Antylogic
DemoApp login

399 operational guides

Docs sections
DocsAccess
Device

How to review user roles

Open a user from Access > Users to see which roles are already assigned in Harbor Demo Group or Harbor Soho. This read-only review marks existing role assignments; it does not add or remove access.

In this article

User role review helps access administrators confirm what a user can already do before making any changes. In Harbor Demo Group, the organisation view shows organisation-scoped assignments; in Harbor Soho, the location view shows assignments for that selected location.

The page combines two pieces of information: the role catalogue supplies role names, scopes and descriptions, while the user's `UserRole[]` assignments decide which rows are selected.

This guide covers review only. Assigning roles, removing roles and saving selection changes belong to separate actions.

Before you start

  • The operator is signed in to Antylogic.
  • Harbor Demo Group is selected as the organisation.
  • For location-level review, Harbor Soho is selected as the location.
  • The operator can view users and has `permissions:view` for the relevant organisation or location context.
  • The user detail page is opened from Access > Users or by the route `organization/access/users/:userId` or `location/access/users/:userId`.

Instructions

  1. 1.

    Open Access Users

    Open the Users tab from organisation access for Harbor Demo Group, or from location access for Harbor Soho. This is the entry point before choosing the user whose roles need review.

  2. 2.

    Open the user detail

    Choose the user to review. Antylogic opens the matching detail route with the selected organisation context and, for Harbor Soho, the selected location context.

  3. 3.

    Review selected roles

    In User roles within the organization or Location roles, selected rows show the role ids already assigned to the opened user. Unselected rows may still appear because the role catalogue loads separately.

  4. 4.

    Use review-only access

    If the operator can view permissions but cannot manage them, assigned roles can still be visible for review. Selection controls and Save changes are part of editable access, not this list action.

  5. 5.

    Recognise owner access

    If the opened user is the organisation owner, Antylogic can show an Owner role. Treat it as system-owned access: visible for clarity, disabled where edit controls exist, and not handled like a normal role assignment.

Validations and limits

  • The organisation read is `GET /api/app/{orgId}/users/{userId}/roles` and returns `UserRole[]`.
  • The location read is `GET /api/app/{orgId}/{locationId}/users/{userId}/roles` and returns `UserRole[]`.
  • The read requires `permissions:view`; do not document `permissions:manage` alone as sufficient for this backend read.
  • The action lists role assignments only. Role names, scopes and descriptions come from the role catalogue request.
  • Location-level listing is filtered to the selected `location_id`, except for the synthetic owner role case.
  • This action does not create, remove or synchronise assignments. Those behaviours belong to assign and remove actions.

Expected result

The operator can confirm the user's current role assignments in Harbor Demo Group or Harbor Soho without changing access.

Related articles