CMS

Groups and permissions

Create groups, add members and decide which categories a group sees.

Permissions belong to Groups: a group – such as "Sales South" or "Dealers Austria" – is given permissions on categories, and anyone in the group has those permissions. Administrators may change groups.

Creating a group

Open Groups

Click Groups in the navigation and then New group at the top right. If there are no groups yet, Create the first group in the empty list does the same.

Details

Enter a Name and, if you like, describe the group under Description.

Create

Click Create. The new group opens straight away, ready for members.

Renaming a group

Choose the group from the list. Its name is at the top, in a field: click into it, type the new name and click elsewhere (or press ↵). The name is saved as soon as you leave the field – Renamed to … confirms it. Members and permissions stay as they are.

Members

Choose the group from the list. In the Members tab:

  • Member – search for people and add them.
  • Group admin / Member – group admins may approve documents when a workflow names the group as approver.
  • Remove from group

If your users come from a directory service (Active Directory, LDAP), DDM can fill groups from there automatically – see Directory services (LDAP).

Where a group comes from is shown by the list's filter with Origin: Manual, LDAP, External source, or Migrated from the old system for groups that came along in the move from the previous DDM.

A group's permissions

The Permissions tab shows the whole category tree from the group's point of view. For each category you set:

LevelMeaning
Fullsee, upload, change, create sub-categories
Readsee and open in the app
Nonelocked – even if a parent category says otherwise
Inheritedsame as the parent category

Then click Save permissions.

By ticking several rows, you set the level for many categories at once: Full, Read or No access.

How what someone sees comes about

  1. A person is a member of one or more groups.
  2. Each group has permissions on categories; sub-categories inherit them unless something else is set there.
  3. A document is visible if one of its categories is visible – unless the document's Access tab makes an exception.

What a person sees in the end is shown in the user panel on the Access tab – category by category, with the group that grants it. View as … shows what the document store looks like for someone.

Removing a group

Choose the group and click the bin beside its name (Remove group). The dialog says how many members are affected; confirm with Remove permanently. The members lose the group's permissions; their accounts remain.

To remove several groups at once, tick them in the list and click Delete in the bar below it.