Access and permissions

To access Aspect on Demand in your tenant’s workspace, you need — besides access to the tenant itself — the corresponding roles to work with Aspect on Demand.

Your tenant manager can grant you access and permissions, also for technical clients (technical users). As a tenant manager, handle user management with the Multitenant Access Control portal.

Available default roles for Aspect on Demand:

Name Description Role key

Aspect on Demand Viewer

Required to see the application and its contents in your tenant’s workspace.
With only that role, users can view the list of existing Aspect APIs.

AOD_VIEWER

Aspect on Demand Manager

Additionally, with this role, users can work with Aspect on Demand and generate new Aspect APIs.

AOD_MANAGER

As a developer, note that the URN (included in the token) for a role gets constructed as follows:

urn:macma-application-role:<tenant-id>:<client-id>:<role-key>

The placeholders mean:

  • <tenant-id> — Your tenant ID.

  • <client-id> — Part of the credentials for your technical client. The client credentials were created when the corresponding module was created. See also Modules: Grant access for technical clients.

  • <role-key> — Is indicated for each role in the role overview.