Get Started with Role-Based Access Control in IDV Platform

Role-Based Access Control (RBAC) in IDV Platform allows users to review their access and, depending on their responsibilities, manage user accounts, groups, roles, and permissions.

You may only need to view information and perform your daily tasks, or you may be responsible for managing access for other users.

This guide helps you identify where to start based on your responsibilities and the tasks you need to perform.

If you are the Platform Administrator responsible for setting up user access in your organization, see Configure RBAC in IDV Platform.

Basic Concepts

Role-Based Access Control (RBAC) determines which IDV Platform features and resources users can access and which actions they can perform.

Access is managed through permissions, roles, and groups:

• Permissions determine which resources users can access, such as sessions, workflows, and profiles, and which operations they can perform, such as viewing, creating, updating, or deleting.
• Roles are sets of permissions that define access to Platform features and resources.
• Groups organize users and provide access through assigned roles.
• Users receive permissions through the roles assigned to their groups.

Roles are assigned to groups, not directly to users. A user can belong to multiple groups and inherits the combined permissions from all roles assigned to those groups.

For a detailed explanation of the permission model, see Role-Based Access Control.

Key Rules for Managing Access

If your responsibilities include managing users, groups, or roles, consider the following rules:

• Users
  • A user can belong to multiple groups.
  • Users cannot activate or deactivate their own accounts.
• Groups
  • A group can contain multiple users and have multiple roles assigned.
  • A custom group can be created without users or roles.
  • Users cannot manage role assignments for groups they belong to.
  • The All Users group and Default Role Groups have restrictions on modification.
• Roles and permissions
  • Roles are assigned to groups, not directly to users.
  • Permissions from all assigned roles are combined. One role cannot restrict access granted by another.
  • Access to individual resources may depend on specific Entity IDs and whether a user is the resource creator.
  • Users can create or edit roles only within the limits of their own permissions.

For a complete list of rules and restrictions, see Role-Based Access Control.

Before You Start

Before working with roles, groups, or users, identify your responsibilities and the tasks you need to perform.

Depending on your task, consider the following:

• Your roles and permissions—review your assigned access and the actions available to you. For details, see Understand Your Permissions.
• Your group memberships—check which groups you belong to and which roles are assigned to them. For details, see My Roles and Groups.
• Users and responsibilities—identify whose access you need to manage and what tasks they need to perform.
• Existing groups and roles—determine whether the required groups and roles already exist and can be reused. For details, refer to View Groups and View Roles.
• Required access—if your task involves configuring permissions, identify which Platform resources users need to access and which operations they need to perform.
• Group structure—if you need to organize user access, consider how users should be grouped by team, department, or responsibility.

You do not need to complete all these checks. Focus on the information relevant to your task.

Note

Available features and actions depend on your assigned roles and permissions. If you cannot perform a task required for your work, contact your Platform Administrator.

Start with Your Task

Choose the task that matches your responsibilities.

What you need to do	Where to start
Understand how roles, groups, and permissions work	Basic Concepts
Review your assigned roles and group memberships	My Roles and Groups
View or search for users	Manage Users
Create or manage user accounts	Manage Users
View existing groups and their members	Manage Groups
Add users to or remove users from groups	Manage Groups
Assign or remove roles for a group	Manage Groups
Review existing roles and their permissions	Manage Roles
Create, duplicate, or edit roles	Manage Roles
Configure role permissions	Configure Role Permissions

If your task involves managing user access, you may be able to use existing groups and roles without creating or modifying them.

For example, if you only need to add a user to an existing group, start with Manage Groups. You do not need to configure role permissions unless the existing roles do not provide the required access.

Where to Start Based on Your Current Setup

If your responsibilities include configuring or updating user access, review the existing roles and groups before making changes.

You may be able to reuse existing configurations instead of creating new ones.

The following table helps you determine where to start.

Your current setup	Start with	What to do
No suitable role or group exists	Roles, Groups	Create or duplicate a role, configure its permissions, create a group, assign the role, and add users.
A suitable role exists, but no suitable group	Groups	Create a group, assign the existing role, and add users.
A suitable group exists, but no suitable role	Roles	Create or duplicate a role, configure its permissions, and assign it to the existing group.
A suitable group and role already exist	Assign Roles to Groups, Add Users to Groups	Assign the role if needed and add users to the group.

You only need to perform the actions relevant to your task and assigned permissions.

After making changes, verify that the affected users can access the required Platform features and resources and perform the intended actions.

For practical examples of configuring access for different teams and responsibilities, see Role Management Use Cases.

Next Steps

For detailed instructions see:

• My Roles and Groups—review your assigned roles, permissions, and group memberships.
• Manage Users—view, create, and manage user accounts.
• Manage Groups—view and manage groups, assign roles, and add or remove members.
• Manage Roles—review, create, duplicate, and manage roles.
• Configure Role Permissions—configure scopes, operations, and entity-level access for roles.
• RBAC Use Cases—explore practical scenarios for managing access for different teams and responsibilities.