This article describes how you can subsequently change the existing permissions of users or groups in a data room, for example, to appoint two previous standard users in the room as additional room administrators or to specifically remove the permission to share from a group in the room.
However, if you want to set data room permissions for a user or a group that is not yet authorized to access the data room (i.e. add a new user or group to the data room). read Add users to a data room. If you want to remove all existing permissions of a user for a particular specific data room, see Remove users/groups from a data room.
Who is allowed to change user/group permissions in a data room?
Changing user/group permissions in a data room is done by the room administrators of the respective data room.
User managers can manage users in DRACOON, but are not allowed to set users' data room permissions (unless they are also a room administrator in the data room in question). In the same way can Group managers manage groups in DRACOON, but are not allowed to set the data room permissions of groups.
Change permissions of users/groups in the data room
- Open the data room for which you want to change user or group permissions. You must be a room administrator in this room.
- Click the button to the right of the path navigation bar and then click Permissions in the menu:
- You are now in the user selection for the data room. However, if you do not want to change the permissions of a single user, but of an entire group, click the Groups tab:
- Select the user or group whose permissions you want to change.
To quickly locate a desired user or group, enter part of the user or group name you are looking for in the Search user or Sebarch group field above the list.
- In the right sidebar, the previous permissions of the user or group in the data room are displayed. You can now define new permissions for the user or group here. You have two options:
Option 1: Selection from the predefined permission levels Room Administrator, Edit and Read.
Option 2: Fine selection of the desired individual permissions
Option 1: Selection from the predefined permission levels Room Administrator, Edit and Read.
In DRACOON 10 different possible authorizations for data rooms are available. In order to simplify the assignment of authorizations, there are 3 authorization levels in which certain of the 10 authorizations are grouped together and which cover the most common authorization cases. These three permission levels are: Room Administrator, Edit and Read.:
· Edit (Default): These users are allowed to create, modify, and delete files and folders in the data room, create and delete shares and file requests, and restore deleted items from the Recycle Bin.
· Read: These users are allowed to read (preview, open, download) but not modify existing files. However, they are allowed to add comments to files. They are not allowed to upload new files to the room. They are allowed to create and delete shares for existing files and folders.
In most cases it is sufficient to assign one of these three predefined permission levels to a user or group. Only in special cases it is necessary to select specifically from the 10 permissions - this scenario is described below in possibility 2.
- If you want to assign one of the three permission levels Room Administrator, Edit or Read to the user or group, select it in the right sidebar below Access Information:
- The changes to the permissions are active immediately.
Change for multiple users or groups at once: You can also assign the three permission levels Room Administrator, Edit, and Read to multiple users or groups in one step if multiple users or groups are to be given the same new permission level, so that you do not have to make the change for each user or group separately. To do this, simply select the desired users or group in the list before selecting the desired permission level - the change will then affect all selected users or groups.
Option 2: Fine selection of the desired individual permissions
If you want to assign a specific selection from the 10 possible individual permissions to a user or group instead of the three predefined permission levels Room Administrator, Edit or Read, proceed as follows:
- In the right sidebar below Access Information, click the arrow to the right of Advanced Settings to show all 10 possible permissions:
- Select the desired permissions for the user or group:
- The changes to the permissions are active immediately.
Requirement of at least one room administrator: Each data room requires at least one room administrator. If there is only one room administrator in the data room, its permissions cannot be reduced in the data room, as long as another user or another group was not likewise appointed as the room administrator (this other user or this other group may have no expiration date). DRACOON shows if necessary an appropriate message, if it was tried to limit the permissions of the only room administrator in a room. You can determine all room administrators in a data room by filtering the user or group list in the data room permissions. To do this, select the entry Room administrators in the second drop-down field above the user or group list:
Caution with the authorization of a user or group as room administrator: If you appoint a user or group as a room administrator, they can add further room administrators in the future and remove existing room administrators (including you as the previous room administrator) from the room at any time. You should therefore choose the "Room administrator" permission carefully and only grant this permission to selected people or groups.
Authorization of groups instead of individual users: If you have many users and a data room is to be used by several users, it may be advisable to group users together and then assign data room permissions to entire groups instead of authorizing each user individually to the same data room.
Comments
0 comments
Article is closed for comments.