Section 12.3 Groups
A group of users are given access to work areas (projects/collections) that all need access to the same resources. Groups can be created based on individual users that all need access to certain resources, they can be created based on global groups (such as departments: accounting), business function (accounts payable or accounts receivable), or workflow process function (invoice approval).
Section 12.3.1 Create a New Group
Using the Navigation Tree, select Users>Groups>Roles. Tabs for Users, Groups, and Roles contain tables that show the information related to each security level. Select the Groups tab to view a list of groups and the associated users and roles assigned to the Group. Select Add New to create a New Group. You can edit, delete, or view the group settings by highlighting the group and selecting edit, delete, or details, respectively.
Section 12.3.2 Group Properties
Section 12.3.2.1 Access to PPI/PII
By default, access to PPI/PII is turned off for users, groups, and roles. To allow a group of users to access PPI/PII turn on the access.
Section 12.3.2.2 Group Name
Give the Group a name that is descriptive. A department (Operations), business function (Accounts Payable) or processing function (Reviewers) are examples of good group names.
Section 12.3.2.3 Group Role(s)
Roles define permissions (actions) that users assigned to that role can perform. A Role is defined at the workspace level and is restricted to performing actions when assigned to a group for work areas that fall under the umbrella of the group permissions.
Section 12.3.2.4 Group User(s)
Users can be assigned directly to a group. The user will keep the permissions granted to the user or the role the user is assigned to. The user will then be granted access to work areas under the group data policy. Users can belong to multiple groups. Users that are assigned to a role will also appear as members of a group when the role is added to the group.
Section 12.3.2.5 Group Security Policy
A group level security policy defines which work areas those roles or users assigned to the group have access to. Permissions for actions are defined at the Role or User level.
Section 12.3.2.5.1 Data Policy
A Group Data Policy grants access to work areas in the workspace. Roles can be inherited in the group policy OR can be defined separately. If a Role has a data policy defined the Role Data Policy overrides the Group Data Policy.