Platform Management & Multi-Organization
🔤 Acronyms? See the Glossary
👤 System Integrator
There are two ways to manager Users: either using the UI, or via the APIs.
When starting the platform for the first time, there is only one default "super-admin" user. This Super Administrator has the full rights to create other users (whether administrators and operators) and to manage the platform. This user cannot be deleted.
Multi-Organization
IPCore Platform supports the definition of multiple “organizations”.
Each organization has its own independant network configurations (LPWAN and IP network definitions) and device configuration. The traffic of an organization is totally isolated from the traffic of other organizations. Using this feature, a platform can mutualize multiple customers or isolate different use cases.
Platform Users
Platform users are in charge of monitoring the platform, setting its configuration (such as defining its limitations) and managing organizations. Platform users can either be an administrator or an operator:
An operator is allowed to change the platform settings, manage organizations — which includes creating an organization and managing its users and rights — or even log into an organization with the administrator privilege. An operator can also manage generic SCHC templates used by its organization.
An administrator has rights similar to the operator with in particular the right to manage platform users (other administrators and operators).
The table below lists all the rights for each platform role.
| Task | Platform administrator 🧑💼 | Platform operator 👤 |
|---|---|---|
| Login | ✔️ | ✔️ |
| Logout | ✔️ | ✔️ |
| Refresh token | ✔️ | ✔️ |
| User's profile | ✔️ | ✔️ |
| Manage instance settings | ✔️ | ✔️ |
| View monitoring dashboards | ✔️ | ✔️ |
| Create organization | ✔️ | ✔️ |
| List organizations | ✔️ | ✔️ |
| Retrieve organization | ✔️ | ✔️ |
| Update organization | ✔️ | ✔️ |
| Activate organization | ✔️ | ✔️ |
| Deactivate organization | ✔️ | ✔️ |
| Delete organization | ✔️ | ✔️ |
| Create instance administrator | ✔️ | ⛔ |
| Create instance operator | ✔️ | ⛔ |
| List users | ✔️ | ✔️ |
| Create organization administrator | ✔️ | ✔️ |
| Create organization operator | ✔️ | ✔️ |
| Retrieve user | ✔️ | ✔️ |
| Update user | ✔️ | ✔️ |
| Activate user | ✔️ | ✔️ |
| Deactivate user | ✔️ | ✔️ |
| Delete user | ✔️ | ✔️ |
| Create instance SCHC template | ✔️ | ✔️ |
| Retrieve instance SCHC template | ✔️ | ✔️ |
| Update instance SCHC template | ✔️ | ✔️ |
| Delete instance SCHC template | ✔️ | ✔️ |
| Manage organization SCHC template | ✔️ | ✔️ |
| Manage range | ✔️ | ✔️ |
| Manage flow | ✔️ | ✔️ |
| Manage network | ✔️ | ✔️ |
| Manage device profile | ✔️ | ✔️ |
| Manage device config | ✔️ | ✔️ |
Organization Users
Organization users' rights are limited to their own organization. They can either have the role of an administrator or an operator.
- Operators create flows to interconnect LPWAN networks and devices to remote private networks where the applications are hosted, and configure compression/fragmentation profiles to apply to the flow.
- Administrators have the additional rights to manage users who can access and use IPCore functionalities within the organization. Administrators also have the right to load new device templates up to the device catalog, which access is restricted to the users of the organization.
The table below lists all the rights for each organization role.
| Task | Organization administrator 🧑💼 | Organization operator 👤 |
|---|---|---|
| Login | ✔️ | ✔️ |
| Logout | ✔️ | ✔️ |
| Refresh token | ✔️ | ✔️ |
| User's profile | ✔️ | ✔️ |
| List users | ✔️ | ⛔ |
| Create organization administrator | ✔️ | ⛔ |
| Create organization operator | ✔️ | ⛔ |
| Retrieve user | ✔️ | Her/himself |
| Update user | ✔️ | Her/himself |
| Activate user | ✔️ | ⛔ |
| Deactivate user | ✔️ | ⛔ |
| Delete user | ✔️ | ⛔ |
| Create instance SCHC template | ⛔ | ⛔ |
| Retrieve instance SCHC template | ✔️ | ✔️ |
| Update instance SCHC template | ⛔ | ⛔ |
| Delete instance SCHC template | ⛔ | ⛔ |
| Manage organization SCHC template | ✔️ | ✔️ |
| Manage range | ✔️ | ✔️ |
| Manage flow | ✔️ | ✔️ |
| Manage network | ✔️ | ✔️ |
| Manage device profile | ✔️ | ✔️ |
| Manage device config | ✔️ | ✔️ |