Profiles

Within the context of Brass, there are a few profiles to be aware of:

1. Customer: This profile references the actual business entity in a relationship with Brass; most resources in Brass are tied to this entity.
2. User: This profile references the actual person using Brass on behalf of the Customer entity. They usually have permissions applied on them to restrict the resources belonging to the Customer that they have access to.

Why are they relevant?

Profiles are relevant because understanding them makes it possible to determine what can be accessed by a person (User) and in what context it can be accessed.

When a request is made to Brass - outside of trivial functions - most calls require us to know the user attempting the action and on whose [the Customer] behalf the action is being made.

📘

Why knowing "who" matters

Knowing who is making the action is important for security reasons. We want to be able to log the user who took the action, at what time the action was taken and if they're permitted to perform the action.

Resource ownership

All resources created in Brass from the List Bank Accounts, List Payables and all other resources are usually tied to the Customer profile; this makes it possible to:

1. Add as many users as required to fulfil your business operation needs
2. Remove users as desired without affecting the business
3. Set permissions on everyone added to your customer profile and specify what resources they have access to
4. Have access to multiple customer profiles with the same user account