# Ability Portal

The ABB Ability™ Portal is a Web UI application that enables three different administrator personas to carry out various administrator operations.

WARNING

Ability Portal is a legacy application and it is going to be deprecated from the next version of the Ability Platform, 20.10, going forward. The recommendation is to use the Admin Portal instead, which covers all of the Ability Portal functionalities.

The portal serves as a UI around the Principal Manager API. Members of the Platform Operations team, Business Line developers, product managers, and end users will all interact with the ABB Ability™ Portal as the listed personas:

Ability Administrator
Solution Administrator
Tenant Administrators

NOTE

The portal is currently tested on Google Chrome. The portal uses MSAL.js to perform authentication and this library is known to have limitations on other browsers.

Businesses Lines can also develop their own user experiences and tooling, using the Principal Manager endpoints. Access to the Portal, and the Principal Manager API is also controlled by a system of role based access control. Access to the PM endpoints and the Portal is controlled by the ABB Ability™ Operations team. This process is similiar to how access to platform endpoints is controlled by grants and permissions assigned by business line solution administrators and tenant administrators.

# Principal Manager API

The Principal Manager API is an internal Ability Platform service. This service exposes endpoints that manage the system of role-based access control that implements multitenancy in the Ability platform. The Principal Manager provides a wrapper around Azure B2C Tenant functionality and associated Azure based platform components that support Multitenancy. The Principal Manager allows granular control and management of Principals (Devices, Applications, Users, and Groups) as well as their actions and permissions. More information about the specific types of principals can be found here

# Ability Administrator

Ability administrators are personnel from ABB that support access to the ABB Ability™ Platform. Their responsibilities include the following operations:

On-boarding and managing tenants.
Creating and managing the identity providers.
Creating and managing the connectivity providers.
Creating solutions.

# Solution Administrator

Solution administrators are personnel from ABB that support the development and management of solutions for ABB businesses. Their responsibilities include the following operations:

Setup customer-facing solutions and applications.
Configuration of roles, grants, and solution-specific applications.
On-boarding the solution's devices that connect to the platform instance.

# Tenant Administrator

Tenant administrators are personnel from the tenants that manage access to the solutions delivered by ABB businesses. Their responsibilities include the following operations:

Manage customer users and groups.
Allocation of access control policies (grants) to the users and groups.

When allocating access control policies to the users of your solution you will be inherently applying steps for telemetry data authorization. The tenant information associated with your solution or application, protected by your access control policies, will be applied to any telemetry data sent by devices associated with your solution or application. When a device in your system connects and sends data into your multi-tenant application or solution, the tenantId property will automatically be appended to the telemetry data.