1️⃣ Adding and Editing Roles and Permissions for any Workspace

To be fully operational, you need to give the right roles and permissions to your workspace users.

To ensure accuracy and accountability, it is important that every user gets the role and permission they need to perform the right actions. The ITONICS Innovation OS provides you with the option to define your own roles and permission scheme per workspace.

Per default, the ITONICS Innovation OS comes with some standard global roles that you can easily change to match your context. You can also create your own roles and assign respective permissions accordingly. The ITONICS permission concept includes an additive permission concept, which means that the respective permissions of each role complement each other. That means that users can have multiple roles assigned and the permissions granted complement each other. For instance, if you have one role assigned that allows you to create elements but not to rate them and a second role assigned that allows you to rate elements but not create them, you will in consequence get the permission to rate and create content elements as per the additive permission concept. 

Read on to learn:

• Role Configuration: How to create and update roles per workspace
• Default Workspace Role: How to change the default role assignment per workspace
• Permission Configuration: How to adjust permissions per role
• What is the default ITONICS role and permission configuration?
• Changing roles of users

Role Configuration: How to create and update roles per workspace?

To change roles or permissions for a workspace, navigate to the "Workspace Roles" settings first. You will find it in your profile in the bottom left corner [1 or 2]. 

Or, when you are already on the administrative pages of your organization settings, go to "Workspaces", and find the workspace for which you want to alter roles or permissions and the respective pen icon. Clicking on the pen icon will take you to the respective workspace settings.

In both cases, you will land on the workspace's settings page. Find the tab "Roles" [3]. Under the tab, you will find the current role scheme of the workspace with the current roles available. The roles are listed. Besides the "Workspace Admin" role, you can now change the name and description of each role by the pen icon [4]. 

To add a new role, find the option create role at the bottom right corner. Once clicked, a modal will open where you can add the title and a description. 

If you want to delete a role, please find the trash icon. 

Default Workspace Role: How to change the default role assignment per workspace?

On the "roles" tab, you can also define the default role that should be assigned to workspace users. Find the option, below "Roles" [3] and select from the list the default role.

Permission Configuration: How to adjust the permissions per workspace role?

In the next tab "permissions" [6], you can now define what actions should be allowed, i.e., the permissions, for the different configured user roles. You will find two menus [7]. One menu is for defining the actions on each content element; the second menu is for defining the actions for each tool/feature (check out the default role and permission scheme below). Click on the name to change between the menus.

Within each menu, the available actions/permission configuration options are listed to the left [8]. In the right column for each action, the allowed roles are mentioned [9]. 

To disable any role from an action, use the X-icon next to the role name [10]. If you want to add any role, click on the arrow at the end of the role selection list and find all other existing roles. Click on the name of the role from the selection menu and add it to the list. 

What is the default ITONICS role and permission configuration

Per default, the ITONICS Innovation OC comes with the following five different roles, i.e., Workspace Admin, Moderator, Evaluator, Scout, and Viewer.

In the following, we list which permissions are given per these roles and:

1. Content permissions
   1. View, Create, Edit, and Delete
   2. Rating
   3. Comment
   4. Attachment
2. Tool permissions
3. Workspace admin-only permissions

1. Content permission rights

Manage*: The term manage refers to all CRUD operations, i.e., create, read, update, and delete.

2. Tool permission rights

Manage*: The term manage refers to all CRUD operations, i.e., create, read, update, and delete.

3. Workspace admin-only permissions

Changing roles of users