Section 12.3 Groups

Section 12.3 Groups


Section 12.3   Groups

A group of users are given access to work areas (projects/collections) that all need access to the same resources. Groups can be created based on individual users that all need access to certain resources, they can be created based on global groups (such as departments: accounting), business function (accounts payable or accounts receivable), or workflow process function (invoice approval).

Section 12.3.1                  Create a New Group

Using the Navigation Tree, select Users>Groups>Roles. Tabs for Users, Groups, and Roles contain tables that show the information related to each security level. Select the Groups tab to view a list of groups and the associated users and roles assigned to the Group. Select Add New to create a New Group. You can edit, delete, or view the group settings by highlighting the group and selecting edit, delete, or details, respectively.

Section 12.3.2                 Group Properties

Section 12.3.2.1            Access to PPI/PII

By default, access to PPI/PII is turned off for users, groups, and roles. To allow a group of users to access PPI/PII turn on the access.

Section 12.3.2.2           Group Name

Give the Group a name that is descriptive. A department (Operations), business function (Accounts Payable) or processing function (Reviewers) are examples of good group names.

Section 12.3.2.3           Group Role(s)

Roles define permissions (actions) that users assigned to that role can perform. A Role is defined at the workspace level and is restricted to performing actions when assigned to a group for work areas that fall under the umbrella of the group permissions.

Section 12.3.2.4           Group User(s)

Users can be assigned directly to a group. The user will keep the permissions granted to the user or the role the user is assigned to. The user will then be granted access to work areas under the group data policy. Users can belong to multiple groups. Users that are assigned to a role will also appear as members of a group when the role is added to the group.

Section 12.3.2.5           Group Security Policy

A group level security policy defines which work areas those roles or users assigned to the group have access to. Permissions for actions are defined at the Role or User level.

Section 12.3.2.5.1                Data Policy

A Group Data Policy grants access to work areas in the workspace. Roles can be inherited in the group policy OR can be defined separately. If a Role has a data policy defined the Role Data Policy overrides the Group Data Policy.


    • Related Articles

    • Section 12.2 Users, Groups and Roles Organizational Chart

      Section 12.2 Organizational Chart of Users, Groups and Roles
    • Section 12 Security Management

      Security Management Security Management allows Administrators to set up users, groups, and roles which combined become a Security Policy. Policies are vital when it comes to keeping proper access rights to your most sensitive data. The ability to ...
    • Section 6.11 Print (Roadmap)

      Section 6.11 Print (Roadmap) The print feature, by default, is disabled. The administrator can allow end users, groups, or users with a specific role to print records. Please contact your administrator for access to this feature.
    • Section 12.4 Roles

      Section 12.4 Roles A security role is a collection of privileges in a workspace. Users can be assigned to a role and inherit the permissions defined in the role. Roles can be added to groups and will be restricted to performing the actions defined by ...
    • Section 10.2.2 Regex

      Section 10.2.2 Regex A Regex or regular expression (sometimes called a rational expression) is a sequence of characters that define a search pattern, mainly for use in pattern matching with strings, or string matching. Regular expressions are a ...