DE EN EN (Google)


Each user can be in one or more groups. This allows a user to have different roles within easydb. The groups are assigned to the user in user management. System groups are groups that are created automatically. Users are automatically members of system groups when they meet the criteria of the system group.

Overview of system groups

System Group Description Intern
All but system users Everyone is in this group, except for the system users root, oai_pmh and deep_link (see User types) :non_system
All Users Everyone is in this group (incl. anonymous, root, oai_pmh, deep_link, sso, ldap, self-registered). :all
Anonymous users Users who access records that are not allowed to log on externally. :anonymous
Fallback group When a group that is owner of records is deleted, the fallback group is instead registered as owner :fallback
LDAP users Users logging into easydb through SSO. :ldap
Normal users Users who are created directly in easydb. :easydb
Pseudo users to see single collections Users who are created for a share sharing (collection sharing) that does not require logon. :collection
Self-registered users User who used the self registration. :easydb_self_register
SSO Users Users logging into easydb through SSO. :sso
Users invited by e-mail Users who are only created with their e-mail address for a share sharing or export. :email
Users via external connection Anyone who has logged in via the intranet. The Internet / Intranet is defined in the Basic Configuration. :intranet_connection
Users via internal connection Anyone who has logged in via the Internet. The Internet / Intranet is defined in the Basic Configuration. :internet_connection

NOTE: All users come either from the Internet or from the Intranet. They can therefore not be simultaneously in both groups. The origin of the intranet can be configured using IP address ranges.


Setting Description
ID System ID for this group
Owner Responsible user for the group, who created this group.
Name The name of the group.
Interner Name The internal name of the group. Displayed only here, e.g. For access to groups via API.
Comment An internal comment, which is only displayed here.
Referenz Free text field for custom name or ID, e.g. for migrations or for linking users and groups via the API
Preferences for new users If Preferences have been selected, here all settings are diplayed:
display of search results,
selection of active pools for search,
selection of active object types for search,
active database languages,
active search languages
filters: active or hidden.
Use preference of user Select the user whose prefences are sopposed to be copied for this group. If users are newly created and added to this group, they receive these preferences by default.

System rights

Here other groups or users can be granted access rights to groups and their members. This is necessary, for example, if a user from group X wants to share a collection to a user from group Y. Because by default, collections can only be assigned to the groups (and their members) in which the user himself is.

For a listing of the system rights, see Computer Management. Note that context-dependent system rights may also be available, if any, not listed here.


A list of all rights can be found under Computer Management. Please note that not all of the listed rights are available depending on the context.

Authentication Services

The assignment of users to a rights group can also be done via the sign-on SSO and LDAP. This takes users and groups from the systems into easydb. The management of users and groups, including password management, is done outside of easydb. Through log-in services, users are able to register with the same login data in different applications within the system infrastructure.


This tab appears only for easydb groups, not for system groups. All users belonging to this group are displayed here.


This tab is used to set which data of a user of this group should be kept, deleted or pseudonymized when archiving.

Option Comment Available for field
Keep When the user is archived, the contents of the field are kept.
  • Login
  • First Name
  • Last Name
  • Department
  • E-Mails
Random When the user archives, the contents of the field are replaced by a random string.
  • Login
  • First Name
  • Last Name
  • Department
Clear When the user is archived, the contents of the field are deleted.
  • First Name
  • Last Name
  • Department
  • E-Mails