Certificates
A digital certificate is used as a proof of identity, and can be compared to a driver’s license or a passport.
Expired certificates
Every certificate has a set validity period, and once it has expired, it is no longer accepted in the Lequinox platform and needs to be renewed. For example, a sign certificate generally has a validity period of three years.
Console administration levels
Organisation user
The lowest console administration level.
Role administrator
An administration level that provides access to role accounts and archive, and can add and manage role accounts that have been assigned the same role as they have.
Organisation administrator
The highest console administration level for a connected organisation.
Lequinox administrator
The highest console administration level, reserved for the platform owner. This administration level is not available to connected organisations.
Role accounts
A role account is used as an identifier for a user in an organisation in the Lequinox platform. When created, a role account is assigned a role and – if it is an internal account – a console administration level as well.
When creating an internal role account, provide it with one of three administration access levels. There is a fourth level in the platform organisation, Lequinox administrator, but it should be reserved for a select few in the platform organisation that need to be able to connect customer organisations and other platform administrators.
Internal vs external role accounts
Internal role accounts are primarily intended for users closely linked to your organisation, like employees. External role accounts are intended for users not part of your organisation, like contractors, vendors or corporate customers, but you want to interact with them via Lequinox enabled applications and get traceability for these interactions.
Organisation- vs user-managed role accounts
A role account (internal or external) can be either organisation-managed, where it is managed via a Lequinox-enabled application and the platform server, or user-managed where it is managed via Lequinox professional ID.
Organisation-managed
An organisation-managed role account (also referred to as platform-managed) is managed by the platform server via a Lequinox-enabled application. The application utilises functions in the Lequinox platform REST API via a platform server account. When an organisation-managed role account is involved in a transaction, the platform server acts as the role account in the transaction and signs the transaction.
User-managed
A user-managed account is managed by the user via Lequinox professional ID, which the user can download from Google Play before they activate their account.
Set an account to User-managed if the user is to be able to sign transactions via Lequinox professional ID. Once created, a user-managed role account must be activated via the invitation email that the console sends to the user. Hence, the user must install Lequinox professional ID to complete their account activation.
Roles
Organisation and Lequinox administrators are able to add and edit internal and external roles associated with the organisation they belong to. Roles must also be connected to their respective agreements. When a role account is created, it must be assigned to one of the available roles. To activate their account and their role, the user must sign the connected agreement.
A role is internal or external, depending on whether it is to be assigned to internal role accounts or external role accounts.
The user agreement you want to assign to the role must be created before you create the role.
Note that external roles can also be created through a Lequinox enabled application via functions in the platform REST API.
Transactions
The Lequinox platform allows users or applications to create, send and open encrypted transactions via Lequinox-enabled applications. Transactions also include a number of services that affect what a transaction creator or participant can and cannot do, and when.