In the Infrastructure Cloud, the user management system, which is access via the Administration > Manage your Team option, provides access to manage users and the roles assigned to them. 

There are two types of roles which can be assigned to a user:

• iTwin Role:  This role is defined specifically for the current project and cannot be used in another project.
• Enterprise Role:  This type of role is defined at the Account level and is available to be assigned to users across all of the active projects for an organization. As the Bentley Infrastructure Cloud manages roles on a project level, the enterprise roles can be assigned, but not edited from within a project. Administrators have the ability to create and manage specific roles through the Subscription Services Portal. These Enterprise Roles can then be used in any project. A link to manage the Enterprise Roles is available from the Enterprise Settings page.

Enterprise roles can be defined and used not only for projects within the Bentley Infrastructure Cloud, but other Bentley cloud applications as well. Because of this, the available groups of permissions are wide ranging with many that are not applicable for the services provided by the Bentley Infrastructure Cloud.

For clarity when assigning permissions to roles within a Bentley Infrastructure Cloud project or asset, only permission groups which directly apply to the services available within a project or asset are made available to be assigned. The below matrix provides a comparison on how the Enterprise role permissions coincide with the permissions that are available in the Infrastructure Cloud. 

While most of the permissions are directly mapped to the same permission in the Infrastructure Cloud, some permission names have been modified to provide better clarity of their purpose. 

Note also there are certain individual permissions which are merged together under a common permission name in the Infrastructure Cloud.