# Organization Management and Authority

## **Authority**

There are two types of permissions in DFINERY:

<figure><img src="https://content.gitbook.com/content/KGOeGww72vu5In7SeJ8c/blobs/thgDRRQl9TqRnDX9E6eA/5.%E1%84%8C%E1%85%A9%E1%84%8C%E1%85%B5%E1%86%A8,%E1%84%89%E1%85%A5%E1%84%87%E1%85%B5%E1%84%89%E1%85%B3%20%E1%84%80%E1%85%AF%E1%86%AB%E1%84%92%E1%85%A1%E1%86%AB.png" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}

* **Organization Permissions**\
  An organization can own and operate one or more services. Organization permissions are divided into Owner/Organization Manager/Member, and the areas accessible by permission are listed in the table below.

> ***Example:***\
> Company A employee Kim signed up for the DFINERY Console and created an organization called A.&#x20;
>
> Kim is the owner and organization administrator of organization A. (Automatic permission granted when creating an organization) The owner and organization administrator of an organization are automatically granted service administrator permission.\
> \
> Company A operates two brands, α and β. Kim created services α and β within organization A.&#x20;
>
> Kim invited Lee, the person in charge of brand α, and Park, an intern for brand β, to organization A and granted them 'member' status with authority over the organization.
> {% endhint %}

{% hint style="info" %}

* **Service Permissions**\
  Service permissions are divided into service manager/operator/viewer. Please refer to the table below for areas accessible by permission.

> ***Example:***\
> Mr. Kim granted service rights corresponding to 'Operator' to Mr. Lee, who is in charge of α.&#x20;
>
> Mr. Kim granted service rights corresponding to 'Viewer' to Mr. Park, an intern at β.

\
\&#xNAN;***Example console screen***

<img src="https://content.gitbook.com/content/KGOeGww72vu5In7SeJ8c/blobs/C7hrLMB5PT34Owi3dDAU/image.png" alt="" data-size="original"><br>
{% endhint %}

## **Organizational authority**

<figure><img src="https://content.gitbook.com/content/KGOeGww72vu5In7SeJ8c/blobs/C9sagRzaZ00PQaVvQnLT/5.%20%E1%84%8C%E1%85%A9%E1%84%8C%E1%85%B5%E1%86%A8%20%E1%84%80%E1%85%AF%E1%86%AB%E1%84%92%E1%85%A1%E1%86%AB%20%E1%84%80%E1%85%A2%E1%84%82%E1%85%A7%E1%86%B7%E1%84%8B%E1%85%B3%E1%86%AF%20%E1%84%92%E1%85%A1%E1%86%AB%E1%84%82%E1%85%AE%E1%86%AB%E1%84%8B%E1%85%A6%20%E1%84%8C%E1%85%B5%E1%86%A8%E1%84%80%E1%85%AA%E1%86%AB%E1%84%8C%E1%85%A5%E1%86%A8%E1%84%8B%E1%85%B3%E1%84%85%E1%85%A9%20%E1%84%91%E1%85%A1%E1%84%8B%E1%85%A1%E1%86%A8%E1%84%92%E1%85%A1%E1%84%82%E1%85%B3%E1%86%AB%20%E1%84%83%E1%85%A6%20%E1%84%83%E1%85%A9%E1%84%8B%E1%85%AE%E1%86%B7%E1%84%8B%E1%85%B3%E1%86%AF%20%E1%84%8C%E1%85%AE%E1%84%82%E1%85%B3%E1%86%AB%20%E1%84%8B%E1%85%B5%E1%86%AF%E1%84%85%E1%85%A5%E1%84%89%E1%85%B3%E1%84%90%E1%85%B3.png" alt=""><figcaption></figcaption></figure>

