User Role

Introduction

Users do not have a directly assigned role. Instead, each user is linked to one or more groups, which define their rights and possible actions on the platform.

User groups allow for structuring permissions and assigning rights based on the environments in which a user can operate.

Structure of Roles and Groups

Fundamental Principle

A user does not have a direct role.
A user is always linked to one or more groups.
A group defines access rights and possible actions on the platform.

Group Management

A group can contain multiple users.
A user can be assigned to multiple groups simultaneously.
A group carries the permissions associated with a specific environment.

Environments and Permissions

Each user group is limited to a specific environment and has roles that allow for executing certain actions on the platform.

Types of Environments

User groups can be created to manage actions in three distinct environments:

Environment	Description
FOC (Front Office Customer)	Manages user interactions and actions in the Front Office.
Back Office Operator	Manages the platform as an operator (general administration).
Back Office Supplier	Manages actions specific to suppliers.

Examples of Roles and Permissions

Groups can include several specific permissions, such as:

FOC (Front Office Customer)
- Access to visible products and catalogs.
- Order management.
- Viewing prices and offers.
Back Office Operator
- Management of products and catalogs.
- Order administration.
- Management of prices and commercial offers.
Back Office Supplier
- Management of a supplier’s specific products and offers.
- Viewing and updating stock levels.
- Tracking orders related to their company.

📌 Note: A user can only perform an action if one of their groups has the necessary permission in the relevant environment.

Best Practices and Limitations

Best Practices

Structure groups based on operational needs.
Avoid assigning too many permissions to a single group for better access management.
Always verify the permissions assigned to groups to prevent unwanted access.
Use separate groups for each environment to comply with role management rules.

Known Limitations

A group can belong to only one environment.
A user must belong to at least one group to access the platform.
Permissions are defined at the group level and cannot be assigned directly to users.