Permission Sets

This section explains how to manage Permission sets.

A Permission is a string of characters structured as follows: feature=action. It allows the user to perform an action on a feature.

A Permission set is assigned to a user on a specific instance. Thus if a user is assigned to instances A and B and has permission p on instance A only, this permission won’t apply on instance B.

Create a new Permission set

Click on the Administration menu entry and then on the Permission sets tab.

Click on the Create permission set button.

A Permission set is meant to group permissions and avoid having to assign multiple permissions to a user.

A Permission set consists of:

• A Name (required), which has to be unique on the instance and will be displayed on the Portal
• A Description, to provide more details on the Permission set.
• An Enabled switch, to activate/deactivate the Permission set (default: true). If disabled, the Permission set exists but can’t be assigned to a user and will be removed from the user’s permissions.
• A list of Permissions (at least one required). In the example above, “Execute scripts” Permission set groups the following permissions: scripts=view, scripts=read and scripts=run.

Manage a Permission set

The Permission sets tab lists all the Permission sets you are allowed to see and also allows you to create and edit… provided you have the permission to do so.

Note

You can perform actions on the Permission sets by right-clicking on the cards.

Delete a Permission set

It is not possible to delete a Permission set as long as it is still assigned to one or more users. If you want to delete a Permission set, you will first have to de-assign it from all concerned users.

Edit a Permission set

All the details of a Permission set are editable.

If you rename a Permission set, you don’t need to re-assign it to the users who already had it, but you may need to update some Permission sets that would reference the renamed one.

For example, you may have a Permission set allowing users to manage other users and assign them a subset of existing Permission sets via the permset=read('PermissionSet1','PermissionSet2') permission.

Duplicate a Permission set

Duplicating a Permission set creates a new one with pre-filled data from the original.

Export a Permission set

A right-click on an expanded Permission set card, will allow you to export it as a JSON file. Permission sets can be imported with the blue button next to the Add button.

The Export/Import feature is very useful if you want to replicate Permission sets from one instance to another one.