Account Pools

An Account Pool is a container for member Accounts that can either be fully managed by the Account Pool owner or any it's Applications, or it can implement OAuth2.0 to give each Account holder the option to control what resources (scope) the grant the application permission to access.

Local Accounts

Local Accounts are as the name suggests local to the Account Pool. They can only ever access the API of the account pool as well as any Application APIs the have been assigned to said Account Pool.

If the Account Pool configuration permits, it is possible for Applications or account owners to impersonate and act as any of the Local Accounts. This is useful when the application handles the authentication, i.e. with own backend servers or functions that can perform the API requests on behalf of their own users.

It is also possible to let the clients perform the API requests directly against the Fabriqo Platform APIs. This however requires the implementation of the OAuth2.0 workflow.

Global Accounts

Global Accounts are Platform wide accounts that does not belong to any Account Pool. It is a way for account holders to consolidate into one primary account, even across Applications with different owners.

This is possible by having the Global Account owner and the Account Pool owner, both agreeing on an Account Pool Membership. An Account Pool must first be configured to allow Global Account Membership for this to be possible.

Global Accounts offer to potential of the Account owner granting permissions to some of their own data Blocks. However, there are some restrictions when dealing with Global Accounts. An Application cannot always act on behalf of a Global Account the way it would normally be allowed to with Local Accounts.