Profile Configuration and Permissions Reference for Greater Orlando Aviation Authority
Version 1.0January 2025
Overview
This guide provides step-by-step instructions for setting up Single Sign-On (SSO) users in the GOAA (Greater Orlando Aviation Authority) system. Each user profile has specific permissions and license assignments that determine what they can access and do within the platform.
đĄ Important: All GOAA users authenticate using SSO with their @goaa.org email addresses. Make sure to configure the Federation ID field correctly to enable seamless login.
Available User Profiles
There are five distinct user profiles in the GOAA system:
Citiri Admin â Full system administration with access to all features and configurations
COS Enablement â Specialized enablement and configuration access
COS Risk Team â Risk management and oversight capabilities with maintenance role
COS Stakeholder â External stakeholder access for collaboration and review
COS Executive â Executive-level stakeholder access for high-level oversight
Each profile is configured with specific permission sets and license assignments to ensure users have exactly the access they need.
Interactive Guide
Follow this step-by-step interactive guide to see exactly how to enable stakeholder users in GOAA:
âšī¸ Note: This interactive guide demonstrates the complete user creation process including filling out required fields, selecting the correct profile, and assigning permission sets. Refer to the sections below for detailed written instructions for each profile type.
Citiri Admin Profile
đ§ Citiri AdminFull Access
This profile provides complete administrative access to the GOAA system, including advanced features like Salesforce Maps, analytics, and all system configurations.
Place the email address in the Federation ID field (this enables SSO)
Deselect the "Generate Password" checkbox
Permission Set License Assignments
After creating the user, assign the following permission set licenses:
Analytics Platform
Salesforce Maps
Permission Set Assignments
Assign these permission sets to enable full admin capabilities:
CRM Analytics Platform User
Activity List Manager All
AGrid End User Access
CITIRI Extension 1 Permissions
Maps Admin
Quip
SF Maps
SharinPix Image Sync Permission
Timeline User
COS Risk Team Profile
⥠COS Risk TeamRisk Management
This profile is designed for risk management team members who need to monitor, assess, and manage risks across GOAA operations. Users with this profile have the Maintenance role assigned.
Place the email address in the Federation ID field (this enables SSO)
Deselect the "Generate Password" checkbox
Permission Set License Assignments
After creating the user, assign the following permission set licenses:
Analytics Platform
Lightning Console
Permission Set Assignments
Assign these permission sets for risk team functionality:
CRM Analytics Platform User
Activity List Manager All
Activity List Executor All (Status, Due Date, Assignee)
AGrid End User Access
CITIRI Extension 1 Permissions
Lightning Console
Quip
SharinPix Image Sync Permission
Timeline User
COS Stakeholder Profile
đ¤ COS StakeholderExternal Access
This profile is for external stakeholders who need limited access to view and collaborate on specific GOAA information. This user type must be created from a Contact record using the "Enable Customer User" option.
â ī¸ Important: COS Stakeholder users must be created from the Contact Record by selecting "Enable Customer User" â they cannot be created directly as standard users.
Select Customer Community Plus Login in the User License field
Select COS Stakeholder for the Profile
For Role, select Maintenance
3
Additional Details
Enter the user's Title
Enter the Company name
Place the email address in the Federation ID field (this enables SSO)
Deselect the "Generate Password" checkbox
Permission Set License Assignments
After creating the user, assign the following permission set licenses:
Analytics Platform
Lightning Console
Permission Set Assignments
Assign these permission sets for stakeholder access:
Stakeholder Permission
Stakeholder Base Permissions
Activity List Executor (Status, Due Date)
COS Executive Profile
đ COS ExecutiveExecutive Access
This profile provides executive-level stakeholder access for high-level oversight and strategic review of GOAA operations. Like COS Stakeholder, this user type must be created from a Contact record.
â ī¸ Important: COS Executive users must be created from the Contact Record by selecting "Enable Customer User" â they cannot be created directly as standard users.
Select Customer Community Plus Login in the User License field
Select COS Stakeholder for the Profile
For Role, select Maintenance
3
Additional Details
Enter the user's Title
Enter the Company name
Place the email address in the Federation ID field (this enables SSO)
Deselect the "Generate Password" checkbox
Permission Set License Assignments
After creating the user, assign the following permission set licenses:
Analytics Platform
Lightning Console
Permission Set Assignments
Assign these permission sets for executive stakeholder access:
Stakeholder Permission
Stakeholder Base Permissions
Activity List Executor (Status, Due Date)
Quick Reference Table
Use this table as a quick reference when creating users. It shows the key differences between each profile type.
Profile
User License
Role
Creation Method
Citiri Admin
Salesforce
â
Standard User Creation
COS Enablement
Salesforce Platform
â
Standard User Creation
COS Risk Team
Salesforce Platform
Maintenance
Standard User Creation
COS Stakeholder
Customer Community Plus Login
Maintenance
From Contact Record (Enable Customer User)
COS Executive
Customer Community Plus Login
Maintenance
From Contact Record (Enable Customer User)
âšī¸ Username Format: All users follow the format [email protected] and the same email address must be placed in the Federation ID field to enable SSO.
Summary
Creating SSO users for GOAA requires careful attention to profile selection and permission assignment. Remember these key points:
Username Format â Always use [email protected] for consistency and SSO functionality
Federation ID â Must match the email address exactly to enable Single Sign-On authentication
Contact-Based Users â COS Stakeholder and COS Executive profiles must be created from Contact records, not standard user creation