Managing permissions in the staff client


Home Prev	Chapter 21. Describing your people	Next

In this section, we’ll show you in the staff client:

where to find the available permissions
where to find the existing permission groups
how to see the permissions associated with each group
how to add or remove permissions from a group

We also provide an appendix with a listing of suggested minimum permissions for some essential groups. You can compare the existing permissions with these suggested permissions and, if any are missing, you will know how to add them.

Where to find existing permissions and what they mean

In the staff client, in the upper right corner of the screen, click on Admin > Server Administration > Permissions.

The list of available permissions will appear on screen and you can scroll down through them to see permissions that are already available in your default installation of Evergreen.

There are over 500 permissions in the permission list. They appear in two columns: Code and Description. Code is the name of the permission as it appear in the Evergreen database. Description is a brief note on what the permission allows. All of the most common permissions have easily understandable descriptions.

Where to find existing Permission Groups

In the staff client, in the upper right corner of the screen, navigate to Admin > Server Administration > Permission Groups.

Two panes will open on your screen. The left pane provides a tree view of existing Permission Groups. The right pane contains two tabs: Group Configuration and Group Permissions.

In the left pane, you will find a listing of the existing Permission Groups which were installed by default. Click on the + sign next to any folder to expand the tree and see the groups underneath it. You should see the Permission Groups that were listed at the beginning of this chapter. If you do not and you need them, you will have to create them.

Adding or removing permissions from a Permission Group

First, we will remove a permission from the Staff group.

From the list of Permission Groups, click on Staff.
In the right pane, click on the Group Permissions tab. You will now see a list of permissions that this group has.
From the list, choose CREATE_CONTAINER. This will now be highlighted.
Click the Delete Selected button. CREATE_CONTAINER will be deleted from the list. The system will not ask for a confirmation. If you delete something by accident, you will have to add it back.
Click the Save Changes button.

You can select a group of individual items by holding down the Ctrl key and clicking on them. You can select a list of items by clicking on the first item, holding down the Shift key, and clicking on the last item in the list that you want to select.

Now, we will add the permission we just removed back to the Staff group.

From the list of Permission Groups, click on Staff.
In the right pane, click on the Group Permissions tab.
Click on the New Mapping button. The permission mapping dialog box will appear.
From the Permission drop down list, choose CREATE_CONTAINER.
From the Depth drop down list, choose Consortium.
Click the checkbox for Grantable.
Click the Add Mapping button. The new permission will now appear in the Group Permissions window.
Click the Save Changes button.

If you have saved your changes and you don’t see them, you may have to click the Reload button in the upper left side of the staff client screen.

Prev	Up	Next
Comparing approaches for managing permissions	Home	Managing role-based permission groups in the staff client