How Service Access Rights Are Managed?

Owned by Petteri Kivimäki
Jul 02, 2018

How service access rights are managed?

Access rights can be granted to the following access right subjects.

  • An X-Road member's subsystem.
  • A global access rights group. Global groups are created in the Central Server by the X-Road governing authority. Global groups are available within an X-Road instance. If a group is granted an access right, it extends to all group members.
  • A local access rights group. Local groups are created in the Security Server by the Security Server administrator. Local groups are available only in the Security Server where they are created. If a group is granted an access right, it extends to all group members.

Step-by-step guide

The official documentation regarding access rights management is available at https://github.com/nordic-institute/X-Road/blob/develop/doc/Manuals/ug-ss_x-road_6_security_server_user_guide.md#7-access-rights.

The official documentation regarding global groups is available at https://github.com/nordic-institute/X-Road/blob/develop/doc/Manuals/ug-cs_x-road_6_central_server_user_guide.md#10-managing-the-global-groups.

The official documentation regarding local groups is available at https://github.com/nordic-institute/X-Road/blob/develop/doc/Manuals/ug-ss_x-road_6_security_server_user_guide.md#8-local-access-right-groups.