PSIsafe Management Administrator Guide: Access Rights

Selecting the Repository/Cabinet

To Add, Edit, or Delete User and Group rights, as well as access advanced functions, Select the Access > Rights section of PSIsafe Management. When a User or Group is selected from the Assigned or Effective tabs, the summary of their current Access rights for the selected Repository & Cabinet are displayed on the right-hand side:

Administrators can define Access rights by clicking on on any individual User or Group. To add a user to the list, click the add button. To edit and existing user on the list, select their name and click edit. To delete a user from the rights list, highlight their name and select Delete.

A list of Users and Groups available for assignment are displayed on the left side of the screen. Select the user or group for rights assignment and click next.

Note: Using the CTRL or SHIFT key, you can select multiple users or groups at one time.
CTRL allows pick from list, SHIFT allows selection of a list.

Folder rights define rights for a user/group within a folder in a cabinet. There is an unlimited number of which may be assigned to a folder (set up in Folder Classes) upon creation of the folder, or by editing the folder indexes and changing the sensitivity class. Non Sensitive is the default.

This section will define what the user/group selected is allowed to do when a folder has the chosen folder class. Each class may have a different group of access rights assigned, but each folder may have only one class assigned to it.

Folder Rights Key:

Ensure you select the appropriate security class on the left-hand side before editing rights.

• Preview – allows the user to use preview in a folder.
• View – allows the user to view folder indexes.
• Edit – allows the user to change folder indexes.
• Create – allows the user to create a new folder.
• Delete – allows the user to delete a folder.
• Lock – allows the user to lock a folder and keep other users from doing anything to it.
• Select the folder class from the list to the left of the rights before editing the corresponding access rights on the right-hand side.
• Folder Export Rights allow a user to export indexes or contents. Choosing Contents implies the right to export indexes.
• Folder Transfer Rights allow the user to copy or move folders to another cabinet if the cabinet is compatible. Choosing Move implies the right to Copy.

Document rights define rights for a user/ group in the document creation process. When a document is added to PSIsafe, a document sensitivity class is assigned to the document. This section is used to define rights for a user/group sensitivity class. Non Sensitive is the default.

Select the sensitivity class from the list at the left for document classes, i.e., Accounting.

Document Rights Key:

Ensure you select the appropriate security class on the left-hand side before editing rights.

• Preview – allows the user to preview the document.
• View – allows the user to view the document in its native application.
• Export – allows the user to print, email, export the document to the file system on the PC being used.
• Edit – allows the user to edit the document with its native application.
• Create – allows the user to create a document with this access level.
• Delete – allows the user to delete a document.
• Lock – allows the user to lock a document and prevent other users from accessing it.

Click Finish to assign the rights.

This function is for copying the rights from an existing cabinet to a new cabinet that has no rights yet assigned to it. To copy the rights from one cabinet to another, follow these steps:

1. Go to the Access > Rights.
2. Click on the Advanced button.
3. On Advanced Rights window, select the Cabinets tab:
   
4. Select the new Cabinet via the "Destination" button, and the Source cabinet (with the rights you'd like to copy) with the "Source" button.
5. Select the "Assign" button to process the rights assignment.

This function allows users to use a specific cabinet as a template for the rights they wish to copy to another cabinet(s). Follow the steps below to copy rights based on a User or Group from one cabinet to another (or multiple cabinets):

1. Go to the Access > Rights.
2. Click on the Advanced button.
3. On Advanced Rights window, select the Users\Groups tab:
   
4. Select a cabinet which has the rights you'd like to copy.
5. Select a User or group within that cabinet whose rights you'd like to use as a template.
6. Select the Destination cabinet(s) to which you'd like to apply the rights.
   NOTE: Select multiple cabinets from the selection window with Control and Shift left-click.
7. Click the "Assign" button to assign the rights.

1. Go to the Access > Rights.
2. Click on the Advanced button.
3. On Advanced Rights window, select the Delete tab:
   
4. Select the Cabinet(s) which currently have assigned rights that you'd like to delete.
5. Pick the Users, Groups, or All option for which access rights you'd like deleted.
6. Click the "Delete" button to remove the access rights.

PSIsafe can create a list of Users, Groups, or Cabinets and their assigned rights in spreadsheet (XLS) format. To create a report, follow these steps:

1. Go to the Access > Rights.
2. Click on the Advanced button.
3. On Advanced Rights window, select the Reports tab.
   
4. Select the Users, Groups, or Cabinets of interest and select the Assigned or Effective option.
5. Select the "Report" button to generate the Report window:
   
6. This report can then be Printed, which will generate a preview in the Preview Editor tool:
   
7. After previewing and confirming the results, select File > Export Document > [Extension] in which you can select the appropriate extension for your needs.
   

 This capability allows you to copy access rights from one user to another user. This is very beneficial for new staff members who will have the same duties as another staff member.

1. Click Rights> then Advanced.
2. Select the Rights Copy tab:

3. Pick Source, whose rights assignments you would like to copy and then click OK.
4. Pick destination, individual or group, you wish to assign rights and then click OK.
5. Click Apply to copy assignments.

A user’s rights and the rights of a group (or groups) they are part of may not match within a cabinet. When this occurs, the user will be assigned effective rights. Two restrictive types are supported.

MOST Restrictive (Default): Setting Group rights as ‘Most’ restrictive will apply the lowest level of rights to users who are part of a group.

LEAST Restrictive: Will apply the highest level of rights to users who are part of a group.

When users are in multiple groups and these groups are assigned to the same cabinets, the default setting in PSIsafe is to read rights that are the MOST restrictive. This new option will allow PSIsafe to read rights that are the LEAST restrictive. This is a global setting and can be found in Management: System>Settings>Options>General>Use Least Restrictive Rights.

The effective rights can be obtained in Management from Access>Rights>Effective for a selected cabinet or from Access>Rights>Advanced>Reports based on users or cabinets. See “Create Access Rights Report" above.