Concepts
Platform, account and tenant; capability, solution, role and permission — the ideas the product is built on.
inlorus's screens are built on a few ideas, and without knowing them the screens can look odd: the same menu shows five groups to one person and one group to another; the same button works in one tenant and is refused in the next; a value can be written in one tenant and not in another. This section explains why.
The concepts are: the three scopes (platform, account, tenant) and how they connect; the path a capability takes from draft to being installed in a tenant; the five role archetypes and permission keys in the form <resource>.<verb>; how policy and configuration flow down from the scope above to the one below and why floors cannot be relaxed; the parts of the console that work the same way on every screen, and the four states a screen can show you.
These articles don't walk you through a task step by step; they explain why a task works the way it does. Come back here when you can't make sense of a refusal message or a screen that looks empty; the answer to most situations lies in the sentence “authority comes from an assignment, not from a key”.
Articles in Concepts
- ConceptPlatform, account and tenantEverything in inlorus sits in one of three nested scopes. Where you are decides what you see and what you can do.
- ConceptCapability, solution and activation: a capability's pathA capability starts as a draft in a studio, is published, may go into a solution, and only does work once it is opened and installed in a tenant.
- ConceptRoles, permission keys and why an action was refusedEvery permission is a key of the form
<resource>.<verb>; roles are bundles of these keys. A refusal tells you that you do not hold that key in that scope. - ConceptHow policy and configuration flow down: inheritance and floorsFor a setting a tenant has no record for, the account's value applies first, and if there is none, the Platform's. For some settings a higher scope sets a floor: the lower scope can tighten it but not loosen it.
- ConceptParts of the console: menu, scope switcher, ⌘K, account menu and HelpThe console opens with the same frame on every screen. Once you know its parts, you can find your way in any scope.
- ConceptThe four states a screen can show“Nothing here” can mean four different things: you don't have access, it isn't switched on, it doesn't apply in this scope, or a change is pending. inlorus tells you which.