Getting familiar with Admin roles and permissions
Any referenced datasets can be downloaded from "Module downloads" in the module overview.
Getting familiar with Admin roles and permissions - Exercise
For an overview of available roles, or to create, edit, copy, or delete roles, open the Role Management dialog box.
- Click Tools menu > Administration > Global Settings > Security tab > Manage Roles.
View roles and permissions
- The permissions associated with each role are listed. Click Close.
Create a role
- Click New Role on the Roles Management dialog box.
- Enter a name and an optional description for the user-defined role.
- Define the role's permissions by adding from the list of available permissions.
- Click OK.
Copy a role
- Select the role that you want to copy and click Copy.
- Edit the role's name and description as needed.
- Adjust the role's permissions by adding from the list of available permissions and removing from the list of selected permissions.
- Click OK.
Edit a role
- Do one of the following:
- Select the role that you want to change and click Edit.
- Double-click the role that you want to edit.
- Edit the role's name and description as needed.
- Adjust the role's permissions by adding from the list of available permissions and removing from the list of selected permissions.
Create a group
Create a new user group. You can name the group, enter the email distribution addresses for the group, assign roles to the group, and identify which vaults the group can access.
Note: You must be assigned the role of Administrator to perform this operation.
- Select  Tools > Administration > Global Settings.
- In the Global Settings dialog box, select the Security tab.
- Click Manage Access.
- In the User and Group Management dialog box, select the Groups tab and click New.
- In the New Group Profile dialog box, enter the information for the new group:
- Name for the group.
- Email distribution list address for the group. You can also enter a list of individual email addresses separated by a semicolon (;).
- Click Linked to for associating the group to an Active Directory group. Refer to Link to an Active Directory Group for more information.
- Click Roles and assign one or more roles to the group.
Note: As a best practice, always assign roles to groups to make user permission management easier. - Click Vaults and select one or more vaults to which the group has access. Every member of the group has access to the vaults assigned to the group.
- A group can be a member of another group. Click Groups and select one or more groups to which this group belongs.
- Click **Group Manager** to assign a user as a group manager.
- Select the Enable group checkbox to activate the group.
- Click Add to add members to the group.
- From the Add Members dialog box, select the users to include in the group, and then click OK.
- Click OK.