User management
Scope of permissions
The scope of the permissions is the concept that not all permissions have the same impact. Some permissions have impact on a different level.
The schema below shows the relation between the levels in a CHILI GraFx Subscription, to then explain the impact of permissions (roles) on these levels
erDiagram
CHILI-GraFx-Client ||--|{ GraFx-Subscription : Has
GraFx-Subscription ||--|{ GraFx-Environment : Has
A GraFx Subscription
Roles defined on the Subscription level have permission with impact for all environments. These contain operations like managing the lifecycle of identities and environments.
Environment
An environment is the smallest level, where documents are grouped to serve an application. The minimum restriction you can apply to a set of resources, is the environment level.
Roles
Roles (and permissions) on the environment level affect only the specific environment.