Users, groups & roles¶
Aunsight Data Services controls what people can do through a layered access model. Understanding how the pieces fit together makes it much easier to manage access cleanly across an organization.
How access works¶
Access in Aunsight flows through four connected concepts:
Members → Groups → Roles → Permissions
- Members are the individual people in your organization.
- Members are assigned to groups — not to roles directly.
- Groups carry roles — every member of a group inherits the roles attached to that group.
- Roles carry permissions — each role is a named bundle of permissions that grant access to platform features.
The key rule to remember: you never assign a permission or a role directly to a person. You put people in groups, and groups carry the roles that grant access. This keeps access consistent and easy to audit — to change what a set of people can do, you change the group's roles once rather than editing each person.
The Members space¶
Members, groups, and roles are all managed from the same place — the Members space for an organization, reached from the organization menu. Within it you'll find separate tabs for Members, Groups, and Roles.
Admin-level permissions are required to create, modify, or delete members, groups, or roles.