Role and Access Management within Virtuoso - Internal Only [With Granular Permissions information]

Article Overview:

This article will cover how you can achieve the following:
This article will provide insight on Role and Access Management within Virtuoso. This article also covers Granular Permissions information.

Problem Statement:

We have chosen Virtuoso as our automation platform as part of our digital transformation. Our Quality Assurance team possesses various skill sets, and we need to define and maintain user access and privileges accordingly.

Solution:

Virtuoso enables us to manage this through the following roles at the organization level: 

• Members
• Teams
• Roles

Before we explore how these sections help us, let's understand the Access levels and Built-in roles available within Virtuoso. 

By default, Virtuoso offers these access levels: 

• Owner –The admin of the organization and has the highest privileges
• Member – Member is a user with limited access. These users can be further customized to a granular level.

Each Member can be assigned one of the following built-in roles:

• Manage: This role can create and execute tests, create and manage execution plans, and perform management tasks.
• Write: This role can create and execute tests, and create and manage execution plans.
• Read: This role cannot create tests or plans, nor execute tests.

Additionally, we can use the Granular Permission feature to create custom roles and assign them to members accordingly. (On-demand feature)

Granular Permissions Include:

• Execute journeys
• Create/Edit Extensions
• Create/Edit Data Tables
• Create/Edit Plans
• Create/Edit Environments
• Create/Edit API Tests
• Create Library Checkpoints
• Edit/Create Checkpoints

Example:

Suppose we have a team of quality engineers that can be grouped into the following roles:

• Admin: Admin of the organization, responsible for all setup and management.
• Manager: Manages several projects and oversees project progress.
• Lead: Leads the project and is responsible for creating requirements and tests.
• Tester: Creates test cases and executes them.
• Observer: Ensures that testing objectives are met as expected.

To meet organizational needs, we can use Virtuoso’s features and capabilities to create different roles along with the default roles available. We can also extend access permissions using a granular approach.

Let us now understand how to create a Role Tester with Member Access and extend the permissions in the Role Section.

• Create a Role called “Tester” within Virtuoso:
  

1. Navigate to the Role Section.
2. Click on "New Role."

3. Select the “Access level”.

1. Manage
2. Write
3. Read

4. Select the Permissions as per needs and Click on “Create role”.
   Also, we can extend these permissions using a granular role as below

Finally, different roles created for an organization would look as below

After creating these roles, teams can be formed, and members can be assigned to each team. Projects can then be managed using these created Virtuoso roles.

Managing users in Virtuoso:

Users are added to the organization by sending an invitation.

Steps:

1. The Admin/Owner clicks on "Invite to Organization," which opens a section to add Email(s) and select access level (either Member or Owner).

2. In the same invite, the user(s) can be added to a Team and Project.

• Note: Users can be added to a single team and a single project only during the invitation.

Once the invite is sent, all user details are available under the "Member" section of the organization. Users who have not yet accepted the invitation are listed under "Pending invites".

In the Members section, 

• Each user can be managed, and below are the various available parameters

1. Name
2. Teams
3. Projects
4. Access Level
5. Last Login

• The users can be removed or promoted or Demoted

1. Promote to Owner
2. Remove member from organization.
   
   

• Also enables users to be added to Team and Projects

Managing Teams in Virtuoso:

The Teams section lists all current organization teams. Teams allow giving to a set of users access to a set of projects.

• Create a new team:

1. Click on the New Team button on the top right side.  The owner can provide the team name, which must be unique within the organization.

2. Clicking on a team allows the organization owner to see a list of team members and the projects they can access within Virtuoso.
3. The Team tab title shows the number of members and projects listed, providing a quick overview.
4. Users can filter the displayed information by searching for specific member or project names, facilitating easy navigation and management.

Note: The team can be renamed by clicking on its name. It is also possible to delete the team by clicking on Delete Team in the upper right part of the screen.

5. In the Members tab, each member is listed along with the number of teams they belong to and the projects they have access to within Virtuoso.

6. The organization owner can remove a user from a selected team by clicking on the remove icon next to the user's name.

Example of Members section within Teams 

Example of Projects section within Teams 

Note: The Permissions attribute shown above contains all the access roles that would have been created by the owner for an Organization.

Another example of how a Team can look like

To learn more: managing teams