Platform, account and tenant
Everything in inlorus sits in one of three nested scopes. Where you are decides what you see and what you can do.
For: Platform administrator, Builder, Account administrator, Tenant administrator, Operator, Auditor, Member
The three scopes
inlorus has three scopes, each inside the one before it. A tenant always belongs to an account, and every account belongs to the platform.
| Scope | What it is | What happens here |
|---|---|---|
| Platform | The top scope of inlorus; it covers every account. | Accounts are opened, roles are defined, policy floors and platform configuration live here, and platform capabilities are built. |
| Account | An organisation's scope; it holds that organisation's tenants together. | Tenants are opened and closed, the account's people are given roles and publishing rights, and the account's own capabilities are published. |
| Tenant | The scope where the work gets done: a workspace. | Members, teams, apps, records and their configuration live here; capabilities are switched on here. |
Scope lives in the assignment, not in the key
A permission is a key such as role.write or config.read, and no scope name appears inside the key. The assignment decides the scope: give someone a role on the platform and that role's keys apply on the platform; give it in a tenant and they apply in that tenant.
Read, write and publish rights granted in a higher scope flow down to the scopes below it: a role given in an account also works in that account's tenants. The one exception is deletion (purge): because it cannot be undone, it is granted only by an assignment in the scope that owns the data and never flows down from above.
Scope in the console
The scope switcher in the top bar shows which scope you are working in. If you have a place in more than one scope, you switch here; the menu re-sorts for the scope you pick but keeps its shape. If you have only one scope, the switcher is just a line, not a button.
Tip If a screen says “This screen works in a tenant scope”, the screen is not broken; switch to a tenant with the scope switcher.
The scope switcher offers every scope a role of yours reaches, so an administrator of the platform or of an account can switch to a tenant they are not a member of and govern it. A tenant's records and applications — Explorer, Analysis, Catalog, the flow boards, an application's workspaces — are opened by its members. At a tenant you are not a member of those screens say “You are not a member of …” and show nothing of any other tenant; ask a Tenant administrator to add you as a member, or switch to a tenant you are a member of.