KB User's Guide - Users Tab - User Access Groups and Limited Access Groups

This document describes how to set up and use User Access Groups and Limited Access Groups.

KB Administrators can create User Access Groups to provide a further level of specificity in determining access to documents.

All group settings, including membership, can be modified at any time.

User Access Groups

To Create a new User Access Groups:

  1. Click on Users Tab.
  2. Click on User Access Groups link on the left navigation bar.
  3. In the Adding a New User Access Group table, enter a User Group Name and User Group Description (optional), then click the Add Group button. This will add your new User Access Group to the upper part of the screen.
  4. Find your new User Access Group and click the Members button. This will take you to another screen where you can add intended users to the group(s) you have created.
  5. Check the Member check box next to the people you would like added to the group and click Update. Mouse-over highlighting helps you check/uncheck accurately.

To Edit an existing User Access Group:

To Deactivate or Activate a Group:

  1. Click the Deactivate button or Activate button depending on what is applicable.

To use the User Access Groups:

  1. Near the bottom of a document creation or editing page, you will see sections for WriteAccess and ReadAccess with links to Show all WriteAccess groups and Show all ReadAccess groups. Clicking these links will expand the section to reveal check boxes for any User Access Groups defined for your site. If no User Access Groups are defined then "No user groups defined" will be displayed.
  2. Based on the content of the document, you may select to restrict read or write access for the document to one or more User Access Groups.
  3. If the document needs no particular user restriction, don't check any of the User Access Group check boxes.

Once a document is restricted, it is only accessible to users on its User Access Group, even within the KB Admin Tools environment. If a user is listed in the specified User Access Group, the document will display normally. If not, a message indicates that the document is restricted to a pre-defined list of users, and offers the option of contacting the document owner to gain access.

To Display User Access Group Members by Group:

  1. In the KB Admin Tools, go to the Users tab which defaults to the Existing Users: Active Users screen and choose a User Access Group from the dropdown list. In the example below, we want to see the members of the Marketing Group.
  2. display_user_access_by_group

  3. A complete list of users who are members of the User Access Group you chose will appear. The example below shows you the members of the Marketing Group.
  4. display_members_user_access_grp

Using Your Defined User Access Groups in your Subsite

While in the document editor, select the User Access group you just defined and permit/restrict permissions to modify the content of the document.

Selecting a User Access Group for document Write-Access:

In the image below, the Owner group admins (circled) have permission to edit this document. Checking the box next to any WriteAccess groups will also be grant that User Access group permission to edit this document. The image below shows that the Network Technologists also have permission to edit this document.

Use case: Network Technologists User Access Group - members of this group are content experts who may edit and publish a Network specifications and procedural documents.


User Access Group Selected for Read-Access:

In the image below, the check box next to the "Network Technologist" User Access Group has been selected in the ReadAccess part of the document editor. Once a document is restricted to one or more ReadAccess groups, it is only accessible to users on those lists, even within the KB Admin Tools environment.

Use case: Network Technologists User Access Group - members of this group are the only ones who should have access to firewall access policies and modification planning of said policies.

User Access Group Selected for Topic Admin:

You may designate a User Access group as an Admin Group in a specific topic. For more information about topics, please see KB User's Guide - Topics Tab - Adding, Editing, and Deleting Topics. In the image below, the Grad School User Access Group has been provisioned rights to publish documents associated with the Cruciferous topic, and that topic alone (e.g. Admin group permissions do not include subtopics).You may grant a User Access group publish rights without having to grant them full publish rights for all documents.

Use case: Grad School User Access Group - members of this group are trained student employees, but do not have publish rights. Topic Admin group gives them conditional publish rights only.

Limited Access Groups

To Create a new Limited Access Groups:

  1. Click on Users Tab.
  2. Click on Limited Access Groups link on the left navigation bar.
  3. Enter a name in the Limited Access Group Name field and a description in the Limited Access Group Description field (optional), then click the Add Group button. This will add your new Limited User Access Group to the upper part of the screen.
  4. Find your new Limited Access Group and click the Members button. This will take you to another screen where you can add intended users to the group(s) you have created.
  5. Check the Member check box next to the people you would like added to the group. Mouse-over highlighting helps you check/uncheck accurately. When you have selected all the desired members, click Update.
  6. Click on the Doc Access button and select the topics and sub topics to which this Limited Access Group should have read-access on your internal site. Please know this supersedes all other access rights. Members of this group will only be able to view the documents associated with selected Topic(s) and nothing else, and they will not have read access to child Topic(s) unless specifically selected.

To Edit an existing Limited User Access Group:

How to Assign Topics to Your Defined Limited Access Group:

  1. Once a Limited Access Group has been created, you will need to ensure that the appropriate topic(s) are checked.

    The image below shows the "karoton" Limited Access Group in our Demo KB. After selecting the appropriate topics and sub-topics, click the Update button highlighted in red.


  2. You may assign topics to individual documents from the document edit screen, or use the Batch Topic Assignment tool (which can be found under the Topics tab > Batch Topic Assignment Tool link.

Limited User Access restriction should not be used for documents that are meant for public consumption. It works with documents published to internal KB sites only. The topics drop down menu, topics side module, and topics tree will show only those topics, and "Most Recently Updated Documents" and "Top Documents of the Week" modules will be updated to only display docs they are allowed to view. When an associated Limited Access Group is deleted, the restriction on the document will cease to exist.

Limited Access Group: Members of this group:

Once you have defined a Limited Access group, that group will only see documents within the topics and subtopics in your Internal KB site that you have specified.

Use case: Members of the Limited Access Group are:

If you are not finding what you need, please email the KB Team for a consult.

| KB User's Guide - Users Tab |