Roles. A certain EV Portal user (USER A) can only add/update/remove Groups and Roles to another user (USER B) provided the following two conditions are verified, within each access group:
- USER A has a role assigned to it which contains a permission with ability to manage Users (Create User, Read User, Update User, Delete User).
- The group and permissions that the USER A is trying to change in regard to USER B is a group and role that user A has assigned to himself.
Each of these roles (e.g. Smart Charging Manager) has a set of associated permissions, which will allow the user to perform the respective actions over the assets that belong to Group (e.g. EMPS Contract: EDP Portugal)
On top of the above roles and permissions, there is also the so called ‘Super Admin’ rights (link), which can only be granted to GreenFlux staff, and which grant access to some exceptional user flows as well as to transversal tools within a tenant (e.g. tool to manage tenant creation, tool to manage platform API subscriptions, etc)