CIC-Docs/spec/004_Platform_Roles.md

39 lines
8.0 KiB
Markdown

| Role | Current permissions | Expected permissions |
|-------------------|----------------------------------------------------------------------------------------------------------- |--------------------------------------------------------------------------|
| Sempo admin | Presumably all actions since it is currently the highest tier. However these are the notable permissions: | |
| | 1. Interact with organizations API | |
|-------------------|------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------|
| Super admin | 1. Edit and assign roles. (Entails, creation and deletion of invites) | 1. Assign the roles (Sub Admin, Enroller, View Only). |
| | 2. Modify transfer statuses. | 2. See private data. |
| | 3. Edit organization data. | 3. Add users. |
| | 4. Delete users. | 4. Edit user fields. |
| | 5. Interact with Wyre account API for KYC applications. | 5. Pin reset. |
| | | 6. Disbursement and reclamation (without approval). |
| | | 7. Give approval to Enrollers. |
|-------------------|------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------|
| Admin | 1. Post to transfer usage API. | 1. See private data. |
| | 2. View admin list and corresponding invites. 3. Can create admins but cannot set organization id. | 2. Add users. |
| | 3. Can create admins but cannot set organization id. | 3. Edit user fields. |
| | 4. Can view external auth credentials. | 4. Pin reset. |
| | 5. Can upload a spreadsheet. | 5. Disbursement and reclamation (without approval). |
| | 6. Can interact with Dataset API. | 6. Give approval to Enrollers. |
| | 7. Can interact with export API. | |
| | 8. Create and view saved filters. | |
| | 9. Edit transfer account data. | |
| | 10.Edit user data. | |
| | 11.Create credit transfer including bulk transfer. | |
| | 12.Confirm withdrawal. | |
|-------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Subadmin/Enroller | 1. View transfer usages. | 1. See private data. |
| | 2. Enter KYC details. | 2. Add users. |
| | | 3. Edit user fields. |
| | | 4. Pin reset. |
| | | 5. Initial Disbursement only (1 time per user with a max of 400). |
| | | 6.Disbursement (besides initial) and reclamation(with approval of Admin).|
|-------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Private View Only | | 1. View private data and no ability to edit. | |
| | | Private data includes, names, phone numbers, location. |
| | | |
|-------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Public View Only | | 1. View public data only and no ability to edit. |
|-------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|