Security Administration : Adding security groups
  
Adding security groups
Add Functional Security Group task tab
Use the Add Functional Security Group task tab to add a new security group and set its functional security rights.
25Live security group templates
When creating a 25Live security group, you must copy one of the security group “templates” as the starting point for creating the security group.
This table lists each of the security group templates available in the 25Live Administration Utility and the kind of user each is intended for.
Use this template...
For users who must be able to do all or most of the following...
System Administrator
• Perform all system functions
This is the security group template to use for those responsible for supporting and administering 25Live, including the Public Search User (see “The Public Search user”).
Use this template...
For users who must be able to do all or most of the following...
Scheduling (Advanced)
• Create, edit, and delete events
• Assign locations and resources to events based on assignment policy
• Read organization comments/ratings
• Set up event pricing
• Create and edit locations, resources, organizations, and contacts
• Create and edit all master list data
This is the security group template to use for those who are leads in a scheduling office and/or functional administrators responsible for data management.
Scheduling (Intermediate)
• Create events
• Assign locations and resources to events based on assignment policy
• Read organization comments/ratings
• Set up event pricing
• Create and edit organizations and contacts
• Create and edit all master list data
This is the security group template to use for those whose primary job is scheduling.
Scheduling (Basic)
• Create events
• Assign and approve assignment of locations and resources based on assignment policy
This is the security group template to use for those with basic core scheduling rights.
Service Providers
• Create and edit their own resources
• Assign and approve assignment of their own resources
• Create events when necessary
This is the security group template to use for support/service personnel.
Draft Event Submitters
• Submit event drafts
This is the security group template to use for those who can only submit event drafts. Event drafts don’t reserve locations/resources or trigger assignment policies until saved as “real” events by an authorized scheduler.
View Only
• View events, locations, and resources
This is the security group template to use for the Viewer Seat.
Adding a security group
The instructions below tell you how to add any 25Live security group, except the Viewer Seat group. For information on creating the 25Live Viewer Seat and its security group, see 25Live Viewer Seat Setup available here: http://knowledge25.collegenet.com/display/CustomerResources/25Live+Documentation
1. Click the Add Functional Security Group task tab.
2. Click the security group template name that best describes the permissions of the security group you want to add. You must copy a security group template to create your new security group. See “25Live security group templates”
 
3. Enter a name for the security group (required), and, optionally, a description.
4. In the Rights area of the page, modify the functional security rights of the new security group as needed. You must scroll down to see the entire rights list. The rights that have been selected by CollegeNET for the security group template you copied represent the recommended and most common selections for a security group of this type. See “Appendix A - Functional Security Settings” for information on all functional security settings.
5. Click Add Security Group.
Functional security required to view, create, and edit events and run simple event searches
Below is a list of the minimal functional security required for a security group to be able to create and edit events, assign and/or request locations and resources, view event details, and run simple event searches. Functional security settings not listed can be set to the least privileged access level.
• Events: Event Wizard = Can use 25Live Event Wizard to create and edit events
• Events: Event Drafts = Can view, edit, create, and copy
• Events: Events = Can view
• Events: Location Assignments = Can assign and/or request locations in Event Wizard
• Events: Resource Assignments = Can assign and/or request resources in Event Wizard
• Events: Description and Confirmation Notes = Can view and edit
• Tasks, Reports, and Email: To Do Tasks = Can view, create, assign, complete and delete To Dos
• Cabinets and Folders: Cabinets = Can view
• Cabinets and Folders: Folders = Can view
• Searches and Master Definitions: Event Search = Can view, run, create and save event searches
 
Functional security required for searching
The information below describes how functional security must be set up for a security group to be able to access and use 25Live searching capabilities. “<object>” indicates the type of object that can be searched for. For example, to be able to do a simple search for events, Events functional security “Events” must at minimum be set to “Can view” and Searches and Master Definitions functional security “Event Search” must be set to “Can view, run, create and save event searches.”
As a non-signed in user, to be able to view and run public searches and define and run simple searches on the Search For <object> tab, functional security must be set to:
• <object> = Can view
• <object> Search = Can view, run, create, and save searches
As a signed-in user, to be able to view and run public searches and your saved searches, delete and rename your saved searches, and define, run, and save simple searches on the Search For <object> tab, functional security must be set to:
• <object> = Can view
• <object> Search = Can view, run, create, and save searches
As a signed-in user, to be able to view and run public searches and your saved searches, delete and rename your saved searches, define, run, and save simple searches on the Search For <object> tab, and define, run, edit, delete, copy, and save searches on the Advanced <object> Search tab, functional security must be set to:
• <object> = Can view
• <object> Search = Can view, run, create, and save searches
• object> Master Definitions = Can view all active items
If a security group has the required access to the advanced event search, but has “Can’t View” access to locations, resources, and/or organizations, members of the group are able to access the advanced event search, but can’t edit location, resource, and/or organization search criteria (whichever they don’t have at minimum “Can View” access to).
Functional security required for searching, continued
The master list search criteria available in an advanced search is controlled by a combination of functional security and the master definition settings in the 25Live Configuration Utility. For example, if a user has “Can view, edit, deactivate, create and delete” access to Event Master Definitions, but only “Can view abridged list of active items managed in the Config Utility” access to Location Master Definitions, their options for selecting locations by category, for example, would be controlled by the settings in the Configuration Utility. For information, see the 25Live Configuration Utility document.