User roles and permitted actions matrix
This table outlines the actions in the RAiD user interface and which user roles can undertake those actions.
The RAiD is under active development and not all available functions may appear on this page.
User roles
Operator is the role assigned to Registration Agency staff. This role may undertake almost every action within the RAiD user interface.
Service Point Admin is the role assigned to staff who need to manage other service point users and API keys within a service point. They also have all the privileges as a Service Point User.
Service Point User is the role assigned to staff who need to mint and edit RAiDs within a service point.
Unauthorised user is any user before they are authorised to user RAiD user interface by a RAiD Operator or Service Point Admin.
Permitted actions matrix
Action | Operator | Service Point Admin | Service Point User | Unauthorised user |
---|---|---|---|---|
User management | ||||
✔️ | ✔️ | ✔️ | ✔️ | |
❌ | ❌ | ❌ | ✔️ | |
✔️ | ✔️ Within own Service Point only | ❌ | ❌ | |
Change user role to Operator | ✔️ | ❌ | ❌ | ❌ |
Change user role to Service Point Admin | ✔️ | ❌ | ❌ | ❌ |
Change user role to Service Point User | ✔️ | ❌ | ❌ | ❌ |
Enable or disable Operator | ✔️ | ❌ | ❌ | ❌ |
Authorise existing Service Point User or Admin for second Service Point | ✔️ | ❌ | ❌ | ❌ |
Enable or disable Service Point Admin | ✔️ | ✔️ | ❌ | ❌ |
Enable or disable Service Point User | ✔️ | ✔️ | ❌ | ❌ |
Delete Operator | ❌ | ❌ | ❌ | ❌ |
Delete Service Point Admin | ❌ | ❌ | ❌ | ❌ |
Delete Service Point User | ❌ | ❌ | ❌ | ❌ |
Service Point management | ||||
Create new Service Point | ✔️ | ❌ | ❌ | ❌ |
Enable or disable existing Service Point | ✔️ | ❌ | ❌ | ❌ |
Update Service Point information | ✔️ | ❌ | ❌ | ❌ |
Delete Service Point | ❌ | ❌ | ❌ | ❌ |
API key management | ||||
Create API key | ✔️ | ✔️ | ✔️ | ❌ |
Delete API key | ❌ | ❌ | ❌ | ❌ |
RAiD management | ||||
Mint new RAiD | ✔️ | ✔️ | ✔️ | ❌ |
Edit existing RAiD | ✔️ | ✔️ | ✔️ | ❌ |
Delete RAiD | ❌ | ❌ | ❌ | ❌ |
Deletions
In order to maintain the integrity of the RAiD system, deleting Users, Service Points, API keys and RAiDs is not possible.