Difference between revisions of "Roles and access rights"

Revision as of 14:18, 14 January 2015

Good management and overview of the roles and access rights of members within a corporation is the greatest responsibility of a CEO. Misplaced trust or granting the wrong role or access to the wrong member can often severely damage a corporation both financially and morally. Therefore having good working knowledge regarding how the roles and access rights within a corporation work is a valuable weapon for any corporation manager.

All role and access management is done through the members tab in the corporation management window.

Role Management

A pilot can access the role management tab under the members tab in the corporation management window as shown below. To have access to this tab a pilot will need to be the CEO of a corporation, have the director role or have one or more grantable roles assigned to them.

The View drop-down menu allows a pilot to set the view to roles, grantable roles or titles. The Type drop-down menu will allow a pilot to set the view to display General (roles, grantable roles and titles), Station Service (station service roles) and a selection of different views for access rights for wallet divisions, hangars and containers.

To assign a role, grantable role or a title to a member of a corporation, the checkbox in the correct column and in their name’s row should be checked. Then the save changes button needs to be pressed at least once to apply any changes made. Please note that even if a box for a particular role is not checked for a pilot, that pilot may still have that role assigned through a title.

Note that some roles grant access that overlaps. For instance, both the Junior Accountant and Trader roles grant view access to the deliveries hangar.

Description of all Roles, Grantable Roles, Station Service Roles and Access Rights is available at the end of this article.

Grantable Roles

A pilot with a grantable role is able to assign that role to another member of their corporation. For example, if a pilot has the accountant grantable role, that pilot can give other members of the corporation the accountant role. The same pilot does not necessarily have to have the Accountant role, but can be given at the pilot's leisure.

Grantable roles have no effect on the ability to grant or revoke titles, as these actions can only be performed by a Director. Even if a pilot has the ability to grant all of the same roles that a title has, they will still be unable to grant that title. For this reason, the grantable roles have limited practical applications.

Access Rights

Access rights control how a pilot interacts with a corporation’s hangar and wallet divisions. Some roles will require certain access rights to be set properly in order to be able to perform some of their functions. More details on each type of access right can be found at the end of this document.

Titles

Titles are a pre-created set of roles and access rights that can be assigned to a pilot. A CEO or a director in a corporation can access title management through the Corporation Management window under the members tab just like role management.

Grantable roles have no effect on a pilot's ability to grant or revoke titles, even if the pilot has the grantable roles associated with a title. Only a director or CEO can grant or revoke titles.

Clicking on a title in the name column will allow a CEO or director to rename that title. Checking the checkbox in the same row as a title will assign the role or access right associated with that column to that title. The Type drop-down menu can be used to navigate through the various roles, station service roles, grantable roles and access rights.

Once title rights have been set up and saved, they may be assigned to a pilot through the role management tab by selecting titles from the view drop-down menu.

General Role Types

Junior Accountant

Can view information regarding corporation and alliance bills. Can view bills, wallet journals, balances and transactions for all wallet divisions.

Can view offices, impounded items, property and deliveries through the starmap. Can access the deliveries hangar while docket at a station, but cannot remotely view all deliveries hangars, nor view the corporation assets menu.

Can view the insurance information on corporation insured ships. Can also insure ships from master wallet even if they don't have access assigned to that wallet.

Accountant

Grants the same access as the Junior Accountant role, but also grants access to the corporation assets menu. This allows the pilot to view and search all corporate hangars regardless of the roles assigned to that pilot to view or take items from those hangars. Grants view and take access to the deliveries hangar and the ability to remotely view all deliveries hangars, impounded items and anchored items in space.

Implicitly allows the accountant to unrent offices by disabling the auto-pay feature and then selectively paying office rental bills, allowing some to lapse and un-rent. Blueprints that are locked down remain locked down when the office is un-rented.

Communications Officer

Grants the right to send EVE mails to your corporation and alliance, and allows you to create corporation and alliance calendar events and bulletins. Can also edit corporation bookmarks.

Fitting Manager

Can save, delete and edit corporate ship fittings.

Personnel Manager

Can view the applications tab in the corporation management window under the members tab. Can send invites to join the corporation to those who have applied. Receives an EVE_mail when someone applies for membership in the corporation.

Can view the title configuration menu, can run queries for members with specific roles or titles and can award decorations.

Auditor

Grants access to the Auditing tab in the corporation management window under the members tab. This allows the pilot to view how roles have changed for a corporation member, and who changed them, within a range of dates.

You can only search the logs for one pilot at a time and it does not reference titles in any way. You can only extrapolate what titles were given or revoked by cross-referencing the roles listed with the titles you have configured.

Starbase Defense Operator

Can operate starbase defenses manually with the required skills.

Starbase Fuel Technician

Can by default view and access all starbase structures, but not remove items from them. Can view the Structure, Fuel and Production tabs on control towers. Each individual structure may be configured with stricter access to prevent Starbase Fuel Technicians to access or view them as desired.

For instance, a starbase tower can be configured so that Starbase Fuel Technicians can online and anchor structures, but that only a pilot with Config Starbase Equipment can offline or unanchor.

Config Equipment

Allows a corporation member to anchor, unanchor and rename items in space that are not starbase structures. This includes most types of secure containers and the like

Can set container passwords and unlock items using the password. Cannot take containers or retrieve passwords without Container Take access for that hangar.

