Skip to content

User Roles and Access

Darukaa.Earth provides role-based access control (RBAC) to ensure that users have the appropriate permissions to perform their tasks securely.

Overview of Roles

The platform defines five primary user roles, each with distinct permissions and responsibilities:

  1. Admin
  2. User
  3. Employee
  4. Dev
  5. FieldWorker

1. Admin

A superuser with full platform access. Admins oversee all operations and manage personnel.

Permissions: - Full platform management, including assigning projects to other users. - Create and manage Dev users and their API keys. - Manage billing, settings, and team roles. - Full access to Carbon, Biodiversity, and Climate Dashboards.

2. User

A standard client user who uses the platform to set up projects and access analytics.

Permissions: - Create and configure projects on the platform. - Perform environmental, carbon, and geospatial analyses tailored to their needs. - Utilize standard tools and interact with dashboards assigned to their project.

3. Employee

A Darukaa employee who is assigned to manage client projects efficiently.

Permissions: - Project onboarding and setup. - Define sites and locations within an assigned project. - Schedule and manage deployments. - Manage incoming data from project sites. - Upload in-situ analysis data (e.g., audio, images, and videos).

4. Dev

A developer user who programmatically accesses the platform via API keys.

Permissions: - Bound to an organization context (one Dev user per organization). - Access projects assigned to them from their organization. - Programmatic interaction constrained by granular endpoint permissions and rate limits.

5. FieldWorker

A field worker who uses the platform to collect and verify data directly from the ground.

Permissions: - Perform various environmental analyses on the ground. - Log field observations and manually upload relevant metadata specific to their assigned locations.

Role Assignment

Admins manage role assignments within the platform's user management interface. Users receive targeted access to specific platform features depending on the roles assigned.