<table><thead><tr><th width="135">Organization authority name</th><th width="262">Definition</th><th width="167">Note</th><th>Options for service roles</th></tr></thead><tbody><tr><td>O<strong>wner</strong></td><td>Has authority over the organization and all services.</td><td><ul><li>Only 1 person allowed</li><li>Organization can be deleted</li></ul></td><td><ul><li>Manager</li></ul></td></tr><tr><td><strong>Organization Manager</strong></td><td><p>Has the authority to manage specific services, members, and roles in the organization.</p><p></p></td><td></td><td><ul><li>Manager</li></ul></td></tr><tr><td><strong>Member</strong></td><td>Only organization information can be viewed. Users must first be added as members of the organization to access the service.</td><td>Unable to grant service administrator privileges</td><td><ul><li>Operator</li><li>Viewer</li></ul></td></tr></tbody></table>

### **Access and manipulation scope by organization authority**

<table><thead><tr><th width="270">Function</th><th>Owner</th><th>Organization Manager</th><th>Member</th></tr></thead><tbody><tr><td>View organization information</td><td>✅</td><td>✅</td><td>✅</td></tr><tr><td>Edit organization name</td><td>✅</td><td>✅</td><td>❌</td></tr><tr><td>Create a service</td><td>✅</td><td>✅</td><td>❌</td></tr><tr><td>Delete service</td><td>✅</td><td>✅</td><td>❌</td></tr><tr><td>Add/Invite/Remove Organization Members</td><td>✅</td><td>✅</td><td>❌</td></tr><tr><td>Role Modification - Organization</td><td>✅</td><td>✅</td><td>❌</td></tr><tr><td>Modify Role - Service</td><td>✅</td><td>✅</td><td>❌</td></tr><tr><td>Security settings (2FA, IP, extraction limits)</td><td>✅</td><td>✅</td><td>❌</td></tr><tr><td>Manage your billing plan <kbd>expected</kbd></td><td>✅</td><td>✅</td><td>❌</td></tr><tr><td>View total service usage <kbd>expected</kbd></td><td>✅</td><td>✅</td><td>❌</td></tr><tr><td>View Security Log <kbd>expected</kbd></td><td>✅</td><td>✅</td><td>❌</td></tr><tr><td>Transfer of organization owner <kbd>expected</kbd></td><td>✅</td><td>❌</td><td>❌</td></tr><tr><td>Delete organization <kbd>expected</kbd></td><td>✅</td><td>❌</td><td>❌</td></tr></tbody></table>

***

## **Service Permissions**

<figure><img src="https://content.gitbook.com/content/KGOeGww72vu5In7SeJ8c/blobs/vkxRB9rkWZ2lY08fVzoL/5.%20%E1%84%89%E1%85%A5%E1%84%87%E1%85%B5%E1%84%89%E1%85%B3%20%E1%84%80%E1%85%AF%E1%86%AB%E1%84%92%E1%85%A1%E1%86%AB%20%E1%84%80%E1%85%A2%E1%84%82%E1%85%A7%E1%86%B7%E1%84%8B%E1%85%B3%E1%86%AF%20%E1%84%92%E1%85%A1%E1%86%AB%E1%84%82%E1%85%AE%E1%86%AB%E1%84%8B%E1%85%A6%20%E1%84%8C%E1%85%B5%E1%86%A8%E1%84%80%E1%85%AA%E1%86%AB%E1%84%8C%E1%85%A5%E1%86%A8%E1%84%8B%E1%85%B3%E1%84%85%E1%85%A9%20%E1%84%91%E1%85%A1%E1%84%8B%E1%85%A1%E1%86%A8%E1%84%92%E1%85%A1%E1%84%82%E1%85%B3%E1%86%AB%20%E1%84%83%E1%85%A6%20%E1%84%83%E1%85%A9%E1%84%8B%E1%85%AE%E1%86%B7%E1%84%8B%E1%85%B3%E1%86%AF%20%E1%84%8C%E1%85%AE%E1%84%82%E1%85%B3%E1%86%AB%20%E1%84%8B%E1%85%B5%E1%86%AF%E1%84%85%E1%85%A5%E1%84%89%E1%85%B3%E1%84%90%E1%85%B3.png" alt=""><figcaption></figcaption></figure>

