11Users, roles and permissions

This chapter explains how access to SYNERGY Management Gateway itself is organised and administered: the platform user accounts people sign in with, the roles that bundle permissions together, the directories each role may act against, and the permissions that decide what every screen and every API call allows.

Platform users are accounts of this platform. They are separate from the user accounts in your Active Directory, which you manage in the Directory Browser (see Chapter 6, Directory Browser). A platform user may be linked to an Active Directory account for Windows sign-in, but creating, editing or deleting a platform user never changes your directory.