Difference between revisions of "Global User Administrator"
Michael Reid (talk | contribs) |
(→Overview) |
||
| (12 intermediate revisions by 3 users not shown) | |||
| Line 1: | Line 1: | ||
| − | The {{GUA}} is | + | ==Overview== |
| + | The {{GUA}}, also known as the '''System Administrator, '''is a [[User]] who controls the entire [[Organisation Hierarchy|organisation hierarchy]] within the copy of [[SmartSimple]] and is able to perform the following functions: | ||
* Manage system security. | * Manage system security. | ||
* Manage email Integration. | * Manage email Integration. | ||
| − | * | + | * Manage the [[JSON API]] functions. |
* Create additional [[User|users]] at any level – including additional {{GUA}}s. | * Create additional [[User|users]] at any level – including additional {{GUA}}s. | ||
* Create new sub-organisations. | * Create new sub-organisations. | ||
| Line 11: | Line 12: | ||
* Create [[Role|roles]] and collaborative [[Workflow|workflows]]. | * Create [[Role|roles]] and collaborative [[Workflow|workflows]]. | ||
| − | ==Notes== | + | ===Notes=== |
* As a security feature, whenever a new '''{{GUA}}''' is created, all other {{GUA}}s within that copy of [[SmartSimple]] will receive an e-mail notification of the new administrator. | * As a security feature, whenever a new '''{{GUA}}''' is created, all other {{GUA}}s within that copy of [[SmartSimple]] will receive an e-mail notification of the new administrator. | ||
| − | * If your user type is Global User Administrator you will see all items on | + | * If your user type is Global User Administrator you will see all items on menu icon ('Display Menu Icon' option in role configuration). All selected/deselected items in 'Menu Items' will be ignored as you are Global User Administrator and you will see all items on the left-hand panel. |
| + | |||
| + | ==Enabling or Disabling System Administrator Privileges== | ||
| + | In order for a user to have '''SysAdmin '''privileges, they must have their [[User Role|role]] set to '''System Administrator. ''' | ||
| + | |||
| + | If a user does not already have '''SysAdmin '''privileges, you can always add them into that role by following these steps: | ||
| + | |||
| + | 1. Access the [[Profile|profile]] of the user who you want to associate a '''SysAdmin '''role to. | ||
| + | |||
| + | 2. Click on the '''Options '''button on the top left row of buttons; this will enable a drop down menu. | ||
| + | |||
| + | 3. Under the subheading '''Properties, '''click '''Roles and Access.''' | ||
| + | |||
| + | :: [[File:Option roles and access.png|300px|border]] | ||
| + | 4. On the right of the first line will be a toggle on/off function labelled '''Global Administrator. ''' | ||
| + | |||
| + | :: [[File:GUA role.png|500px|border]] | ||
| + | By toggling on this option, you are providing this user with '''{{GUA}} '''privileges. | ||
| + | |||
| + | By toggling off this option, you are removing them from the {{GUA}} role. | ||
| + | |||
| + | 5. Click '''Save '''to ensure that the role has been added or removed. | ||
| + | |||
| + | ==Security Permissions for System Administrators== | ||
| + | In addition to enabling the '''Global User Administrator '''using the toggle on/off option from the specific user [[Profile|profile]], you must also ensure that the '''System Administrator '''[[User Role|role]] in your system has the appropriate security permissions. | ||
| + | |||
| + | 1. Click on the 9-square menu icon on the top right of your page. | ||
| + | |||
| + | 2. Under the heading '''Configuration, '''select '''Global Settings.''' | ||
| + | |||
| + | 3. Click on the tab labelled '''Security. ''' | ||
| + | |||
| + | 4. Click on the hyperlink '''[[Security Matrix]]. ''' | ||
| + | |||
| + | 5. For the '''Organization '''tab, scroll down the list of user roles until you find the '''System Administrator '''role. Click into it. | ||
| + | |||
| + | Check the following options for access and permissions under each row that mentions ''All:'' '''View, Edit, Add, Delete '''and '''Lookup. ''' | ||
| + | |||
| + | 6. Click into the '''User '''tab and repeat step 5. | ||
| + | |||
| + | 7. Click '''Save '''when you are done. | ||
| + | |||
| + | * When you have permissioned the security matrix for a role, there should be a '''green check mark '''next to the role name on the left-hand list. This way you can remember which roles have or haven't been given access to system features; this is also where you can check if a user role finds out they don't have access to something that they should. | ||
| + | |||
| + | Your security matrix for a '''SysAdmin '''should consequently look something like this: | ||
| + | |||
| + | :: [[File:GUA enable security.png|900px|border]] | ||
| + | ===Other Permissions=== | ||
| + | The '''SysAdmin '''role should also be permissioned to have more functionality in the system - for example, you should ensure that the role has the ability to set, activate, set password, and edit email addresses of all other people in the system. | ||
