Manage users, groups and permissions

The
User management
section of the
Admin
module includes all user and group-related functions.
note
Only site administrators and member administrators can access this module.
Site administrators
can access all actions in this section, including managing all site users.
Member administrators
can add new users and manage only those users they added themselves.

Overview

Click the to
Admin
module, then select
Users
under
User management
:
The user management section of the Admin module provides settings for users and groups:
  • Users - This page is used to add new users to the site and view and manage existing users, including assigning permissions to users when user-based security has been enabled
  • Groups - This page is used to create new groups and manage existing groups, including changing the set-up of groups and configuring group permissions. This page is only visible if group-based security has been enabled for the site

Using groups to define permissions (recommended)

Permissions can be set at either the user or group level. We recommend using group-based permissions as this gives better control over who has access to content, and then you can reuse the groups across different sites. User-based permissions must be applied to each user separately and can only be edited one by one.
Open the
Admin
module, then select
Security
under
Site settings
:
Make sure that
Use groups for permissioning
is active.
note
It is best to create groups before adding users, as you can assign users to appropriate groups as they are added to the site.

Predefined admin groups

To define permissions for a site, first open that site, open the
Admin
module, then select
Groups
under
User management
:
note
By default, there are four predefined admin groups ready to be used.
  • The
    Site admin
    group has the highest permissions. Site admins can perform any task within a site, with no restriction
  • Member admins
    can manage any users that they added to the site themselves
  • Content admins
    can access and manage any content on the site
  • Reporting admins
    can manage audits and reports

Site and system groups

These two types of permission groups control access at different levels.
  • A
    System group
    is created and managed at system level (across all sites on the instance).
  • A
    Site group
    , however, allows you to permission a group for a single site. You can add users to it on a site-by-site basis.

Users in multiple groups

Users can be members of multiple groups. If there are conflicting permissions in these groups, the permissions merge and the user gains the rights of the group with higher permissions.