This tutorial aims to help you with the configuration of access rights to module cards.
The Card section of each module is mainly composed of 2 categories:
Access
Restrictions
⠀
Access
This category allows you to choose which cards will be viewable and/or editable by the user.
It works on a card principle. For each perimeter chosen, you can then add read and write rights.
Choosing Access Rights
Click on "Edit access rights"
Select the perimeter of the cards to which you want to grant read/write rights
Example: "His Agencies" will allow you to grant access rights to cards associated with his agencies.
Choosing Read / Write Rights
Once the perimeter is validated, a card is created giving you the ability to set read and write rights on data groups linked to the cards (Candidates, Resources, etc.):
Main data
Administrative data
Actions
Positionings
Projects
Invoices
...
For each data group, choose whether you want to grant read / write rights to the user.
⠀
Good to know
If you check write, read is automatically checked.
If you click on the column header "Read" or "Write", this grants the right for all data groups
Adding Perimeters
You can create several cards to cover all scenarios you want.
⠀
Restrictions
This category allows you to apply access restrictions to certain cards or to certain data groups according to certain filters.
These filters are specific to each module.
IMPORTANT!
Restrictions apply only if the user and their N-1 are not main manager of the card.
Add an Exclusion
Click on "Edit restrictions" to access the dropdown list
Check the filters to apply (example for the Candidates module: "types of resources concerned")
Finally, choose the data groups to restrict in read and/or write by checking them
⠀
Duplicate to Win
You can duplicate the settings from one card to another, for both Access and Restrictions.
Click on the card to duplicate
Click on "Duplicate"
A dropdown list then allows you to choose which new perimeter to copy the settings to
We invite you to refer to the article Create and configure a role to go further in module-specific configuration