This guide explains how to configure user permissions and roles within your Affelios affiliate platform. As an operator, you can control what different team members can access and modify in your affiliate program.
Understanding Platform Users
Platform User Overview
In the Affelios Ecosystem, a Platform User is an individual who has an Affelios Identity that has shared their information with your Affiliate Platform to become a collaborator and work with you to promote your Brands.
Default Platform Permissions
By default, a new user that has registered with your platform will only have access to create affiliate accounts along with trackers and testimonials that are linked to those accounts.
- Create unlimited affiliate accounts
- Create trackers and testimonials linked to their accounts
- View their own affiliate account data and reports
- Access basic program information
Platform Module Permissions
Permission System Overview
You can add any combination of permissions to individual users by navigating to Settings > Users, clicking the three dots next to a user, and selecting Edit Permissions.
Available Permission Modules
Each module can be assigned with Read or Write access levels:Platform Reporting Permissions
Report Column Access
Affelios allows you to specify which reporting columns are available to Users registered to your affiliate platform.
Configuring Report Access
1
Set System Defaults
Configure default report columns in the Settings > Reports section.
2
Customize Per User
Navigate to Settings > Users > User Actions > Customize Report Columns to customize on a per-user basis.
3
Configure Columns
Drag options from the Restricted Columns section to the Available Columns section.
Information about which reporting columns are available and their descriptions can be found by hovering over the tooltips in the columns sections.
Best Practices for User Management
Security and Access Control
Follow these best practices to maintain security and proper access control in your affiliate platform.
Permission Assignment Guidelines
Principle of Least Privilege
Principle of Least Privilege
Security Best Practice:
- Grant users only the minimum permissions they need to perform their job
- Start with read-only access and add write permissions as needed
- Regularly review and audit user permissions
- Remove access for users who no longer need it
- Create role templates for common job functions
- Document permission requirements for each role
- Establish approval processes for elevated permissions
Regular Access Reviews
Regular Access Reviews
Ongoing Security Maintenance:
- Schedule quarterly permission audits
- Review user access when roles change
- Remove access for departed team members immediately
- Monitor for unusual access patterns or activities
- Verify all active users still need their current permissions
- Check for users with excessive permissions
- Ensure proper separation of duties
- Validate that company ownership is correctly assigned
User Onboarding Process
1
Determine Required Access
Identify what permissions the new user needs based on their role and responsibilities.
2
Create User Account
Invite the user to your platform through the user management interface.
3
Assign Permissions
Configure the appropriate module permissions and reporting access.
4
Provide Training
Ensure the user understands their access level and platform capabilities.
5
Monitor Usage
Track user activity to ensure they’re using permissions appropriately.
Troubleshooting Permission Issues
Common Permission Problems
Address common issues that arise with user permissions and access control.
Access Denied Issues
User Cannot Access Expected Features
User Cannot Access Expected Features
Symptoms:
- User reports they can’t see certain sections or data
- “Access Denied” or “Permission Required” messages
- Missing menu items or navigation options
- Verify user has the correct module permissions assigned
- Check if they need Read or Write access for the specific feature
- Ensure they have access to the Company associated with affiliate accounts
- Review reporting column permissions if data is missing from reports
Cannot Modify Affiliate Accounts
Cannot Modify Affiliate Accounts
Symptoms:
- User can view affiliates but cannot make changes
- Cannot approve affiliate applications
- Cannot modify payout information
- Ensure user has “Manage Affiliates” Write permission
- Verify they have access to the Company associated with the affiliate account
- Check if they have the correct collaborator role on specific affiliate accounts
- Confirm they’re not limited by company ownership restrictions
API Access Problems
API Access Problems
Symptoms:
- API calls returning permission errors
- Cannot create or manage API keys
- Limited data access through API
- Verify user has “API Keys” Write permission to create keys
- Check that API keys are scoped with appropriate permissions
- Ensure API key permissions match user’s platform permissions
- Review API key expiration and validity
Permission Conflicts
Overlapping Permissions
Overlapping Permissions
Issue: Multiple permission sources creating conflictsCommon Scenarios:
- Platform permissions vs. affiliate collaborator roles
- Admin permissions overriding specific module restrictions
- Company ownership vs. platform access levels
- Review permission hierarchy and precedence rules
- Ensure consistent permission assignment across all levels
- Document permission inheritance and override rules
- Test permission changes in a safe environment first
Inheritance Problems
Inheritance Problems
Issue: Permissions not propagating correctlySymptoms:
- User has platform permissions but cannot access affiliate data
- Company ownership not transferring properly
- Collaborator roles not taking effect
- Verify user has access to both platform and affiliate account levels
- Check company association and ownership settings
- Ensure proper invitation and acceptance processes
- Review permission inheritance rules and timing
Next Steps
Advanced User Management
Once you’ve configured basic user permissions, consider these advanced features and next steps for comprehensive user management.
- Setup Guide - Complete program setup including user management
- API Documentation - Programmatic user management via API
- Webhook Configuration - Real-time user activity notifications
- Security Best Practices - Platform security guidelines
- Bulk user permission management
- Automated permission assignment based on roles
- Integration with external identity providers
- Advanced audit logging and compliance reporting