Permissions in JustPerform
Permissions provide ease in maintaining fine-grain authorizations for controlling user group access at a detailed task level and managing data with the help of role access. In JustPerform, permissions are managed through Users and Roles. Both components derive and manage access and user control on the platform.
Permissions in JustPerform are managed through the following features:
Access Review: Displays the summary of tasks and categories and the level of access each role has for them. This is arranged by apps.
Users: Views user details like name, email ID, role(s) assigned to the user, the time the user last accessed the workspace, and to add users to the space.
Roles: Manages authorization and data permissions for each role as well as assign roles to existing users.
Access Review
The Access Review feature provides a comprehensive summary of the permissions and roles associated with various tasks and categories, organized by applications. It offers a clear, structured view of access levels, enabling users to understand the distribution of permissions across roles within the space.
The feature is divided into three tabs: Permissions, Data, and Users, each offering targeted insights into different aspects of access control. Users can locate specific information through a keyword search and can also export the data as an Excel workbook, making it easy to share or analyze access summaries offline.
Users
The Users feature allows managing users that require access to the space level.
Key functions include:
Add users to the current space when the user is already created.
Assign users to a role that defines what tasks they can perform and what data they can access.
Search for a particular user.
Import and export functions that use an Excel interface to import/export user information.
Purpose
JustPerform allows Workspace administrators to add and manage users. This includes adding users to the space, assigning roles to users, making users the space owner, enabling SSO for users, and enabling licenses for users. Users are assigned respective roles that give them access to objects and data, defining what tasks they can view or actions they can perform within the space.
Users are created by the administrator, and roles are created by the builder or modeler from the Roles page. Users can access the contents of the space only after they are added to the space. This is done from the Users page. All user management functionalities are stacked together in a single panel under the Users tab, which helps in managing users. Using this page, administrators can add and manage users, and assign roles to them.
The Users page helps to add, update, and delete users at space levels. It provides access to assign users to specific roles and licenses, which helps in enabling the level of access to be granted to a user.
Roles and Responsibilities: Workspace Owner vs Workspace Admin 
In JustPerform, the Workspace Owner and Workspace Admin both manage users, but their authority levels differ significantly.
-
The Workspace Owner holds the highest level of control, with full access to all workspace settings, including user and license management, assigning roles, enabling SSO, and making users space owners.
They have comprehensive oversight across all spaces within the workspace.
In contrast, the Workspace Admin supports user management functions such as adding users and assigning roles.
Essentially, the Workspace Owner has full administrative rights, while the Workspace Admin has limited administrative capabilities focused on user onboarding and access setup.
Space Owner
When a user is added to a space, there's an option to make the user the space owner. Think of the space owner as an admin at the space level. A workspace can have multiple spaces with space owners for each.
Space owners can:
View, access, and manage the assigned space.
Add existing users to the space from the workspace.
Delete any users at the space level.
Roles
The Roles feature defines what users can do, what tasks they can perform, what data they have access to, and what objects they can view or edit.
A list of roles is created based on the user types across the organization. User types generally follow the people who manage the system, who consume and contribute to the system, etc.
Key functions include:
Add roles: Create new roles. No default roles are available when you create a workspace.
Manage roles: Manage new/existing roles, changing the access roles for the selected roles.
Role Assignment: Assign users to roles, which can be single or multiple roles together.
Import and Export functions are included in the More button on the header of the page.
Import
If a high number of users or roles need to be defined/modified, an Excel file can be uploaded onto the system for user/roles creation. The import function can be used when the following conditions are met:
Lists of users or roles have been identified and prepared by the team.
Lists of users or roles are predefined in the Excel format defined in the platform.
Export
The export function is used when users want to extract the current data from the platform for reference or maintenance purposes. By default, all export files will be in Excel format.
Role Management
JustPerform allows the creation of roles with fine-grained authorization, meaning access can be given to each individual task and control can be granted with read, write, or update access only. This powerful authorization module helps organizations delegate and manage their own FP&A processes without relying on a central administrator.
Role management helps in creating custom roles and managing them for all user types at the space level. Users are assigned respective roles that give them access to model data and define what tasks they can view or actions they can perform within the space.
All the role management functionalities are grouped together in a single panel under the Roles tab, which helps in managing roles, assigning tasks, and controlling data.
Note: Roles are created and assigned only at the Space level.