A pilot without this role cannot unlock items in a container that they do not have the password for. However, if they have the Container Take role for that hangar, he can move a container from the corporation hangar to his personal hangar and then retrieve the password. The Container Take role renders this role essentially useless for security purposes.

Config Starbase Equipment

Allows a corporation member to anchor, unanchor, online and offline all starbase structures owned by the corporation. A member with this role can also manage control towers through their interface and will receive warning mails if structures are under attack or if a tower is low on fuel. This role also allows a pilot to anchor Territorial Claim Units, Sovereignty Blockade Units and Infrastructure Hubs on behalf of his corporation.

Contract Manager

Allows a contract manager to create and accept contracts on behalf of their corporations, so long as they have access to a wallet division. Items from such a contract will appear in the deliveries hangar.

A pilot without this role can still accept a contract assigned to the corporation, on behalf of themselves and paid for with their personal wallet.

Diplomat

Allows a corporation member to set or alter corporation standings towards other players, corporations or alliances.

Director

Implicitly has all roles and grantable roles. Can also grant and revoke titles, type custom titles, kick corporation members and un-rent offices. Blueprints that are locked down remain locked down when the office is un-rented.

May start shareholder votes to kick corporation members, create new shares, start general non-binding votes, lock and unlock blueprint originals. May vote for alliance executor, leave alliances, kick corporation members and edit corporation details such as the icon and description.

If the corporation is the executor of an alliance, a director can start or retract alliance-wide wars, remove other corporations from the alliance, set the desired reinforcement exit time for Infrastructure Hubs and transfer the ownership of a Territorial Control Unit to a different corporation within the same alliance.

Notable things that a director cannot do, but for which a CEO is required include renaming hangar divisions, renaming wallet divisions, joining or creating alliances and assigning the director role to other pilots. The CEO is also required to act upon sanction-able actions resulting from shareholder votes, with the notable exception of votes to run for CEO.

The director role is the most vulnerable to abuse, and should not be given out lightly. It should also be noted that creating a title that has every role save for director, does not grant the same level of access as the director role.

If the director role is given to a pilot who already had titles assigned, those titles will continue to be displayed on the character and cannot be removed unless the director role is removed first, then granted again after the titles are removed.

Station Service Role Type

Factory Manager

This role is necessary, but not sufficient, for starting corp R&D or manufacturing jobs - i.e. any jobs involving blueprints that are located in corp hangars. These actions also require the roles Rent Research Slot and Rent Factory Slot respectively.

This role also allows access to the Corp Blueprints and Corp Jobs sections of the S&I window. As such, factory managers can use it to:

• View blueprints in corp hangers (view access is also required for each hangar)
• View all corp jobs (includes delivered jobs and all job locations)

Rent Factory Slot

Can view corporation blueprints through the S&I interface just like a factory manager. Can install production jobs, but only if he has the factory manager station service role as well.

Rent Research Slot

Same as rent factory slot station role, but applies to research jobs instead.

Rent Office

Can rent an office in a station. This does not require any special wallet access.

Security Officer

Can view the personal hangars of any members of the corporation where the corporation has an office and the security officer is docked in. Can retrieve passwords on secure containers owned by the corporation. Can deliver items from his own or corporation hangars to other corporation members.

Station Manager

Can access the management panel for outposts belonging to the corporation. Allows a pilot to install infrastructure upgrades into an Industrial Hub anchored by the corporation.

Trader

Can buy and sell on behalf of his corporation with those wallet divisions he has access to. Can view the corporation wallet transaction log. Can access the corporation deliveries hangar.

• NOTE: For the Trader role to function normally, the Accountant role should also be granted, as the Trader role itself does not give corporation wallet access.

Access Right Types

Wallet Divisions – Accounting (Divisional)

Checking a box for a particular wallet division for a pilot will allow that pilot to take ISK from that wallet division or otherwise use that wallet division as per his other roles.

Hangar Access

A pilot can have either a query right or a take right from a hangar division. Having a take right automatically gives a pilot the query right as well. With a query right a pilot can view anything in that hangar division, but can not take anything or otherwise interact with the items there. With the take right the pilot will have full unrestricted access to that hangar and may take items from there as he pleases except audit log containers (see container take rights below). A pilot with take rights can still open such containers, just not move them to his own hangar. Hangar access rights are divided into Headquarters, Based At and Other.

Headquarters

Rights set for headquarters will only be in effect for the office which is designated as the corporation headquarters.

Based at

Rights set for Based At will only be in effect for the office which the pilot is listed as being based at.

Other

Rights set for 'Other' will be in effect at all offices the corporation owns that do not fall under either Based At or Headquarters. 'Other' access is also required to view/take items from divisional hangars in starbase structures and capital industrial ship's corporate hangar arrays, in addition to any other roles that may be required for individual structures.

Container Access

This access right will allow a pilot to remove audit log containers or any other container types from a corporation hangar he has access to. Without this role that pilot will receive an error message when he attempts to do so. Note that the pilot in question will still be able to open the container and access items in it if they have the hangar take access right to that hangar. - Unless of course, the take rights are restricted any further by audit log container configuration settings.