Managing Role Groups
Note: If the Multi Role functionality is not enabled, then Role Groups cannot be defined.
Role groups are used to manage how search applies the access control settings for a user with multiple roles. All roles in the same role group are treated as an OR relationship, rather than the default AND relationship, which is used for roles not in a group, or between different groups.
An example is where there is a Brand attribute and a Region attribute and the following conditions apply:
-
Both attributes are being used to control access to the content.
-
You require users to have access to different Brand and Region combinations, that is, a user can see one or two specific Brands in one or more Regions.
If the Brand has three entries; Royal, Satin and Flair, and the Region has four entries; EMEA, Americas, Asia and Australasia, then the following Roles and Role groups can be created to provide the required access:
| Role name | Role Group Name | Access Control |
|---|---|---|
| Royal Brand | Brand Group | Access to Royal Brand only and access to all Regions |
| Satin Brand | Brand Group | Access to Satin Brand only and access to all Regions |
| Flair Brand | Brand Group | Access to Flair Brand only and access to all Regions |
| EMEA Region | Region Group | Access to EMEA Region only and access to all Brands |
| Americas Region | Region Group | Access to Americas Region only and access to all Brands |
| Asia Region | Region Group | Access to Asia Region only and access to all Brands |
| Australasia Region | Region Group | Access to Australasia Region only and access to all Brands |
With the above configuration, it is now possible to allocate the relevant roles to a user so that they see the correct content:
| User | Assigned Roles | Access to |
|---|---|---|
| Americas Royal user | Royal Brand, Americas Region | Royal brand content which has the Americas region assigned |
| EMEA Satin and Flair user | Satin Brand, Flair Brand, EMEA Region | Satin or Flair brand content which has the EMEA region assigned |
| Asia and Australasia Royal, Satin and Flair user | Royal Brand, Satin Brand, Flair Brand, Asia Region, Australasia Region | Royal or Satin or Flair brand content which has the Asia or Australasia region assigned |
To add a new role group:
-
Select My Account > Manage Role Groups.
-
In the top-right corner, select Add Role Group. The New Role Group window opens.
-
Enter the name for the new role group.
-
In the top-right corner, select Create.
To assign an individual role to a role group:
-
Select My Account > Manage Roles.
-
Select
for the role that you want to add to
a role group. -
From the Role Group drop-down list, select the role group to which you want to add the role.
-
In the top-right corner, select Update.
To view the roles assigned to a role group:
-
Select My Account > Manage Role Groups.
-
Select
for the role group that you wish to
view.