Access Control
Access Control is where you invite people into your workspace and decide what each of them can do. It holds three different kinds of thing, and only one of them grants anybody anything. Getting that straight first saves a lot of confusion later.
A role carries permissions — nothing else does
A role is a named set of permissions. You choose them on a grid of features against seven fixed columns — VIEW, LIST, CREATE, DELETE, READ, UPDATE and EXECUTE — and whatever is ticked is what the people holding that role can do. If someone cannot open a page or use a button, their role is what decides it.
A department and a group are named buckets of users: a name, a description and a list of members. Neither carries a permission of any kind, so putting someone into one never widens what they can do.
Role, department, group
| Role | Department | Group | |
|---|---|---|---|
| What it is | A named set of permissions | A named bucket of users | A named bucket of users |
| Grants permissions? | Yes — the only thing that does | No | No |
| Where you create it | Add Role | Add Department | Add Group |
| How someone gets one | Only at invitation, under Pre-Assign | Manage Members, or their User Details | Manage Members, or their User Details |
| Ready-made ones exist? | Yes — five, badged SYSTEM | No | No |
Departments and groups behave identically: the same screens, the same member management. The difference is the meaning you give them — a department for how people report, a group for a team that cuts across departments.
Modules use all three to scope what people see
Elsewhere in Elie you say who something is for by choosing from Roles, Departments and Groups — on an IntELIEdocs orchestrator's Visibility Scope, or when you set Knowledge Base access. Everything in your workspace is offered there immediately; there is nothing to publish or switch on first.
Renaming one updates every scope that refers to it. Deleting one leaves those scopes pointing at something that no longer exists, with no warning first — so check where a department or group is used before you remove it.
Find your way
| If you want to | Go to |
|---|---|
| Add someone | Inviting a user |
| See who has access | Managing users |
| Change what someone can do | Roles |
| Describe your organisation | Departments · Groups |
| Understand how this affects modules | Permissions reference |