Adding Users and Groups


Documentation Home  Print this Topic Previous pageContents  Next page

Introduction to KnowledgeTree Document Management Made Simple > Units, Groups, Users, and Roles > Adding Users and Groups

Users are added to KnowledgeTree in any one of the following ways:

 

manually - the administrative user can create users manually within KnowledgeTree, one by one.

 

imported - KnowledgeTree allows the import of users from an external authentication source, either from an LDAP Server, such as Open LDAP, or from Microsoft Active Directory. The administrative user may select one or more to import from the external source, or perform a bulk import. The user profiles of imported users, except their usernames and passwords, are editable within KnowledgeTree.

a combination of the above - KnowledgeTree provides the option to import some users, and to add others manually.

 

 

Importing from Microsoft Active Directory

The KnowledgeTree group may be synchronized with the Active Directory group so that imported users are automatically added to the same group when they're imported to KnowledgeTree. The imported group and its' users are replicated to a group of the same name in KnowledgeTree. The first time that a member of an imported Active Directory group logs in to KnowledgeTree - using their Windows username and password - KnowledgeTree creates the user's account.

 

 

Importing from an LDAP server

When importing users from an LDAP authentication source, each user's user name is copied from LDAP into KnowledgeTree.

 

 

Subgroups

KnowledgeTree provides the concept of 'subgroups', which allow the allocation of additional permissions to a selected subset of users in an imported group. Users in a subgroup retain the permissions from their Active Directory group membership, and they have additional permissions, based on their membership of the subgroup.

 

Example

This example outlines how subgroups are used to assign additional permissions:

 

An Active Directory group called Account Managers is added to KnowledgeTree. All users in this group have the 'read' permission on all project folders.

 

To differentiate between account managers for project A, and account managers for project B, two subgroups are created

Project A - members of this group are assigned the 'write' permission only on their project folders
Project B - members of this group are assigned the 'write' permission only on their project folders

 

Users in both subgroups retain the 'read' permission on all projects, but they can add content only to their own projects folders.

 

Note: Permissions that are assigned through workflows override pre-configured permissions for the group. When using a workflow to assign permissions to a group, these permissions are also assigned to the subgroups in the group.

 

 

© 2005-2008 KnowledgeTree Inc.
Creative Commons License
This work is licensed under a
Creative Commons Attribution 3.0 License.