1. Knowledgebase
  2. User Management
  3. Role Based Access Groups (RBAC)

Create an Access Group (RBAC)

This article will walk you through the steps to creating an Access Group and assigning them to users.

   Restore Visibility 

   Estimated Read Time: 3 minutes


Sections in this article:


For an overview of RBAC, see Role Based Access Groups (RBAC).

Create an Access Group

Note: Users require the Administrator Role, the All Permission, and the Users Additional Permission to be able to create and edit Access Groups.

  1. From the navigation menu, expand the Settings option then click Users.
  2. Click Add, then select Access Group.
    Add access group
  3. Enter a title for the group. This will appear in the dropdown list when assigning groups to users.
  4. Select whether the group will provision Administrator or Collaborator access.
    1. Administrator - Write access. 

      Note: When using Administrator in RBAC, Vendor Records can only be created in-line when creating a Contract Object. This is due to the Contract being the top-level object.

    2. Collaborator - Read-only access. Collaborators have restricted access, but maintain the full range of Collaborative functions.  

  5. Enter a description.
  6. Assign the required objects for the group. Select as many objects as required. Contracts associated with the core objects selected will be provisioned automatically, but you can select specific contracts to be provisioned as well. 
  7. Click Save.

In the example above:

  • if using the AND operator, this access group provides Administrator Permissions to the Legal team's contracts where the Category is Commercial
  • if using the OR operator, this access group provides access to all contracts within the Legal Team, and all contracts associated with the Commercial Category (regardless of team).

For further information on the AND/OR operator, please see the Set the AND / OR Operator section within the RBAC article.

Assign Access Groups to Users

Once Access Groups have been created, they can be assigned to users.

  1. From the navigation menu, expand the Settings option then click Users.
  2. Expand the 3 dots on the relevant row, then select Edit.
  3. In the Role section, select the Custom radio button.
  4. Select the access group, and assign a Role + Permission if required. For example, a user could be assigned as an administrator for contracts they own, as well as an access group that grants access to certain teams, categories, etc.
  5. Click Save.

Note:

  • You can have multiple Access Groups and permissions assigned to individual users.
  • In cases where multiple permissions and access groups are assigned, the highest permission level always takes priority.