An organisation can have units, allowing an organisation admin to divide an organisation. Organisation managers can be assigned to only manage (e.g., approve requests for new collaborations) one or more of these organisation units, instead of the entire organisation.
Description
A manager with one or more assigned units, let's called them a unit manager, can only see and manage collaborations assigned to at least one of these units. Organisation admins and organisation managers with no assigned units, can see all collaborations.
Organisation units are optional. If no units are created at the organisation, the concept does not show up anywhere. Once units are defined, the can be assigned to manager and collaborations.
Users requesting a collaboration at their organisation, can request a unit. These requests are then only shown to managers assigned to those units.
Example
A university has an organisation admin and an organisation manager. The organisation manager is responsible for managing the collaborations: creating, approving or denying request for new ones, sometimes managing members and what applications are connected to a collaboration.
To manage access to the university's super computer and research storage cluster, a faculty uses collaborations. This causes a few administrative problems:
- The organisation manager gets lots of requests for collaborations for this faculty, this costs time, while
- the organisation manager simply grants each request for this faculty. The faculty is trusted by the manager and knows what collaborations should exist, while the manager has no insight in what goes on at the faculty and what is required.
Appointing someone from the faculty as an organisation manager, would also grant the faculty management permissions over all the organisation's collaborations, which is not acceptable by the organisation admin.
For these reasons, the organisation admin creates a unit in the university organisation, with the name of the faculty. They then appoint someone from the faculty as organisation manager, and assign that unit to that manager.
This gives the faculty manager management permission on all the faculty's collaborations, but no permissions outside of this faculty unit. The organisation manager, who doesn't have any assigned unit, still has permissions on both collaborations from the faculty and outside of that unit.