<table><thead><tr><th width="125">Service Permission Name</th><th width="331">Definition</th><th width="145">Note</th><th>Sub-options based on organization permissions</th></tr></thead><tbody><tr><td><strong>Service Manager</strong><br></td><td>Permissions for the entire service. Owners and organization administrators of an organization automatically receive administrator permissions for the service.</td><td><p></p><p>Due to organizational authority, members cannot be granted service administrator rights.</p></td><td><ul><li>Owner</li><li>Organization Manager</li></ul></td></tr><tr><td><strong>Operator</strong></td><td>This is the authority to operate the service. You cannot create, modify, or delete critical elements that occur during operation due to incorrect editing.</td><td></td><td><ul><li><p>Member</p><p><br></p></li></ul></td></tr><tr><td>V<strong>iewer</strong></td><td>View-only permissions.</td><td></td><td><ul><li><p>Member</p><p><br></p></li></ul></td></tr></tbody></table>

#### **Access and manipulation scope of functions related to service information by service authority** <a href="#undefined-4" id="undefined-4"></a>

<table><thead><tr><th width="234">Function</th><th>Service Manager</th><th>Operator</th><th>Viewer</th></tr></thead><tbody><tr><td>View service information</td><td>✅</td><td>✅</td><td>✅</td></tr><tr><td>Edit service information</td><td>✅</td><td>❌</td><td>❌</td></tr><tr><td>Import API Token Lookup</td><td>✅</td><td>✅</td><td>❌</td></tr><tr><td>Reissue Import API Token</td><td>✅</td><td>❌</td><td>❌</td></tr><tr><td>Export API Token Lookup</td><td>✅</td><td>✅</td><td>❌</td></tr><tr><td>Reissue Export API Token</td><td>✅</td><td>❌</td><td>❌</td></tr></tbody></table>

#### **Access and manipulation scope by service authority** <a href="#undefined-5" id="undefined-5"></a>

<table><thead><tr><th width="84">Classification</th><th width="333">Service Role</th><th width="133">Service Manager</th><th width="107">Operator</th><th>Viewer</th></tr></thead><tbody><tr><td><strong>Menu</strong></td><td>View Home Dashboard (allows period changes)</td><td>✅</td><td>✅</td><td>✅</td></tr><tr><td></td><td>View Analysis Report</td><td>✅</td><td>✅</td><td>✅</td></tr><tr><td></td><td>Create, edit, and delete analysis reports</td><td>✅</td><td>✅</td><td>❌</td></tr><tr><td></td><td>Campaign View</td><td>✅</td><td>✅</td><td>✅</td></tr><tr><td></td><td>Create, edit, and delete campaigns</td><td>✅</td><td>✅</td><td>❌</td></tr><tr><td></td><td>360 Profile View</td><td>✅</td><td>✅</td><td>✅</td></tr><tr><td></td><td>Edit 360 Profile Custom Attribute Values</td><td>✅</td><td>❌</td><td>❌</td></tr><tr><td></td><td>Audience View</td><td>✅</td><td>✅</td><td>✅</td></tr><tr><td></td><td>Create, edit, and delete audiences</td><td>✅</td><td>✅</td><td>❌</td></tr><tr><td></td><td>Event/Property Lookup</td><td>✅</td><td>✅</td><td>✅</td></tr><tr><td></td><td>Create and delete event/user profile properties</td><td>✅</td><td>❌</td><td>❌</td></tr><tr><td></td><td>Edit Event/User Profile Properties</td><td>✅</td><td>✅</td><td>❌</td></tr><tr><td></td><td>View Channel Additional Settings</td><td>✅</td><td>✅</td><td>✅</td></tr><tr><td></td><td>Edit Channel Add-on Settings</td><td>✅</td><td>❌</td><td>❌</td></tr><tr><td></td><td>Channel Additional Settings (TTL, Additional Settings)</td><td>✅</td><td>✅</td><td>✅</td></tr><tr><td></td><td></td><td></td><td></td><td></td></tr><tr><td><strong>Function</strong></td><td>PII Attribute Lookup</td><td>✅</td><td>❌</td><td>❌</td></tr><tr><td></td><td>PII Attribute Masking Lookup</td><td>❌</td><td>✅</td><td>✅</td></tr><tr><td></td><td>Export report data (download CSV)</td><td>✅</td><td>✅</td><td>❌</td></tr></tbody></table>