Providing 3rd Party Access to Your Organizations Server Data

1.0 - Introduction

Your organization may wish to give third parties permissions based access to your server database data, so that they can view progress on drilling projects etc., via the Innova Web Portal or the Innova Mobile App. To do this in a way that keeps your data secure and that respects the confidentiality of other clients, third party levels of access must be controlled.

The User Management section of the Web Portal contains options that allow you to customize the level of access for users viewing your organization’s data. Users can have their access customized in the following ways:

• Their permission to create new data, and edit or delete existing data. Removing all permissions turns the user into a ‘view only’ user, who can view data but not edit it.

• Their access can be restricted so that they can only view data for specific operators or wells.

• Their access to Products & Features within the Web Portal and Mobile App can be restricted.

There are 2 different ways a third party user can be given access to a database:

• The first way is to create a new user within your organization and assign the appropriate role to this user. In this situation, everything about this user is controlled by you as a company administrator.

• The second way is to provide access to a user who already has login credentials for a different company. For example, an Operator may already have their own server database, where they have logins for all the appropriate members of their team. In this situation, it is possible to provide access to your companies database to one or all of these users. When doing this, the admin will assign an appropriate role and can restrict access to wells and features, but overall management of this user is controlled by their own admin.

This document will guide an admin through the process of adding a user in both of the above scenarios.

Note: To perform the steps in this guide, you must be logged into the Web Portal as a user that has Admin permission and access to the User Management feature. To check your available features and permissions, click on the icon in the top right of any page and select Profile.

2.0 – Creating a Restricted Role

User access is controlled through the creation and assignment of roles. A role is a set of user permissions that can be applied to multiple users. Follow the below steps to create a customized view only role that can then be applied to any user in your organization, and also any user from outside your organization:

1. Click on the icon in the top left to open the main menu.

2. In the main menu, scroll to the bottom and click on User Management, then click on Roles.

This will open the User Roles page.

1. Create a new role by filling in the fields at the bottom of the page. Once you have filled in all three fields, the new role will be automatically added to the list. Double click on each field to edit it:

   1. In the Organization field, choose your company from the dropdown. There will only be one option available here.

   2. Enter a name for the new role in the Name field.

   3. Give your role a brief description in the Description field.

1. Turn the new role into a view only role by toggling OFF the Admin, Edit, Delete, Create and Approve permissions. Users that are assigned a view only role will be able to view data in the portal but not make any changes to it.

1. Restrict the operators that the new role can access by checking ON the operator(s) that you want to grant access to, while leaving the others toggled OFF. In this example, we are allowing the role to only view data related to the operator ‘Black Oil & Gold, LCC’. Click on Apply to save your settings. Note: Leaving all operators checked OFF will allow the role to access ALL operators.

1. Choose which features the new role will have access to in the Web Portal and Mobile App by checking the checkboxes in their respective columns. Toggling on features in the Third Party column will allow users with the role to make API requests to the Innova API.

If you allow access to any features in a column, you must also check the Base feature at the top of each column.

Note: The only feature available for Well Seeker is the Base feature. Toggling this option off will prevent the user from logging into your organization’s server database via Well Seeker. This is recommended if you are setting up a viewer only user, as the permissions defined in step 4 do not apply to Well Seeker. Access to other features in Well Seeker are controlled by the user’s license and cannot be restricted via Roles. The assigned operator access will apply when the user logs into your organization’s remote server database via Well Seeker.

1. Click on the Apply button in the Products and Features window to save your settings. Setup of the view only and operator restricted role is now complete. The next step is to assign the role to a user.

3.0 – Assigning the Role to a User

Now that the customized view only role has been created, it needs to be applied to a user.

3.1 – Assigning to an Existing User

2. In the main menu, scroll to the bottom and click on User Management, then click on Users.

This will open the Users page.

1. Double click in the Role column for the existing user. From the dropdown menu, select the restricted role that you created. This is why it is important to name your roles appropriately, as this list may have quite a number of options available to choose from.

1. When the user next logs into the Web Portal or App, they will now be restricted to the operators and features permitted by their Role. They will also not have permission to make any changes to the data in the database.

3.2 – Creating a New User and Assigning a Role

2. In the main menu, scroll to the bottom and click on User Management, then click on Users.

This will open the Users page.

1. Create a new user by filling in the fields at the bottom of the page. Double click on each field to edit it:

   1. In the Organization field, choose your company from the dropdown. There will only be one option here.

   2. Enter an email address for the new user in the Username field. The username must be a valid email address.

   3. In the Password field, enter a temporary password. This must contain at least one uppercase letter, lowercase letter, number and symbol.

   4. In the RoleID field, select the restricted role that you created from the dropdown list.

   5. In the UnitPrefs field, select the default unit set for the new user. They can change this themselves after they log in.

1. Before the new user creation can complete, you must toggle the Password Reset Required option on. This will force the new user to create their own password when they first log into the Web Portal. Once all of the required fields have been filled in, the new user will automatically be added to the list of users for your organization.

1. When the user logs into the Web Portal or App, they will now be restricted to the operators and features permitted by their Role. They will also not have permission to make any changes to the data in the database.

4.0 - Additional Access Tools in the Users Page

Once a user has been assigned a role in the Users page, they can be granted access to additional operators beyond those defined by their role. They can also be restricted to specific wells, if required. To do so, follow the below steps:

4.1 – Access to Additional Operators

1. Toggle ON operators that you want the user to be able to access. Click on Apply to save your changes. The chosen operators will be added to the permitted operators granted by the user’s role. In this example, the user’s role grants access to Black Oil & Gold, LLC, but this specific user has also been granted access to Venture E&P and Gold Resources.

2. Click on Apply to save your changes.

4.1 – Well Restriction

1. This will display a list of all wells contained under the operators that the user can access. The list can be filtered by typing in the search bar at the top of the list.

By default, the wells will all be toggled OFF. When this is the case, the user has access to ALL wells under the operators permitted by their role.

To restrict access for the user, toggle the wells you want them to be able to access ON. The user will now only be able to access wells that have been toggled on, and will not be able to access any wells that are toggled off.

1. Click on Apply to save your changes.

5.0 – Database Access

The Database Access page allows the you to grant users from other organizations access to your organization's server database, using the Innova Web Portal. To grant a user access to your organization's server database, follow these instructions:

2. In the main menu, scroll to the bottom and click on User Management, then click on Database Access.

1. Enter a valid username from another organization into the UserName field at the bottom of the page. Note, that if the email address used here is not being used within another Organizations user management, then this process will not work.

Alternatively, you can grant access to all users registered under another organization by entering the organization's name. For example, typing Innova would grant access to all users in the Innova organization. This option removes the requirement to add lots of individual usernames, and ensures any new users are granted access automatically. Contact Innova directly to find out the correct nomenclature for any required organization.

1. In the Organization field, select the organization that you want to grant the user access to. In most cases, you will only have your own organisation as an option here.

1. In the RoleId field, choose the role that you wish to grant the user when they are viewing your organization.

Each row in the expanded section displays the following:

Organisation: The organisation that the user has been granted access to.

Role: The role the user has when accessing the organisation.

Access Granted By: The name of the admin in your organisation that gave the user access.

Access Granted Date: The date this user was granted access.

Once a user has been granted access to your organization’s server data, they will able to view wells from both their organization and yours on their Wells List page, when logged into the Web Portal.