User Access Management

Instalink's authorization system allows account managers to control user access at both the account level and billing group level. Users can be invited to individual accounts or to billing groups, which grants access to all accounts within that billing group. This flexible system enables organizations to efficiently manage user permissions across their data integration infrastructure.

User Roles and Permissions

There are three distinct user roles within the Instalink authorization system, each with specific capabilities:

Feature	Observer	User	Manager
View Account Data	✓	✓	✓
View Projects and Processes	✓	✓	✓
Access Logs and Reports	✓	✓	✓
Generate Reports	✓	✓	✓
Manually Run Data Flows	✓	✓	✓
Create and Edit Projects		✓	✓
Manage Processes and Transformations		✓	✓
Create and Manage Connectors		✓	✓
Manage Log Report Definitions		✓	✓
Edit Account Settings			✓
Create New Accounts in Billing Group			✓
Create and Manage Access Invitations			✓
Modify User Roles and Access			✓
View System and Processor Information			✓

Inviting Users

Account managers can invite users to either specific accounts or to billing groups. Account-level invitations grant access to a single account, while billing group invitations grant access to all accounts within that billing group (including any accounts added to the group in the future).

To invite a user:

1. Navigate to either the account view (for account-level access) or the billing group view (for billing group access)
2. Locate the "User Access Management" section
3. Click "Invite a user to this account" or "Invite a user to this billing group"
4. Enter the email address of the user you wish to invite
5. Select the appropriate access role (Manager, User, or Observer)
6. Create the invitation

The system will automatically send an email invitation to the specified address containing a secure link to accept the invitation.

When an invitation is created, the system generates a secure token and sends an email to the invited user with instructions on how to accept the invitation. If the invitee does not have a user account on Instalink, the invite process will allow them to create a new account for themselves. All invitations expire exactly 7 days after creation.

Managing Existing User Access

Account and billing group managers can modify or remove user access through the user access management interface. This functionality is available in both account views and billing group views.

Modifying User Roles

To change a user's access role within an account or billing group:

1. Navigate to the appropriate account or billing group view
2. Locate the user in the "User Access" section
3. Select the desired new role from the access role dropdown
4. Save the changes

Role changes take effect immediately and apply to all resources within the account or billing group scope.

Removing User Access

To remove a user's access to an account or billing group:

1. Access the account or billing group view containing the user
2. Find the user in the "User Access" list
3. Click the delete button next to the user's entry
4. Save the form to apply the change

Removing access deletes the corresponding UserAccess record and immediately revokes all permissions for that account or billing group. Users will no longer be able to access any resources within the specified scope.