> For the complete documentation index, see [llms.txt](https://frameworks.greendealdata.eu/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://frameworks.greendealdata.eu/governnace-frameworks/gdds-rulebook/trust-and-participation-governance/stage-3-onboarding-and-assignment-of-roles-and-access-rights.md).

# Stage 3 — Onboarding and assignment of roles and access rights

## Rule 

On admission, the participant accepts the binding instruments of participation and is granted the rights attached to the roles it has been assigned. Admission is completed by the participant's acceptance of the Rulebook, the Data Processing Agreement and other applicable legal documents, and the relevant service level agreements. 

## Procedure 

Onboarding brings the admitted participant into operation: required documentation is signed, the participant's identity is issued in the data space (party identification), and their roles and corresponding access rights are configured. Certain situations require tailored onboarding, each of which is acknowledged as needing dedicated procedural coverage: 

* Participants already trusted within a use case or DSG — where a participant has already been verified within a domain-specific environment, GDDS onboarding should be as simple as a single opt-in, with technical complexity handled by the domain maintainer in the background. 
* Representative mandates — where a natural person applies on behalf of a legal entity, evidence of the mandate or authorisation must be provided, captured via the application form's mandate/proxy field. 
* Service providers acting on behalf of data providers — where a Service Provider operates technically on behalf of a Data Provider, the accountability and liability boundaries must be clarified in the onboarding documentation; this intersects with the role-combination rules. 
* Participants in the Individual category, rather than the Institutional category 

## Responsible body 

The GDDS Operator carries out technical onboarding and party-identifier issuance under DSGA oversight, within the role and access-rights/trust framework approved by the governance bodies and described within this GDDS Rulebook. 

{% hint style="warning" %}
*Note: The final admission documentation set (documents to sign, legal instruments such as the Data Space Participant Agreement, service level agreement acceptance, and Rulebook acceptance) is to be completed. The technical onboarding and party-ID issuance procedure is to be detailed in the*[ *Technical Framework section*](/12-data-sovereignty-and-trust/identity-and-attestation-management.md)*.* 
{% endhint %}

{% hint style="warning" %}
*Note: A dedicated co-creation session on special onboarding scenarios, covering authorisation, mandates, and delegation of representation, is required; this sub-section is a placeholder pending that session's output.*
{% endhint %}

{% hint style="info" %}
*The Pictures below are a first draft, and they might be removed, or moved to either the technical framework section or operational framework section - TBD.*
{% endhint %}

<img src="/files/uLMuO7NxqaAkRPeJxRmw" alt="" height="368" width="624">

<img src="/files/oxmrtqILEX8B0CAsSTSB" alt="" height="345" width="624">

&#x20;