Architecture
Access
Which CobraSphere products a person may open.
Product access
Product access says which CobraSphere products a person may open. It belongs to the person, not to an organisation.
| Product | Who may open it |
|---|---|
| Account | Everyone with a CobraSphere account. No grant is needed |
| Partner | People with an active grant for Partner |
| Proposals | People with an active grant for Proposals |
| Insider | People with an active grant for Insider |
CobraSphere administrators open every product without a grant.
Grants
- A CobraSphere administrator makes each grant, for one person and one product.
- A grant can be revoked. A revoked grant is kept as a record and is never deleted.
- The products ask the identity service which products the signed-in person may open, so the answer is the same everywhere.
Access and roles
Product access and roles are separate.
- Product access decides whether a person may open a product at all.
- A role decides what the person may do for one organisation. See Roles.
A person can hold the Owner role in their organisation and still need a grant to open Partner.