Content Comparison

...

1. This design only affects BIE access. This design would not apply to CC access.

2. Score will use Auth0 for authentication and authorization.

   1. Out of the box, Auth0 supports

      1. Managing users

      2. Managing roles

      3. Managing user-role relationships

3. Only administrators may manage business contexts in Score.

4. Each business context may have zero-to-many roles associated with it (managed only by administrators). See Figure 3.

   1. There are many ways to design the UI to show roles associated with a business context and to add/delete them. Figure 3 is just one example.

   2. The built-in roles will be supported (end user, developer, admin) as Score_End_User, Score_Developer, and Score_Admin roles in Auth0.

   3. Tenant roles role names in Auth0 will begin with Score_Tenant_ followed by a short name. E.g., Score_Tenant_AgGateway.

5. A user may only access BIEs associated with business contexts that are associated with one of the user’s roles.

...