Understanding DIP user roles and tasks

Within the DIP there are four Market Participant roles that can be assigned. Any organisation member invited to the DIP can have either a single role or be assigned multiple roles, allowing all four roles to be assigned to one person.

Users are not carried over from pre-production to production (the live system). This is because responsibilities within companies can vary between the two environments.

The Primary User Admin is the first User Admin role assigned. This is the person who will receive the invitation to join the DIP and will be the first person in your organisation to register on it.

The Primary User Admin will then check your company details and create additional users. This can include other User Admins.

The User Admin role, when assigned to any member, can create new DIP users for your company and manage DIP ids.

Changing your initial primary user

If you would like to change your Primary User Admin after an invite has been issued, please create a ticket on Elexon Support, providing company number, environment (pre-production or production) and new primary admin details.

The Certificate Admin is responsible for GlobalSign registration and vetting as well as certificate management.

The role is quite broad and requires technical understanding of certificate creation.

The initial role of the certificate admin will be to facilitate organisational vetting with GlobalSign. This must be undertaken by someone in your company. This user is referred to as the Primary Certificate Admin.

Subsequent steps, including PFX certificate file generation, will require technical understanding. This user can be different from the original Primary Certificate Admin.

If you are a non-active market participant, the certificate creation can be undertaken by your Data Connection Provider (DCP) on behalf of the company.

An organisation can add additional users (either internal or a third-party organisation such as a DCP) to its GlobalSign account to support the GlobalSign API Credentials and Certificate generation.

The Message Admin will have the ability to manage DIP IDs, create webhooks to receive status updates, replay/requeue messages and control ingress/egress of message channels.

If you are a non-active market participant, this role can be handed over to your DCP depending on commercial agreement.

This role will only have access to review the DIP Dashboard feature.

The DNS Admin is not a DIP role. This will be someone within your organisation who has access to your organisation’s DNS to create a TXT record for certificate validation.