🏢 RBAC System Relationships

👥 Users

Sarah Johnson
📧 sarah@techcorp.com
👔 Senior Facility Manager
🎯 Needs full building control
Mike Chen
📧 mike@techcorp.com
👔 Building Supervisor
🎯 Manages daily operations
Jessica Martinez
📧 jessica@techcorp.com
👔 Maintenance Technician
🎯 Executes maintenance tasks

🎭 Roles & Permissions

Building Admin
Complete administrative access
monitoring: read monitoring: edit
operations: read operations: edit
sustainability: read sustainability: edit
spatial_intelligence: read spatial_intelligence: edit
building_management: read building_management: edit
user_management: read user_management: edit
reporting: read reporting: edit
Building Manager
Operational management access
monitoring: read
operations: read operations: edit
sustainability: read
spatial_intelligence: read
building_management: read
reporting: read
Building User
Basic operational access
monitoring: read
operations: read
sustainability: read
spatial_intelligence: read
building_management: read
reporting: read

🏗️ Scopes (Hierarchy)

🏢 Client: TechCorp
ID: client_001
📋 Project: Downtown Campus
ID: project_001
🏢 Building: Main Office
ID: building_001
123 Business Ave
🏭 Building: Warehouse
ID: building_002
456 Industrial Blvd
📋 Project: Suburban Office
ID: project_002
🏢 Building: Branch Office
ID: building_003
789 Suburban Way

🔗 Role Assignments (The Bridge)

Assignment #1
👤 User: Sarah Johnson
🎭 Role: Building Admin
🏢 Scope: Main Office
Status: Active
📅 Assigned: 2024-01-15
Assignment #2
👤 User: Mike Chen
🎭 Role: Building Manager
🏢 Scope: Warehouse
Status: Active
📅 Assigned: 2024-02-01
Assignment #3
👤 User: Jessica Martinez
🎭 Role: Building User
🏢 Scope: Main Office
Status: Active
📅 Assigned: 2024-02-10
Assignment #4
👤 User: Jessica Martinez
🎭 Role: Building User
🏢 Scope: Branch Office
Status: Active
📅 Assigned: 2024-03-01
💡 Key Insight: Jessica has access to TWO buildings with the same role!

🔍 How It All Works Together

Authorization Flow Example:

1. 🔐 Jessica logs into Main Office system
2. 🔍 System finds: Jessica → Building User role → Main Office scope
3. 📋 System loads permissions: All modules with READ access only
4. ✅ Result: Jessica can VIEW everything, but cannot EDIT anything
🔐 Permission Check: If Jessica tries to edit a maintenance request:
→ System checks: Building User role permissions for "operations" module
→ Found: operations: READ only
→ Result: ❌ ACCESS DENIED (edit requires EDIT permission)