Administrative Permission Sets

 Last updated: January 11, 2018     


Overview

Objective

As a Super Admin, you can create administrative permission sets. You start with a Full Subscriber set of permissions and build from there. A permission set is a flexibile way to create lighter admin roles so you can delegate access to specific areas without having to delegate to all areas.

Permission sets can be assigned to users in the Full Subscriber role from within the Address Book. This means that users who are assigned to this permission set will have access to any areas you indicate, but will respect the folder and document security that is set for Full Subscribers.

Benefits

Custom permission sets give your organization more flexibility when managing work in SpringCM. Permissions are grouped into categories based on functions. This can help you compartmentalize roles within your SpringCM account so that, for example, a user does not have to be a Super Admin to run a customized report.

Feature Components

The permission set groups are as follows:

Automation Tools

Doc Launcher: user can create, edit and delete items in Doc Launcher Configurations, Doc Launcher Forms, and Form Libraries.

Workflow & Automation: user can create, edit and delete components within and related to Workflows.

  • Workflows
  • Smart Rules
  • Schedules
  • Forms
  • Reminder Templates
Note: Even though the Workflow engine has full unrestricted access to the document repository, users with the Workflow & Automation permission set continue to respect existing folder security for the Full Subscriber role and any membership in security groups.

Account Management

UI Preferences: user can change branding and customer toolbar actions.
Security: user can change account level security settings including 2-step verification setting, login restrictions, SAML SSO and password preferences.

Documents & Folders

Attributes & Auto Numbers: user can configure document and folder attribute fields including Attribute Groups, Auto Numbers and Attribute Import Mappings.

Reports

Reports: user can create, edit, delete and run customized reports within your account. This does not have bearing on the out-of-the box reports that are usable by all users in the account.

Integrations

Integrations: user can administer settings for third-party integration configurations including Salesforce, electronic signature vendors and REST API.

User Management

Users: user can create, edit and delete users and queues in the Address Book.

Admin How To

Permission sets can be assigned only to users who are Full Subscribers.

Create a New Permission Set

  1. Navigate to the Preferences area of SpringCM.
  2. Click the Permission Sets link under Account Preferences.
  3. Click the New Permission Set button to start a new permission set.
  4. Check the boxes next to the administrative areas to which you want to grant access.
  5. Click the Save button when you are finished.

Assign a Permission Set to a New User

As a Super Administrator, you can assign new a new user administrative privileges by assigning him/her a curated permission set. You can assign permission sets only for users who have the Full Subscriber role.

  1. Navigate to the Address Book.
  2. Click Create User. New users default to the Full Subscriber role.
  3. Once you have filled in a login name, select the appropriate permission set from the Permission Set dropdown.
  4. Continue to fill in the required fields on the New User screen.
  5. Click the Save button.

Assign a Permission Set to an Existing User

As a Super Administrator, you can change a user's administrative privileges by assigning him/her a curated permission set. You can assign permission sets only for users who have the Full Subscriber role.

Note: You should not change any user's role unless necessary. Changing roles might impact folder/document access.

  1. Navigate to the Address Book.
  2. Open a Full Subscriber user's profile by clicking on his/her name link.
  3. Click the Permission Set dropdown menu.
  4. Select the permission set you want to assign to this user.
  5. Click the Save button.

FAQs

Can a Full Subscriber with the User Management permission assign roles, security group, persona, or permission set?

No, these security actions can only be done by Super Admins.