A workspace admin can create a new user, set the privileges, and assign roles. There are many roles to choose from for a user.

You can also edit an existing user's roles and even change their email address.

To add a new user, click the Add User button. Enter the person's email, and select a role. The person will receive an email confirming them and allowing a login.

Concepts related to role & access management

When an authenticated member attempts to access a resource, the system checks the resource's policy to determine whether the action is allowed.

This section describes the entities and concepts involved in the authorization process.

Resource

If a user needs access to a specific Cloud resource, you can grant the user a role for that resource.

List:

• DSR - Data Subject Request
• DSRP - Data Subject Request Portal
• DS - Data Source (eCommerce data platforms (e.g. Yotpo, Klaviyo, Shopify, etc.))
• WS - Workspace (This is the boundary defined for all dsr, dsrp, ds)
• User - Workspace Users using the PieEye platform
• DSR Task - Data Subject Request Tasks (for eg. drafting manual data report, user gate tasks, email tasks) defined to complete the DSR Workflow

Permissions

Permissions determine what operations are allowed on a resource. In the IAM world, permissions are represented in the form of <resource>.<action>, for example, dsr.delete.

Actions:

• delete