How to Manage Global Permissions in the IGEL UMS Web App

An administrator can grant other administrators rights and take away those rights through permission assignment in the IGEL Universal Management Suite (UMS). These permissions are called administrator permissions or global permissions.

For the description of each permission, see General Administrator Rights in IGEL UMS .

Permission Requirement

You need to have the Administrator accounts permission to access Users and Groups tabs and manage permissions.

Permissions Managed in the UMS Console Only

The following global permissions are only possible to change in the UMS Console:

• Firmware management

• License management

• WebDAV access

• Host assignment

• SQL console

For details on how to manage global permissions in the UMS Console, see General Administrator Rights in IGEL UMS .

Direct and Indirect Permissions

A direct permission is a permission set for an individual user through directly changing the permisison of the user in the Users tab.

An indirect permission is a permission set for user groups in the Groups tab and, as a result, given to the members of that user group indirectly.

When direct and indirect permissions contradict each other, the following rules apply to calculate the actual permission of the user:

• Direct permissions have precedence over indirect permissions.

• Both deny and allow settings have precedence over not set permissions.

• If a permission is denied it always overrides the granting of the permission.
  For example, if the permission is granted to a user directly, but denied via a group membership, the permission is denied for that user.

For more information, see Effective Rights in IGEL UMS .

You can always check which permissions are in effect for a user under Effective global permissions in the details view of the user selected from the structure tree.

Changing Global Permissions of a User

To grant or deny permissions per user:

1. Go User Management > Users tab.

2. Select a user from the list or from the structure tree.

3. Click Change Global Permissions.

4. Select the permissions you want to Allow or Deny.

You can also use the Allow All and Deny All options at the top for bulk selection.

5. Save the configuration.

You can see the changed permissions listed under Effective global permissions in the details view of the user selected from the structure tree, or in the Users list view.

Changing Global Permissions of a Group

You can grant or deny permissions per group:

1. Go User Management > Groups tab.

2. Select a group from the list or from the structure tree.

3. Click Change Global Permissions.

4. Select the permissions you want to Allow or Deny for the member.

You can also use the Allow All and Deny All options at the top for bulk selection.

5. Save the configuration.

You can see the permissions listed under Global permissions in the details view of the group selected from the structure tree, or in the Groups list view.

You can see the effect of the change in the Effective global permissions of the members of the group. Some permissions might be overwritten following the rules of the direct and indirect permissions.