Role Based Access Control

HQ has several security related concepts that enable us to separate data and provide role-based access to it. The first important concept is called Organization and it represents whole organization or company. Organization can have one or more departments and they contain processes. For example, we could have a Finance department, HR department, Customer Support and so on.

The second concept is the users which are assigned to teams. Teams can have Organization admin rights or can have a specific security role assigned per department. Members of the team can have department contributor or department admin role. Department admin has more rights than the contributor role in the respect that this role can publish processes into test and production stages and run processes in those stages.