Introduction to the Nexeed Multitenant Access Control module

The Nexeed Multitenant Access Control module provides centralized access management in the Nexeed Industrial Application System. The module can be accessed via the Access management menu item.

Main Function

• Management of organizations
• Management of modules
• Access management for and of modules
• Administration of users, groups and roles, as well as the associated permissions
• Support for single sign-on by integrating different identity‑providers
• Management of contracts
• Download reports

Roles and permissions

All modules of the Nexeed Industrial Application System are based on permissions. Depending on the permissions, different functions are available in a module.
To enable functions, the user is assigned a role based on the desired permission. Permissions are managed in the Nexeed Multitenant Access Control module.

The standard configuration of the module includes the following roles:

• Organization Reader
• User Reader
• Reviewer
• Identity Provider Manager
• Group Mapper Manager
• Organization Relation Manager
• Organization Manager
• Provision Contract Manager
• Access Contract Manager
• Activity Log Reader
• Access Configuration Manager
• Access Configuration Reader
• Organization Configuration Manager
• Module Manager
• User
• Access Manager

The Access Configuration Manager and Access Configuration Reader roles include a variety of permissions for reading, creating and editing roles, modules, identity providers and groups. The assignment of the role should be checked carefully.