36
· 159 ·
You’ll also notice a drop-list, right below the toolbar, where you can select a group. You’ll use
this list to control the settings for each group.
The All Users Group. First, establish the settings for the All Users group. This is the default
group which includes all users. This is where you’ll restrict your low-level users from seeing
things they shouldn’t. In other words, anything that’s private or exclusive should be forbidden
in the All Users group.
Going back to our earlier example, you would give the All Users group access to the basic set of
cabinets, but you would deny access to the management cabinet.
Here is how you set access:
1.
Select All Users in the drop-list
2.
Select a cabinet you want to hide from the group
3.
Click Exclude from Group
4.
Repeat for any other cabinets you want to hide
5.
Repeat for any other items you want to hide: folder templates, naming options, etc.
Your Other Groups. Now it’s time to grant access to the private, exclusive items. Select the
group that should receive access. Next go through all of the cabinets, folder templates, etc.,
that they should see and click Include in Group.
The group will now be allowed to see those items.
Reconciling Permissions. You’ll notice that many users will belong to more than one group. For
example, the managers from our earlier scenario belong to two groups: All Users and
Managers. In this scenario, the management cabinet has conflicting permissions. It’s blocked in
the All Users group but allowed in the Managers group.
Where there’s a conflict, the most permissive setting wins. So if your user belongs to two
groups and the item is blocked in one but allowed in the other, the user will see the item.
Important: If you don’t block private/exclusive items in the All Users group, everyone will see
them! Why? Because everyone belongs to this group, so they get everything that’s allowed in
this group.
Other Settings and Features. As we will see next, there are other settings and options that you
can administer with the Admin Tool. You can control these on a group-by-group basis, just like
other shared items. Again, the most permissive policy will win.