1.2 Users and Permissions

In order to access any of the EIS Consoles you need to be authenticated and authorized. 
Each Console / Functionality requires at minimum to have a specific Task.
Given that the Tasks are not directly assigned to users but to roles, eventually you need to have the appropriate role.
The role may or may not have location or source restrictions:

A Location Restriction limits the geographic scope within which a user may exercise a given functionality (via WUI and/or System). That scope is defined by the location, country, or set of countries contained in the Location Restriction of the role/task of the user. 
For example:
- A user holding the LOCATION_MANAGER role/task with a Location Restriction Level of "User's country" will find that the country-selection list, on the Search Location page of the Geo Console, includes only their own country.
- When notifying SSN for the creation of a PortPlus, a user holding the PORTPLUS_NOTIFIER role/task with a Location Restriction Level of "User's country" may only designate a PortOfCall that belongs to that same country.

A Source Restriction filters the exchange of information between an originating party (the notifier or requestor) and a counterparty (a potential recipient or source of information). It is imposed by determining whether the Source Restriction assigned to the counterparty includes the country of the originating user. A counterparty is eligible to receive from - or supply information to - the originator only when its permitted country/countries include the originator's country. 
For example:
- On the Incident Report page of the Send Notification Console, a recipient country is present in the available recipients list only if it has at least one party whose Source Restriction includes the country of the logged-in notifier. For instance, if there is a country that has only one party/user belonging to it, and that party/user has Source Restriction Level = "User's country", then only users of that particular country will have the country as an available recipient in the recipients list.
- When notifying SSN for the creation of an incident report, each party within a recipient country receives the report only if its Source Restriction includes the country of the submitting user. For instance, a party whose Source Restriction Level is "User's country" will receive reports only from notifiers of its own country.

Both Location and Source restrictions have the following restriction levels:
- None
- User’s country
- Specific locations
- Countries list

Below there are two tables:

• Table #1: Summarizes the minimum Task / Role that you need to have in order to access the Console / Functionality. 
• Table #2: Summarizes the association between IDM Roles / Tasks and Restrictions.

Table #1:

Table #2: