Managing Global Roles

About The Global Role Manager

The Global Role Manager is only available to advanced mode users.

The Global Role Manager enables users to create and manage global roles, and to assign these global roles to other users and groups.

About Global Roles

Global roles are collections of tasks that specify the permissions a user has the potential to perform within the system. For example, a user assigned a global role that includes the Resource Manager task has the potential to access Resource Manager if they are assigned folder roles that require this. Global roles are not contained within individual folders, but exist throughout the system and can be applied to any user or group.

The roles that are needed in Analytics are determined by the requirements of the different categories of user who will be working within that system.

If some roles appear disabled and marked as unlicensed following an install or an upgrade, it may be that you need a license upgrade to access those features. Contact your reseller for further information.

Global roles can normally only be managed by host administrators, but it is possible to allow organization administrators to grant users and groups global permissions without assigning them full global security permissions by setting up global permissions groups in each organization root, each of which has been uniquely assigned a particular global role.

Starting the Global Role Manager

To start the Global Role Manager:

Click the Hamburger icon in the menu bar, to show the tools menu.
Select Security > Roles. This starts the Role Manager, which manages folder-based roles.
In the Role Manager menu bar, click Global Roles.

Creating a Global Role

To create a global role:

In the Global Role Manager, click New.
Give the new role a name reflecting the permissions it grants or the category of user it is intended for.
Add a description if necessary, such as a summary of the permissions granted.
Select the tasks to be included in this global role.
Click Save.

Assigning a Global Role

To grant or remove global permissions:

In the Global Role Manager, click the global role to be assigned to users or groups. The properties of the global role are displayed.
Click the Members tab.

To remove a user or group from this global role:

Click the Delete button by the member.
Click Confirm.

To add a user or group to this global role:

Click the Add Members button. A dialog box will open.
Go to the folder containing the users or groups to be assigned this global role. You can use the fields at the top to filter this view to show only users or only groups, or to search for specific names.
Select the required members. You can select users and groups from multiple folders. Then click OK.
Close and Save.

Editing a Global Role

To edit a global role:

In the Global Role Manager, click the global role to be edited.
Click the Details tab and change the details if required.
On the Tasks tab select the tasks you want to add to the global role, and clear the tasks you want to remove from the global role.
Click Save to save your changes.

Deleting a Global Role

Global roles that still have members cannot be deleted.

To delete a global role:

In the Global Role Manager, select the global role you want to delete and click Delete.
Click OK to confirm the deletion.