User roles and authorizations

Assign User Roles

To help you easily manage your user authorizations on IBM Food Trust, predefined Roles are provided. Assigning roles is an efficient way to authorize your registered users to get work done for your Organization. For example, any user assigned to the Onboarding Team role can add products, register facilities, and add new users.

Only an Organization Administrator for your Organization can assign roles. Before assigning roles, the following prerequisites must be met:

• Your Organization and your Organization Administrator must be onboarded to IBM Food Trust.
• Each user being onboarded must have a registered IBMid: https://w3id.sso.ibm.com.

Roles and authorizations

IBM Food Trust Roles and their Authorizations are detailed below for each module (Table 1). Each IBM Food Trust human user can be assigned to multiple roles (system users are not assigned to roles). Note that ONLY the Organization Administrator role inherits authorizations granted by other roles, as described in the table.

Table 1. IBM Food Trust Roles and Authorizations

User Role	Authorizations	Module*
(All registered users)	View Organization's IBM Food Trust home page	Home
	Upload data for user's Organization	Data
	Read and Download all data uploaded by user's Organization	Data
	Read all data shared with user's Organization	Trace
	View and manage documents	Documents
Onboarding Team	Create Products and Facilities	Onboarding
	Create Product Scenarios	Onboarding
	Bulk Upload Product Scenario data	Onboarding
Organization Administrator	Create and Modify human users and system users	Users
	Assign and Modify user roles	Users
	Select or Change Organization's Data Access Control Policy	Onboarding
	View Organization's IBM Food Trust usage	Activity

* Subscriptions required for optional modules

Procedure - Add or Modify Role assignments

An Organization Administrator for your Organization can Add or Modify User Role assignments:

1. Log in to the IBM Food Trust UI, as Organization Administrator.
2. Select the Users component.
3. Select the ACCOUNT USERS tab.
4. To Add Roles for a new human user, select the new user icon. Add the User and select the Roles to assign.
5. To Modify Roles assigned to a human user, select a user a click the edit icon. Select the Roles to assign.