You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/en/docs/private-platform/configuration/pmp-role-management.md
+7-15Lines changed: 7 additions & 15 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -16,10 +16,10 @@ To access the **Role Management** page, go to the **Admin > Manage** section of
16
16
17
17
Private Mendix Platform 2.0 ships with a set of predefined roles to cover common responsibilities:
18
18
19
-
***Developer** - Full access to application development features.
20
-
***Contributor** - Limited access, typically for business users or domain experts contributing to projects.
21
-
***Operator** - Focused on operational tasks such as deployments, monitoring, and cluster management.
22
-
***Administrator** - Highest level of access, with full governance and configuration rights.
19
+
***Developer** - Full access to application development features
20
+
***Contributor** - Limited access, typically for business users or domain experts contributing to projects
21
+
***Operator** - Focused on operational tasks such as deployments, monitoring, and cluster management
22
+
***Administrator** - Highest level of access, with full governance and configuration rights
23
23
24
24
Admins can create new custom roles tailored to organizational needs.
25
25
@@ -54,7 +54,7 @@ The following resources are currently supported:
54
54
* Apps - Application-level access control.
55
55
* Namespace purposes - Permissions tied to namespaces for deployment or operational segregation.
56
56
57
-
#### Ownership and Association Rules
57
+
The following ownership and association rules apply:
58
58
59
59
* Apps - An app can only be owned by one group. Ownership is exclusive to ensure clear accountability.
60
60
* Namespaces - A namespace can be associated with multiple groups non-exclusively, allowing flexible sharing of operational responsibilities across teams.
@@ -86,8 +86,6 @@ The Group Management page also provides real-time statistics to help administrat
86
86
87
87
## Permission Synchronization
88
88
89
-
### Overview
90
-
91
89
Permission synchronization ensures that role changes in groups are automatically applied to the resources owned or associated with those groups. This mechanism guarantees consistency between governance configurations and actual user access.
92
90
93
91
### Role Change Propagation
@@ -96,16 +94,12 @@ When a member's role changes in a specific group through admin mode, the update
96
94
97
95
### Combined Permission Calculation
98
96
99
-
When multiple roles apply to a member, Private Mendix Platform calculates a combined permission set.
100
-
101
-
The calculation is performed as a scope union of all roles assigned and inherited.
97
+
When multiple roles apply to a member, Private Mendix Platform calculates a combined permission set based on all assigned and inherited roles.
102
98
103
99
This ensures that the member's effective permissions cover all capabilities granted by any of the roles.
104
100
105
101
## Roles for Users
106
102
107
-
### Login and Portal Creation
108
-
109
103
When a user logs in, they can create a new app in Private Mendix Platform.
110
104
111
105
The **Teams** page provides visibility into all members associated with the app, along with their roles.
@@ -142,8 +136,6 @@ Roles for inherited members are determined by the **Group Management** page and
142
136
143
137
### Role Assignment for Users
144
138
145
-
Direct members receive roles explicitly assigned by the app owner.
146
-
147
-
Inherited members retain the roles defined in their group context.
139
+
Direct members receive roles explicitly assigned by the app owner. Inherited members retain the roles defined in their group context.
148
140
149
141
This approach ensures consistency. Direct roles can be managed with app-specific assignments, while inherited roles can have governance-driven assignments from group hierarchy.
0 commit comments