Groups
Each user can be in one or more groups. This allows a user to have different roles within easydb. The groups are assigned to the user in user management. System groups are groups that are created automatically. Users are automatically members of system groups when they meet the criteria of the system group.
Overview of system groups
System Group | Description | Intern |
---|---|---|
All but system users | Everyone is in this group, except for the system users root, oai_pmh and deep_link (see User types) | :non_system |
All Users | Everyone is in this group (incl. anonymous, root, oai_pmh, deep_link, sso, ldap, self-registered). | :all |
Anonymous users | Users who access records that are not allowed to log on externally. | :anonymous |
Fallback group | When a group that is owner of records is deleted, the fallback group is instead registered as owner | :fallback |
LDAP users | Users logging into easydb through SSO. | :ldap |
Normal users | Users who are created directly in easydb. | :easydb |
Pseudo users to see single collections | Users who are created for a share sharing (collection sharing) that does not require logon. | :collection |
Self-registered users | User who used the self registration. | :easydb_self_register |
SSO Users | Users logging into easydb through SSO. | :sso |
Users invited by e-mail | Users who are only created with their e-mail address for a share sharing or export. | :email |
Users via external connection | Anyone who has logged in via the intranet. The Internet / Intranet is defined in the Basic Configuration. | :intranet_connection |
Users via internal connection | Anyone who has logged in via the Internet. The Internet / Intranet is defined in the Basic Configuration. | :internet_connection |
NOTE: All users come either from the Internet or from the Intranet. They can therefore not be simultaneously in both groups. The origin of the intranet can be configured using IP address ranges.
General
Setting | Description |
---|---|
ID | System ID for this group |
Owner | Responsible user for the group, who created this group. |
Name | The name of the group. |
Interner Name | The internal name of the group. Displayed only here, e.g. For access to groups via API. |
Comment | An internal comment, which is only displayed here. |
Referenz | Free text field for custom name or ID, e.g. for migrations or for linking users and groups via the API |
Preferences for new users | If Preferences have been selected, here all settings are diplayed: display of search results, selection of active pools for search, selection of active object types for search, active database languages, active search languages filters: active or hidden. |
Use preference of user | Select the user whose prefences are sopposed to be copied for this group. If users are newly created and added to this group, they receive these preferences by default. |
System rights
Here other groups or users can be granted access rights to groups and their members. This is necessary, for example, if a user from group X wants to share a collection to a user from group Y. Because by default, collections can only be assigned to the groups (and their members) in which the user himself is.
For a listing of the system rights, see Computer Management. Note that context-dependent system rights may also be available, if any, not listed here.
Authorizations
A list of all rights can be found under Computer Management. Please note that not all of the listed rights are available depending on the context.
Authentication Services
The assignment of users to a rights group can also be done via the sign-on SSO and LDAP. This takes users and groups from the systems into easydb. The management of users and groups, including password management, is done outside of easydb. Through log-in services, users are able to register with the same login data in different applications within the system infrastructure.
User
This tab appears only for easydb groups, not for system groups. All users belonging to this group are displayed here.
Pseudonymisierung
This tab is used to set which data of a user of this group should be kept, deleted or pseudonymized when archiving.
Option | Comment | Available for field |
---|---|---|
Keep | When the user is archived, the contents of the field are kept. |
|
Random | When the user archives, the contents of the field are replaced by a random string. |
|
Clear | When the user is archived, the contents of the field are deleted. |
|