User roles and permitted actions matrix

This table outlines the actions in the RAiD user interface and which user roles can undertake those actions.

User roles

Raido Operator is the role assigned to Registration Agency staff. This role may undertake almost every action within the RAiD user interface.

Service Point Admin is the role assigned to staff who need to manage other service point users and API keys within a service point. They also have all the privileges as a Service Point User.

Service Point User is the role assigned to staff who need to mint and edit RAiDs within a service point.

Unauthorised user is any user before they are authorised to user RAiD user interface by a Raido Operator

Permitted actions matrix

Action	Raido Operator	Service Point Admin	Service Point User	Unauthorised user
User management
Log in to RAiD user interface	✔️	✔️	✔️	✔️
Request RAiD user interface authorisation	❌	❌	❌	✔️
Authorise Raido Operator	✔️	❌	❌	❌
Authorise Service Point Admin	✔️	❌	❌	❌
Authorise Service Point User	✔️	❌	❌	❌
Change user role to Raido Operator	✔️	❌	❌	❌
Change user role to Service Point Admin	✔️	✔️ Within own Service Point only	❌	❌
Change user role to Service Point User	✔️	✔️ Within own Service Point only	❌	❌
Enable or disable Raido Operator	✔️	❌	❌	❌
Enable or disable Service Point Admin	✔️	✔️ Within own Service Point only	❌	❌
Enable or disable Service Point User	✔️	✔️ Within own Service Point only	❌	❌
Delete Raido Operator	❌	❌	❌	❌
Delete Service Point Admin	❌	❌	❌	❌
Delete Service Point User	❌	❌	❌	❌
Service Point management
Create new Service Point	✔️	❌	❌	❌
Enable or disable existing Service Point	✔️	❌	❌	❌
Update Service Point information	✔️	❌	❌	❌
Delete Service Point	❌	❌	❌	❌
API key management
Create API key	✔️	✔️	❌	❌
Enable or disable existing API key	✔️	✔️ Within own Service Point only	❌	❌
Extend existing API key	✔️	✔️ Within own Service Point only	❌	❌
Generate API key token	✔️	✔️ Within own Service Point only	❌	❌
Delete API key	❌	❌	❌	❌
RAiD management
Mint new RAiD	✔️	✔️	✔️	❌
Edit existing RAiD	✔️	✔️	✔️	❌
Delete RAiD	❌	❌	❌	❌

Deletions

In order to maintain the integrity of the RAiD system, deleting Users, Service Points, API keys and RAiDs is not possible.