Portal User Roles

Portal uses role-based access control to manage what users can do within the SBOM management platform.

Role Overview

Portal has four primary roles:

Role Permissions

Admin

Full access to all Portal features:

Manager

Manage content and sharing:

Contributor

Create and edit content:

Viewer

Read-only access:

Detailed Permission Matrix

Product Permissions

SBOM Permissions

Sharing Permissions

Administration

Assigning Roles

Invite with Role

When inviting users:

1. Go to Settings → Users
2. Click + Invite User
3. Enter email address
4. Select role
5. Click Send Invite

Change Role

Modify existing user's role:

1. Go to Settings → Users
2. Find the user
3. Click on their role
4. Select new role
5. Confirm change

Custom Roles

Creating Custom Roles

For granular control, create custom roles:

1. Go to Settings → Roles
2. Click + New Role
3. Name the role
4. Select permissions
5. Save role

Custom Role Permissions

Select from available permissions:

Products

• products.create
• products.edit
• products.delete
• products.view

SBOMs

• sboms.upload
• sboms.edit
• sboms.delete
• sboms.view
• sboms.export

Sharing

• sharing.external
• sharing.internal
• sharing.approve
• sharing.revoke

Administration

• admin.users
• admin.settings
• admin.audit
• admin.integrations

External User Roles

Customer Roles

External customers have different roles:

Customer Permissions

Role Best Practices

Assignment Guidelines

Principle of Least Privilege

• Start with lowest needed role
• Elevate only when necessary
• Review roles periodically
• Revoke when no longer needed

Role Reviews

Regular role audits:

1. Go to Settings → Users
2. Review user list
3. Check last activity dates
4. Verify roles are appropriate
5. Remove inactive users

API Access by Role

API Scopes

Generating API Keys

1. Go to Profile → API Keys
2. Click + New Key
3. Key inherits your role permissions
4. Additional scope restrictions optional

Troubleshooting

"Access Denied" Errors

• Verify user has correct role
• Check permission matrix
• Confirm resource ownership
• Review custom role settings

Role Not Applying

• User may need to log out/in
• Clear browser cache
• Check for conflicting permissions
• Verify role assignment saved

Next Steps

• Portal Settings
• Organization Management
• Sharing SBOMs