Skip to main content

Role Calculation for User Groups and Users

In the AuditBLOOM system, users can belong to multiple user groups, each with its own roles and access rights. When a user joins several groups, their roles are combined, determining their overall set of rights and capabilities within the system. This allows for flexible management of user access and responsibilities, providing them with the necessary tools for efficient work.

How Role Calculation Works​

Combining Roles from Groups​

When a user belongs to multiple groups, all roles assigned to these groups are automatically combined. For example, if the "Managers" group has the role "Manage audit objects" and the "Auditors" group has the role "Allow task creation," a user belonging to both groups will have both roles: "Manage audit objects" and "Allow task creation."

Examples​

Example 1: User in Two Groups​

  • "Managers" Group:
    • Role: "Manage audit objects"
  • "Auditors" Group:
    • Role: "Allow task creation"

Result: The user has both roles: "Manage audit objects" and "Allow task creation."

Impact on Access Rights​

Combining roles affects the user's access rights as follows:

  • Combining Rights: The user receives all rights assigned to each of their roles.
  • Access Optimization: Groups allow centralized management of access rights, simplifying the process of updating and changing rights for a large number of users.

Important Notes​

  • Need to Re-login: To apply new access rights, users need to log out of the system and log back in using their username and password.

Notes and Tips​

Notes and Tips
  • Optimizing Groups: Use groups to combine users with similar roles and responsibilities, making access management easier.
  • Regular Audits: Periodically review user roles and access to ensure they meet the current needs of the organization.
  • Documenting Roles: Keep documentation of roles and their assignments to avoid confusion and ensure transparency in access management.

Frequently Asked Questions (FAQ)​

Question: Why do I have more rights than I expected?

Answer: This may be because you belong to multiple groups, each of which has its own roles. If you have roles like "Administrator" or "User Management", you can check your roles in the "Permissions Report" section. If not, contact your system administrator.