Setting up the "project user" role

The Projects module allows flexible access control to services within the client area. Depending on the assigned role, the user sees only the projects and services they are allowed to access, or manages resources for the entire organization without being tied to a specific project.

After installing the module, the Project User role appears in the platform. It is intended for employees or departments that consume services but do not participate in financial operations. General information on setting up roles is provided in the Setting user roles article.

Role features

The role Project User provides access to ordering and consuming services, but excludes work with financial documents and payments. The Project User:

• does not have access to project management;
• sees only the projects to which he is explicitly added;
• can switch projects;
• does not have access to financial sections (payments, invoices, payers, expenses);
• sees the effective balance in the interface header — the smaller of two amounts: the project spending limit balance and the actual balance on the client account. For example, if the account balance is 0, the effective balance is also 0, regardless of the limit balance;
• orders services in simplified mode: selects a resource and clicks the activation button. Payment is deducted from the client's main account automatically within the available funds;
• if the user is added to only one project, the project switcher in the header is replaced with a static label showing the name of that project. Such a user cannot switch the context;
• receives notifications only for those services and events (for example, approaching the spending limit or failed renewal) that relate to the projects he is included in. Notifications about services in other projects are not sent to him.

Viewing role rights

To view the rights provided by the Project User role:

1. Go to the Clients → User Roles section.
2. Select the Project User role from the list.
3. Click the Rights button.

The open window will display the full list of sections and actions available to a user with this role.

Viewing project participants

To view which users are included in a specific project:

1. Go to the Project Management → Projects section.
2. Select the required project from the list.
3. Click the Users button.

The opened window will display a list of client users included in the project. Users with the Full Access flag are always displayed as included in the project.

Assigning the role to a user

To assign the Project User role to a client user:

1. Navigate to Clients → Users.
2. Create a new user or select an existing one and click the Change button.
3. In the Role field, select the Project User value.
   If the Full Access option is selected in user settings, selecting the Project User role is unavailable.
4. Click the Ok button to save changes.

After the role is assigned, the user will have limited rights within the client area. To allow the user to work with a specific project's services, add them to the project via Project Management → Projects → click Users.

You can use synchronization with external directories to automate role assignment and adding users to projects. For more information, see the article  Installation and configuration of the "Projects" module.

Working with other roles

If a user is assigned a role not related to service consumption (for example, Accounting), they can work in the Project not selected context. In this mode:

• the user does not see services for specific projects even when switching between them;
• all financial operations are available: topping up the account balance, viewing expenses, working with payers and payments;
• the user can switch between projects they are included in, if they have the appropriate rights, but by default they have access to the general balance and account finances.