Docs
Overview
This section defines the roles created within each customer org subdomain, and how new users are invited. These roles are specific to customer organizations and their subdomains. They do not apply to teluul.teluul.com and cms.teluul.com, which use the standard Django admin page and default users for now.
These roles only apply to a subdomain such as johnsinsurancecorp.teluul.com, not the main site (teluul.com). No role, including Super Administrator, can create or manage subdomains. They can only control their own subdomain
Admin roles
- Super Administrator
- Administrator
- IAM Administrator
- Billing Administrator
1. Super Administrator
Assigned to the creator of a business account. It should only be assigned to users who are allowed to perform all privileged actions. Only a Super Administrator can assign this role to other team members.
- Can do: full control over everything.
- Cannot do: N/A.
2. Administrator
For anyone who needs similar access as the account owner. They can see and manage almost everything.
- Can do: full control over everything except IAM and Billing.
- Cannot do: IAM Administrator permissions, Billing Administrator permissions.
3. IAM Administrator
The Identity and Access Management (IAM) role is for people who need to invite team members and assign roles. They can also remove any user except Super Administrators.
- Can do: invite team members, assign roles to team members.
- Can do: invite team members, assign roles to team members.
4. Billing Administrator
For anyone who needs access and control over the billing and payment system for the organization. This includes assigning access to users who pay for their product tools using their own payment information.
- Can do: add, edit, and remove billing information for the organization; make payments on behalf of the organization; designate specific users to use their own billing information to pay for their own product tools.
- Cannot do: everything else unless assigned additional roles.
Standard Roles
- Full Standard
- Limited Standard
1. Full Standard
For anyone who needs access to all of the product tools, the ability to free trial them, and the ability to unlock them after the free trial for continued use. Typically assigned to employees of the organization.
- Can do: access product tools assigned to them by an administrator; free trial other product tools not assigned to them; unlock edit/import product tools for continued use after the free trial has expired
- Cannot do: everything else unless assigned additional roles
2. Limited Standard
For anyone who needs the product tools assigned to them, without the ability to free trial or unlock other product tools. Typically assigned to non-employee contractors.
- Can do: access product tools assigned to them by an administrator
- Cannot do: everything else unless assigned additional roles
Developer Roles
-
Developer
1. Developer
For developers who need to set up a Teluul integration. This role has access to the secret key, which grants access to almost all API resources.
- Can do: create, view, edit, and delete API keys; view events and logs; create, view, edit, and delete API integrations between product tools and outside platforms in both production and sandbox environments
- Cannot do: everything else unless assigned additional roles
Sandbox roles
- Sandbox Admin
- Sandbox User
1. Sandbox Admin
For people who need to create and manage sandboxes for testing and need Administrator level privileges in all sandboxes.
- Can do: create, edit, and delete sandboxes; add users with the Sandbox User role to any sandbox; remove Sandbox Users from sandboxes; full admin access inside sandbox environments
- Cannot do: everything else unless assigned additional roles
2. Sandbox User
For people who only need to manage sandboxes for testing purposes.
- Can do: access sandboxes assigned to them by a Sandbox Admin
- Cannot do: everything else unless assigned additional roles
