Roles

AquilaX platform is using access roles and grouping by organization in order to authorize and control every API request

Each user may have access to any organization governed by the below access control list :

Operation	Security Manager	Security Engineer	Developer
Delete Org
Update Org
Add Members (exclude owner)
Update Billing
Start Scan
Delete Scan
Create Group
Update Group
Delete Group
Update Policy (org level)
Update Policy (group level)
Update Policy (project level)

Owner have access to all the operation for any resource within the organization that he is owner

Viewer have read only access to all the resources. Usualy this role is assigned to auditor and someone that have to review the output only