This chapter is a collection of concepts that are used in Building X applications.


The Siemens ID user account is required to access Building X applications. A user can create a new Siemens ID account after being invited to a company. During the first logging in, the new user is required to create an account in the Siemens ID Self Service Portal. After registration, the user can access My account in the Accounts application to review the available memberships and set up the notification preferences.


A company is considered the top level unit, for example Siemens, and consists of a number of partitions. A company can have multiple locations (campuses) that have at least one building. The membership of a user in one or more companies is required to use the Building X applications.


A Subscription is a contractual arrangement to use 1...n purchasable Building X applications. The subscription gives access to a set of applications that is tailored for a specific use case. All subscriptions give access to the three platform applications: Accounts, Devices and Data Setup. Depending on the targeted use case, applications like Operations Manager or are also available with the subscription.


User roles are a predefined set of permissions for a specific application. In Building X, two types of roles exist: Platform roles and application specific user roles. The three platform roles each give access to the complex functions of the platform applications Accounts, Devices and Data Setup and are tailored to a specific use case, like Application Engineer. To give access to the functions of the other applications of a subscription, the applications specific user role is required. Most applications have three levels of permissions: Basic, Standard and Advanced. User roles cannot be given directly to a user, but are managed by creating User groups for each of the available user roles.

User Groups

User groups grant access to a partition of a company and at the same time give the users in the user group a specific level of permissions. A user group can give access to multiple partitions but can only contain one user role. To give a user multiple user roles, the user must be added to the according user groups. For example, a user needs both the Application Engineer platform role and the Operations Manager – Advanced user role for a partition of the company. This user needs to be a member of two user groups that have these roles and give access to the same partition.


A user is a person that is a member of at least one company and has been granted access to at least one partition. A user needs an Account to access any Building X application. o Access can be given either by the Customer administrator of a company or by Siemens or a Third Party at Customer’s request and authorization.

Machine User

A machine user is a virtual user that can perform a specific set of actions in the background. For machine users, a set of machine user roles is available. To give a machine user access to a partition, the machine user needs to be a member of a user group with the required machine user role and access to the required partition.


A partition is a sub-unit of a company. With partitions, different use cases for a company can be performed by having different subscriptions for the different partitions of a company.

Example: Company A consists of Partition A and Partition B. Partition A has Subscription A, Partition B has Subscription B. User A is a member of a user group that gives access to Partition A with Advanced user role. In Partition B, the user has no permissions and cannot access the same set of applications.


A site is a representation of the company with a real address. A site can either be a single building or a campus with multiple buildings. A company and partition can have multiple sites.