| + | |||
| + | By clicking on the 9-square menu icon and '''Global Settings''', you can permission the '''System Administrator''' role in multiple areas of the system easily and efficiently. Some key areas include the following: | ||
| + | |||
| + | <pre> Use the Search bar on the top right to easily find hyperlinks in Global Settings. </pre> | ||
| + | * '''System Visibility Permissions''' | ||
| + | * '''System Feature Permissions ''' | ||
| + | |||
| + | You can also permission the '''SysAdmin''' role by clicking on the menu icon > '''Roles and Security > User Roles. ''' | ||
==See Also== | ==See Also== | ||
| − | |||
* [[User]] | * [[User]] | ||
| + | * [[User Role]] | ||
[[Category:Security]][[Category:Roles]][[Category:System Auditing]] | [[Category:Security]][[Category:Roles]][[Category:System Auditing]] | ||
Latest revision as of 12:22, 5 July 2019
Contents
Overview
The Global User Administrator, also known as the System Administrator, is a User who controls the entire organisation hierarchy within the copy of SmartSimple and is able to perform the following functions:
- Manage system security.
- Manage email Integration.
- Manage the JSON API functions.
- Create additional users at any level – including additional Global User Administrators.
- Create new sub-organisations.
- Subscribe organisations to SmartSimple application programs.
- Upload organisation and contact information (either internal or external organisations).
- Define custom fields for any SmartSimple object.
- Create roles and collaborative workflows.
Notes
- As a security feature, whenever a new Global User Administrator is created, all other Global User Administrators within that copy of SmartSimple will receive an e-mail notification of the new administrator.
- If your user type is Global User Administrator you will see all items on menu icon ('Display Menu Icon' option in role configuration). All selected/deselected items in 'Menu Items' will be ignored as you are Global User Administrator and you will see all items on the left-hand panel.
Enabling or Disabling System Administrator Privileges
In order for a user to have SysAdmin privileges, they must have their role set to System Administrator.
If a user does not already have SysAdmin privileges, you can always add them into that role by following these steps:
1. Access the profile of the user who you want to associate a SysAdmin role to.
2. Click on the Options button on the top left row of buttons; this will enable a drop down menu.
3. Under the subheading Properties, click Roles and Access.
4. On the right of the first line will be a toggle on/off function labelled Global Administrator.
By toggling on this option, you are providing this user with Global User Administrator privileges.
By toggling off this option, you are removing them from the Global User Administrator role.
5. Click Save to ensure that the role has been added or removed.
Security Permissions for System Administrators
In addition to enabling the Global User Administrator using the toggle on/off option from the specific user profile, you must also ensure that the System Administrator role in your system has the appropriate security permissions.
1. Click on the 9-square menu icon on the top right of your page.
2. Under the heading Configuration, select Global Settings.
3. Click on the tab labelled Security.
4. Click on the hyperlink Security Matrix.
5. For the Organization tab, scroll down the list of user roles until you find the System Administrator role. Click into it.
Check the following options for access and permissions under each row that mentions All: View, Edit, Add, Delete and Lookup.
6. Click into the User tab and repeat step 5.
7. Click Save when you are done.
- When you have permissioned the security matrix for a role, there should be a green check mark next to the role name on the left-hand list. This way you can remember which roles have or haven't been given access to system features; this is also where you can check if a user role finds out they don't have access to something that they should.
Your security matrix for a SysAdmin should consequently look something like this:
Other Permissions
The SysAdmin role should also be permissioned to have more functionality in the system - for example, you should ensure that the role has the ability to set, activate, set password, and edit email addresses of all other people in the system.
By clicking on the 9-square menu icon and Global Settings, you can permission the System Administrator role in multiple areas of the system easily and efficiently. Some key areas include the following:
Use the Search bar on the top right to easily find hyperlinks in Global Settings.
- System Visibility Permissions
- System Feature Permissions
You can also permission the SysAdmin role by clicking on the menu icon > Roles and Security > User Roles.
