Manage users and access to resources

Introduction

TraX is a solution that runs on top of the SKF platform. Briefly, the platform provides capabilities to model and structure resources such as companies, fleets, vehicles, and users, and to provide access control.

User- and access management are handled in the User administration section of the SKF platform.

How resources and users are organized in the SKF platform

The drawing below shows the structure and which resources each of the two types of companies are allowed to contain:

———————————————————————————————————————————

Company: TSP company
|__ Resources
|     |__ Fleet A
|     |      |__ Vehicle A
|     |      |__ Vehicle B
|     |__ Fleet B
|     |      |__ Vehicle C
|     |      |__ Vehicle D
|     |__ Fleet C
|           |__ Vehicle E
|__ Users:
      |__ User I
      |__ User J

———————————————————————————————————————————

Company: Non-TSP company (e.g. a fleet or 3rd party repair shop)
|__ Users:
     |__ User K
     |__ User L

Both types of companies can contain users, however only the TSP Company type can contain fleets and vehicles.

How the access control model works

TSPs that have implemented support for TraX are registered as a company in the SKF platform. Additionally, if a user that belongs to a fleet or 3rd party requires access to TraX, the company at which the user is employed will also be set up as a distinct company.

Users can be granted access to resources (multiple fleets, single fleets, or even distinct vehicles) within the same company, or a different company.

Example: How to grant a user access to vehicles managed by a TSP

In this example, John Doe should assist in commissioning TraX sensors.

John is employed by a fleet named Fleet ABC. Fleet ABC has contracted the company "TSP company" for vehicle telematics services. 

While a user that belongs to a fleet is used in this example, in principle, the example is valid for any type of non-TSP company such as a 3rd party repair shop.

Step 1 - Set up a company for Fleet ABC in the SKF platform

1. The TSP requests SKF to create a company for the fleet in the SKF platform via a support ticket. See Request support.
2. SKF creates the company in the SKF platform and grants the TSP's user admins access to it, enabling the TSP to manage users on behalf of, in this example, the fleet.

Step 2 - Create users and provide access

1. To create a user, the TSP's user admin opens the Create User dialogue and provides information about the user:IMPORTANT: The user must be created in the company where it belongs. In the screenshot above, the user will be created in a company named "TraX Fleet ABC". Note that all companies in the SKF platform are prefixed with TraX in the admin interface.
2. Scroll down in the same dialogue to the User access section, and grant the user the role TraX: View & Edit:
   
   
3. Continue by scrolling down the same dialogue to the Hierarchy Access Settings section, and expand the "TraX TSP company" to view all fleets set up for that TSP. Finally, grant the user access to the fleet "Fleet ABC":

Guidance for creating new resources and users

Creating new Companies and Fleets

• Only SKF is allowed to set up new Companies and/or Fleets.

Creating users & granting access

• The TSP is responsible for creating users. If users need to be created outside of the TSP's Company, the TSP's user administrator can request access to these resources by raising a support request to SKF.
• Accounts used for development MUST not be granted access to production resources (and vice versa).
  • Development and production activities both take place in the same integration environment. Isolation is achieved through dedicated accounts and resources for the different activities.
• Users must be created within the company they belong.
  • For example, if a TSP contracts a 3rd party repair shop to assist in commissioning sensors. Then the 3rd party repair shop must be registered in SKF systems as a distinct company, and its users must be created within that company. Users can then be granted access to the protected resources (fleets) within the TSP's company.