Platform Hierarchy ================== The Frame platform uses a hierarchical approach to organizing administration and access to accounts. In this section, we'll define each tier and the intended configuration strategy at each level. Customers --------- The Customers tier is the highest tier within the Frame platform. This is essentially the “Master Account” for a single business entity. Organizations ------------- The Organizations tier is the second highest tier within the Frame platform. There can be many organizations listed under one Customer depending on the use case. A business may use organizations to set up unique environments for different departments within their company. Accounts -------- This is where an admin will install and configure their applications and configure their production VMs. This is also where admins will create Launchpads for their end users. When an end user logs into Frame, they are accessing one of the accounts listed under an Organization and any of the workload VMs configured for it. Administrator Roles ------------------- Here, we'll outline the different types of administrators and their roles respective to each tier. .. list-table:: :widths: 10 50 :header-rows: 1 :align: center * - Account Role - Description * - Users - Users can access any Launchpads or applications made available to them by Account, Organizational, or Customer administrators. Users can be created and managed by Account, Organization, or Customer administrators. * - Account Administrators - Account admins have access to any accounts assigned to them by the Organization admin and any users associated with those accounts. Account Admins can be created and managed by Organizational and Customer administrators. * - Organization Administrator - Organization admins have access to any organizations assigned to them by the Customer or Limited Customer admin, those organizations' accounts, and any users listed under those accounts. Organization admins can only be created by Customer or Limited Customer admins. * - Limited Customer Administrators - Limited Customer admins possess the same permissions as Customer admins for managing organizations and accounts, but do not have the ability to start sessions or manage user authentication. * - Customer Administrators - Customer admins are given the highest level of access and are able to create and manage multiple organizations. Customer administrators can also modify permissions for any of the user types listed above. Launchpad users --------------- + Users with the **Customer Administrator** role can access all Launchpads for all Accounts on their Frame Platform. + Users with **Organization Administrator** role can access all Launchpads within the Accounts owned by the Organizations that they have administrator rights to. + Users with **Account Administrator** role can access all of the Launchpads within the Accounts that they have administrator rights to. + Users with only **Launchpad User** permissions access Launchpads that are configured by the administrators. A user can access multiple Launchpads from multiple accounts if configured this way by the administrators. When logging into an account, the user will see their assigned Launchpads configured by their administrator and access their applications from there. Users can be given access to one or more accounts within multiple organizations as set by the admins of those respective levels.