OU-Domain-Client Administrator Setup Tips
Version 2.1 by sghareeb on 2014/06/24 19:48
Note: OU = Organizational Unit
The following permissions are the recommended set for an OU Administrator:
- CANS_CREATE
- CANS_DELETE
- CANS_EDIT
- CANS_VIEW
- CLIENTS_CREATE
- CLIENTS_DELETE
- CLIENTS_EDIT
- CLIENTS_OU_EDIT
- CLIENTS_OU_VIEW
- CLIENTS_TAG_EDIT
- CLIENTS_TAG_VIEW
- CLIENTS_VIEW
- OU_VIEW
- REPORTS_VIEW
- <Any Reports that OU Admins should have visibility to>
- RESPONSIBILITIES_CLIENT_EDIT
- RESPONSIBILITIES_CLIENT_VIEW
- RESPONSIBILITIES_OU_EDIT
- RESPONSIBILITIES_OU_VIEW
- RESPONSIBILITIES_USER_EDIT
- RESPONSIBILITIES_USER_VIEW
- RESPONSIBILITIES_VIEW
- ROLES_VIEW
- STAFF_EDIT
- STAFF_OU_EDIT
- STAFF_OU_VIEW
- STAFF_VIEW
- TAXONOMY_CLIENT
- TAXONOMY_CLIENT_VIEW
- OU_ADMIN
- Remember to give the OU administrator responsibility for their OU and to place staff and clients and that OU that the OUAdmin will be giving responsibilities to.
- There is no need to place the OU Administrator at the OU
Domain Administrator
II. For a Domain Administrator add all permissions and remove the OU_ADMINISTRATOR Permission.
Office Support
III. For a Office Support (Client Creation) add the following:
- ROLES_VIEW
- CLIENTS_CREATE
- CLIENTS_DELETE
- CLIENTS_EDIT
- CLIENTS_OU_EDIT
- CLIENTS_OU_VIEW
- CLIENTS_TAG_EDIT
- CLIENTS_TAG_VIEW
- CLIENTS_VIEW
- OU_ADMINISTRATOR
- RESPONSIBILITIES_USER_VIEW
- CANS_VIEW
- DATA_ENTRY_ADMINISTRATOR
- CANS_CREATE
- CANS_EDIT
The Office Support person should be placed at the OU where they will be administering and entering clients and have responsibility for the OU so they can work within it.