3.8 Zegeba Role Matrix

Role Descriptions

Admin

• Description: A superuser with the highest level of access. Admin can perform all actions across the platform.
• Key Permissions:
  • Manage users and assign any role.
  • Create, edit, and delete contexts, tasks, and forms.
  • View, edit, archive, and unarchive all data.
  • Access all resources and MySQL database.

Access Manager

• Description: Responsible for user management. Limited by the permissions they hold in addition to their Access Manager role.
• Key Permissions:
  • Add, edit, or deactivate users.
  • Assign roles to users, but only roles they themselves have access to.
  • Cannot manage or interact with data, tasks, or forms directly unless combined with other roles.

Archive Manager

• Description: Manages the archival status of data or resources.
• Key Permissions:
  • Archive and unarchive contexts, tasks, forms, or resources.
  • Cannot create, edit, or view content unless combined with other roles.

Contexts Admin

• Description: Manages context types and associated tasks.
• Key Permissions:
  • Create, edit, and delete context types.
  • Create, assign, and manage tasks within contexts.
  • View associated data if combined with a data-related role.
  • Cannot manage forms or resources.

Contexts Manager

• Description: Similar to Contexts Admin but lacks the ability to delete context types.
• Key Permissions:
  • Create and edit contexts.
  • Create, assign, and manage tasks within contexts.
  • Limited to managing existing context types unless additional permissions are granted.

Data Collector

• Description: Focused on filling out and managing their own form submissions.
• Key Permissions:
  • Fill out forms assigned to them.
  • Edit their own submitted data.
  • Cannot view or edit other users’ data.

Data Manager

• Description: A power user for data handling, with access to all data the user’s role permits.
• Key Permissions:
  • View all data from assigned forms or contexts.
  • Edit any data accessible to them, not limited to their submissions.
  • Cannot create or edit forms or manage tasks unless combined with additional roles.

Data Viewer

• Description: Read-only access to data from forms or contexts the user has permission to access.
• Key Permissions:
  • View all accessible data.
  • Cannot make edits, submit forms, or interact with tasks.

Database User

• Description: Special technical role for direct access to MySQL database for advanced reporting or integrations.
• Key Permissions:
  • Request temporary whitelisting for database access.
  • Access to all Zegeba data through SQL queries.
  • No permissions to modify, view, or manage data via the application itself.

Form Manager

• Description: Focused on form creation and management.
• Key Permissions:
  • Create and edit forms and folders.
  • Add rules, calculations, and validation to forms.
  • Cannot fill forms or interact with data unless combined with additional roles.

Resource Manager

• Description: Manages files and resources uploaded into the system.
• Key Permissions:
  • Access and manage all files in the Resources section.
  • Upload, delete, or edit files and folders.
  • No access to contexts, tasks, or data unless combined with other roles.

Tasks Admin

• Description: Oversees task templates and configurations.
• Key Permissions:
  • Create, edit, and delete task templates.
  • Cannot assign tasks or interact with contexts or data unless combined with other roles.

Tasks Manager

• Description: Manages tasks and their assignments.
• Key Permissions:
  • Create, edit, and assign tasks to users.
  • Cannot create task templates unless combined with Tasks Admin role.
  • Limited to assigned contexts or tasks based on their permissions.

Tasks User

• Description: Completes tasks assigned to them and fills forms they have access to.
• Key Permissions:
  • View and complete assigned tasks.
  • Access forms necessary for task completion.
  • Cannot create or edit tasks or manage data outside of their assigned scope.