What is Access Control / Group Permissions?
"Group Permissions" is the new way of controlling who can do what in Seraphim Office. Previously, in Seraphim Silverlight, permissions were controlled on a user by user basis. Now, you can control who can do what at the group level. Instead of assigning 6 roles, and 15 tiles to someone, now you can just assign them to the right permission group, and voila, they have their permissions!
How do I set up Access Control?
The general group permission process looks like this:
- Create a static group and indicate the group is to be used for permission sets
- Assign permissions to the group
- Assign people to the group (You can do this in the group creation if you like. It doesn't have to be done after the permissions are assigned).
That's it! Once the group is set up, it's self-sustaining. All you have to do to adjust someone's permissions is add them to the right group, or simply remove them from it! The permissions will be added or subtracted accordingly. Set up as many permission groups as you like.
Can users be in more than one permission group?
You bet they can! Seraphim looks at the groups as "cumulative". What does that mean? Let's say there are two two permission groups. One group has access to Attendance and not Facilities. Another group has access to Facilities and not Attendance. If a user is in both groups, they will have access to both Attendance and Facilities. The system will add permission sets together cumulatively for each user upon login.
1. Create a static group / Set the Group for Permissions
- First, create a static group in the Directory Tile (For more directions on creating a static group, click here.) We recommend using a naming convention for the group, to indicate that it's for permissions. For example, "Permissions - Back Office Admin".
- If you want to add people to the group now, you can do so! Or you can wait to add folks to the group after you've assigned permissions to the group.
- While in Edit Mode of the group, click on the PROPERTIES tab on the left, and turn on the switch for "USE THIS GROUP FOR ACCESS CONTROL"
- Make sure to hit SAVE!
2. Assign Permissions to the Group
- Click on the PERMISSIONS tile
- In the "Access Control Groups", you should see the name of the permission group you just created. Click the group to select it.
- Now, select all the roles that this group should have by checking off the necessary boxes.
- Click on the FEATURES tab, and double-click the tiles that this group should have access to.
3. Assign users to the Group
- Now you can add people to the group like you would normally! Any time the user logs in to the system, the system will assess what permission groups they're in and will apply the appropriate permissions.