Manage users, groups and permissions
The
User management
section of the Admin
module includes all user and group-related functions.note
Only site administrators and member administrators can access this module.
Site administrators
can access all actions in this section, including managing all site users. Member administrators
can add new users and manage only those users they added themselves.Overview
Click the to
Admin
module, then select Users
under User management
.
The user management section of the Admin module provides settings for users and groups:
- Users - This page is used to add new users to the site and view and manage existing users, including assigning permissions to users when user-based security has been enabled
- Groups - This page is used to create new groups and manage existing groups, including changing the set-up of groups and configuring group permissions. This page is only visible if group-based security has been enabled for the site
Using groups to define permissions (recommended)
Permissions can be set at either the user or group level. We recommend using group-based permissions as this gives better control over who has access to content, and then you can reuse the groups across different sites. User-based permissions must be applied to each user separately and can only be edited one by one.
Open the
Admin
module, then select Security
under Site settings
.
Make sure that
Use groups for permissioning
is active.note
It is best to create groups before adding users, as you can assign users to appropriate groups as they are added to the site.
Predefined admin groups
To define permissions for a site, first open that site, open the
Admin
module, then select Groups
under User management
:note
By default, there are four predefined admin groups ready to be used.
- TheSite admingroup has the highest permissions. Site admins can perform any task within a site, with no restriction
- Member adminscan manage any users that they added to the site themselves
- Content adminscan access and manage any content on the site
- Reporting adminscan manage audits and reports
Site and system groups
These two types of permission groups control access at different levels.
- ASystem groupis created and managed at system level (across all sites on the instance).
- ASite group, however, allows you to permission a group for a single site. You can add users to it on a site-by-site basis.
Users in multiple groups
Users can be members of multiple groups. If there are conflicting permissions in these groups, the permissions merge and the user gains the rights of the group with higher permissions.
