[IAM] How to limit user access to HERE Style Editor only

Requirement

For a outsourced third-party, grant access to HERE Style Editor while limit other access rights the most.

Resolution

1. Invite the 3rd party new user as "user" (the default role when you invite a new user)

2. After the new user accpeted the invitation, ask him or her to opne HERE Style Editor for at least once.
> The above step creates an app under the new user's management (this cannot be done by anyone else).

4. Convert this new user to "Restricted app access" to limit its access and right on the platform to the most
> This step should be done only after the second step or the new user will not be able to access Style Editor

Explanation

HERE Style Editor relies on an app to perform the tasks, the app can only be created by the Style Editor user.
This app is explicitly created and used by the user, so others even org admin cannot do this for him or her.

Note

For other use cases (not Style Editor), app manager or resource admin can grant app access to "Restricted app access" users.
The "Restricted app access" users still have full management rights to the apps that are assigned to them for management.