Skip to main content

4.19. Organisation Administrator - Create organisation users

Id 4.19.
Description

As an Organisation Administrator,

 

I want to create user accounts belonging to my organisation by adding users and assigning them appropriate roles,

 

So that I can control access to the system for my organisation and ensure that each user has the correct permissions based on their responsibilities.
Priority Medium
Actors Organisation Administrator
API Calls GET /admin/api-users
POST /admin/api-users
Linked Processes
Status Implemented

Preconditions

  1. The User must be authenticated and have the Organisation Administrator role.
  2. The system must have a list of predefined roles available for assignment.

Postconditions

  1. The user list is updated with the new user account.
  2. The new user belongs to the same organisation as the Organisation Administrator and can only be assigned with roles of type Editor, Organisation Approver, Organisation Administrator or Viewer.
  3. All assigned roles are correctly enforced by the system

Main flow

  1. The Organisation Administrator retrieves the list of existing users for his organisation with their details and roles (GET).
  2. The Application Administrator uses the APIs to add a new user by entering required details (e.g., name, email) and assigning valid roles (Editor, Validator, Organisation Administrator or Viewer) (POST).
  3. The system validates the input data and adds the right organisation to the newly created user.
  4. The system saves the changes and updates the user list.

Exceptions

[400 Bad Request] Invalid input:

If mandatory fields are missing or invalid, the system returns an error message.

[404 Already Exists] Duplicate User

If the Organisation Administrator attempts to add a user with an email already registered, the system returns an error message and prevents duplicate creation.

[500 Internal Server Error] System Error

If the system fails to save changes due to an internal error, it displays an appropriate message and logs the error for further investigation.

No comments to display

Back to top