Authorization & Roles

The Project Portal has several endpoints that are locked behind authorization. As of now, all management endpoints (create, update, delete) require the role Fusion.ProjectPortal.Admin. This role is defined in the Azure Portal => Enterprice Applications. When a user has this role, the auth token will automatically contain the claim required for the application.

A user cannot apply for the role itself. An admin must perform these steps. Below is a quick guide on how to do that.

Add user to role

1. Locate and select the Enterprise Application: Project Portal Prod
2. Click Users and Groups
3. Select `Fusion Project Portal Administrators
4. Click Members
5. Click the ➕ Add members button
6. Locate the user you want to add. The role should be automatically selected (as long as there's no other role defined)
7. Click Assign

Remove user from role

To remove a user, simply select the user and click 🗑️ Remove

Authorization

Giving permission, rights, or access to someone or something. It involves verifying the identity and privileges of an individual or entity to ensure they have the necessary authority to perform a specific action or access certain resources.

In the context of software systems, authorization typically involves controlling and managing user access to various functionalities or data based on predefined permissions and roles. It ensures that only authorized individuals can perform certain actions or view specific information within the system.