Skip to content

Commit f4b3128

Browse files
Minor updates
1 parent 3250017 commit f4b3128

File tree

1 file changed

+7
-15
lines changed

1 file changed

+7
-15
lines changed

content/en/docs/private-platform/configuration/pmp-role-management.md

Lines changed: 7 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -16,10 +16,10 @@ To access the **Role Management** page, go to the **Admin > Manage** section of
1616

1717
Private Mendix Platform 2.0 ships with a set of predefined roles to cover common responsibilities:
1818

19-
* **Developer** - Full access to application development features.
20-
* **Contributor** - Limited access, typically for business users or domain experts contributing to projects.
21-
* **Operator** - Focused on operational tasks such as deployments, monitoring, and cluster management.
22-
* **Administrator** - Highest level of access, with full governance and configuration rights.
19+
* **Developer** - Full access to application development features
20+
* **Contributor** - Limited access, typically for business users or domain experts contributing to projects
21+
* **Operator** - Focused on operational tasks such as deployments, monitoring, and cluster management
22+
* **Administrator** - Highest level of access, with full governance and configuration rights
2323

2424
Admins can create new custom roles tailored to organizational needs.
2525

@@ -54,7 +54,7 @@ The following resources are currently supported:
5454
* Apps - Application-level access control.
5555
* Namespace purposes - Permissions tied to namespaces for deployment or operational segregation.
5656

57-
#### Ownership and Association Rules
57+
The following ownership and association rules apply:
5858

5959
* Apps - An app can only be owned by one group. Ownership is exclusive to ensure clear accountability.
6060
* Namespaces - A namespace can be associated with multiple groups non-exclusively, allowing flexible sharing of operational responsibilities across teams.
@@ -86,8 +86,6 @@ The Group Management page also provides real-time statistics to help administrat
8686

8787
## Permission Synchronization
8888

89-
### Overview
90-
9189
Permission synchronization ensures that role changes in groups are automatically applied to the resources owned or associated with those groups. This mechanism guarantees consistency between governance configurations and actual user access.
9290

9391
### Role Change Propagation
@@ -96,16 +94,12 @@ When a member's role changes in a specific group through admin mode, the update
9694

9795
### Combined Permission Calculation
9896

99-
When multiple roles apply to a member, Private Mendix Platform calculates a combined permission set.
100-
101-
The calculation is performed as a scope union of all roles assigned and inherited.
97+
When multiple roles apply to a member, Private Mendix Platform calculates a combined permission set based on all assigned and inherited roles.
10298

10399
This ensures that the member's effective permissions cover all capabilities granted by any of the roles.
104100

105101
## Roles for Users
106102

107-
### Login and Portal Creation
108-
109103
When a user logs in, they can create a new app in Private Mendix Platform.
110104

111105
The **Teams** page provides visibility into all members associated with the app, along with their roles.
@@ -142,8 +136,6 @@ Roles for inherited members are determined by the **Group Management** page and
142136

143137
### Role Assignment for Users
144138

145-
Direct members receive roles explicitly assigned by the app owner.
146-
147-
Inherited members retain the roles defined in their group context.
139+
Direct members receive roles explicitly assigned by the app owner. Inherited members retain the roles defined in their group context.
148140

149141
This approach ensures consistency. Direct roles can be managed with app-specific assignments, while inherited roles can have governance-driven assignments from group hierarchy.

0 commit comments

Comments
 (0)