Roles and Permissions

CLIENT ADMIN

Role Description: The Client Admin is a key role within the Fixiam solution, responsible for overseeing and managing the IAM functions for their organization or business unit. This role typically involves IT administrators, security officers, HR personnel or other personnel responsible for managing user access, security policies, and application integrations.

Primary Responsibilities
User Management	Create, update, and deactivate user accounts. Assign user roles and manage access permissions. Monitor and review user activity logs.
Application Management	Add and configure applications within the Fixiam solution. Manage Single Sign-On (SSO) settings and integration protocols (e.g., SAML, OAuth). Monitor application usage and access patterns.
Security and Compliance	Set and enforce security policies, such as Multi-Factor Authentication (MFA) requirements. Manage compliance with industry standards (e.g., GDPR, HIPAA) by controlling data access and usage. Generate and review security reports and audit logs.
Billing and Subscription Management	View and manage subscription plans, including upgrades and renewals. Access payment history and invoices. Generate reports related to billing and usage metrics.
Support and Troubleshooting:	Provide first-level support to end users experiencing access issues. Liaise with the Fixiam solution's support team for advanced troubleshooting. Manage and respond to security alerts and incidents.

Permissions and Access Levels
Full Access to User Management	Create, edit, delete, and manage user accounts and roles. View and manage user authentication settings, including password resets and MFA configurations.
Full Access to Application Management	Add, edit, and remove applications from the Fixiam platform. Configure application-specific settings, including SSO and access policies.
Security Policy Management	Set and modify security policies across the organization. Manage compliance settings and access controls.
Billing and Subscription Management	Full access to billing features, including plan upgrades, payment processing, and invoice management.
Reporting and Analytics	Generate and view detailed reports on user activity, application usage, and security events. Access audit logs for compliance and security reviews.

STAFF

Role Description: The Staff is an individual within the organization who uses the Fixiam solution primarily to access various applications and services securely. This role includes employees, contractors, partners, and any other personnel who need access to the organization's digital resources.

Primary Responsibilities
Access Applications	Use Single Sign-On (SSO) to access multiple applications with a single set of credentials. Navigate between integrated applications seamlessly without needing to re-authenticate.
Profile Management	Update personal information, such as contact details and passwords. Configure and manage OTP settings for enhanced security.
Security Compliance:	Adhere to the organization's security policies, such as mandatory MFA. Respond to security prompts, such as MFA challenges, when accessing sensitive applications. Report any suspicious activities or access issues to the Client Admin.

Primary Responsibilities

Access Applications

Use Single Sign-On (SSO) to access multiple applications with a single set of credentials.

Navigate between integrated applications seamlessly without needing to re-authenticate.

Profile Management

Update personal information, such as contact details and passwords.

Configure and manage OTP settings for enhanced security.

Security Compliance:

Adhere to the organization's security policies, such as mandatory MFA.

Respond to security prompts, such as MFA challenges, when accessing sensitive applications.

Report any suspicious activities or access issues to the Client Admin.

Permissions and Access Levels
Limited Access to Profile Management	Change and update personal information (e.g., passwords, contact details). Set up and manage personal MFA devices (e.g., Google Authenticator).
Application Access	Access only the applications assigned to them by the Client Admin. Utilize SSO for quick and secure login to authorized applications.
Security Policy Compliance	Must comply with security policies enforced by the Client Admin. Cannot modify or bypass security settings, such as MFA or password policies.

Permissions and Access Levels

Limited Access to Profile Management

Change and update personal information (e.g., passwords, contact details).

Set up and manage personal MFA devices (e.g., Google Authenticator).

Application Access

Access only the applications assigned to them by the Client Admin.

Utilize SSO for quick and secure login to authorized applications.

Security Policy Compliance

Must comply with security policies enforced by the Client Admin.

Cannot modify or bypass security settings, such as MFA or password policies.