You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/modules/admin_initial_setup/pages/describing_your_people.adoc
+46-53Lines changed: 46 additions & 53 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,7 +1,7 @@
1
1
= Describing Your People =
2
2
:toc:
3
3
4
-
Staff and patrons use the Evergreen system to perform the wide variety of tasks involved in the library. What functions any user can perform is determined by what permissions and permission groups are assigned to their account. It is essential to understand how permissions can be used to ensure users only have access to the appropriate level. For example, patrons need permissions to be able to log in to the public catalog and place holds; however, they should not have the permission to log in to the staff client.
4
+
Staff and patrons use the Evergreen system to perform the wide variety of tasks involved in the library. What functions any user can perform are determined by what permissions and permission groups are assigned to their account. It is essential to understand how permissions can be used to ensure users only have access to the appropriate level. For example, patrons need permissions to be able to log in to the public catalog and place holds; however, they should not have the permission to log in to the staff client.
5
5
6
6
== Permissions and Permission Groups ==
7
7
@@ -11,9 +11,9 @@ When a user performs an action, the system looks at the following:
11
11
12
12
* Is the user active?
13
13
* Does the user have the permission to perform the action?
14
-
* Where can the user exercise this permission?* (i.e., xref::admin:permission_groups.adoc#depth_and_grantability[depth])
14
+
* Where can the user exercise this permission? (i.e., xref:admin:permission_groups.adoc#depth_and_grantability[depth])
15
15
** For patrons, the system looks at the home library.
16
-
** For staff, the system looks at the home library, workstation, and/or working location(s)._(How to set a staff member’s working location is covered later in this section.)_
16
+
** For staff, the system looks at the home library, workstation, and working location(s)._(How to set a staff member’s working location is covered at the end of this section.)_
17
17
18
18
A *permission group* is a set of permissions that can be assigned to a user simultaneously. The permission group indicates which role the user has in the library, for example, Patron or Cataloger. Upon first installing Evergreen, the following default permission groups are automatically created:
19
19
@@ -43,21 +43,21 @@ Evergreen libraries that are most comfortable using the staff client tend to man
* xref:admin:permissions.adoc[Permissions]: Used to manage the list individual permissions.
47
+
* xref:admin:permission_groups.adoc[Permission Groups]: Used to manage permissions groups and their attritubes and permissions.
48
48
49
49
Under Administration > Local Administration:
50
50
51
-
* xref:local_admin:permission_tree_display_entries.adoc[Permission Tree Display Entries]
51
+
* xref:local_admin:permission_tree_display_entries.adoc[Permission Tree Display Entries]: Used to manage the order in which permission groups display in menu dropdowns.
52
52
53
53
==== Assigning Permission Groups in the Staff Client ====
54
54
55
-
Whether for patron or staff, permission groups are assigned the same way, in the *Main (Profile) Permission Group* field of the account.
55
+
Permission groups are assigned the same way whether you are managing a staff account or patron account - using the *Main (Profile) Permission Group* field of the account.
56
56
57
-
To assign or edit a permission group:
57
+
To assign or update a permission group:
58
58
59
59
. Open the account and click the *Edit* tab.
60
-
. Click the *Profile Group* dropdown and select the group name from the menu. (Note that groups that were marked not to have users will be greyed out in the menu.)
60
+
. Click the *Profile Group* dropdown and select the group name from the menu. (Note that groups that were marked to not have users will be greyed out in the menu.)
61
61
+
62
62
image::describing_your_people/main permission group.png[Main (Profile) Permission Group dropdown menu with list of permission groups]
The *Secondary Groups* button functionality enables supplemental permission
70
-
groups to be added to staff accounts. The *CREATE_USER_GROUP_LINK* and
71
-
*REMOVE_USER_GROUP_LINK* permissions are required to display and use this
72
-
feature.
69
+
If staff need to perform multiple types of functions within the staff client, for example, circulation and catalogings tasks, they can be assigned multiple permission groups. The *Secondary Groups* functionality enables supplemental permission groups to be added to staff accounts. The *CREATE_USER_GROUP_LINK* and *REMOVE_USER_GROUP_LINK* permissions are required to display and use this feature.
73
70
74
-
In general when creating a secondary permission group, do not grant the
75
-
permission to login to Evergreen.
71
+
Secondary permission groups are created the same way main permission groups are created, in the xref:admin:permission_groups.adoc[Permission Groups] interface. In general, when creating a secondary permission group, do not grant the permission to log in to Evergreen.
76
72
77
-
. Open the account of the user you wish to grant a secondary permission group to.
73
+
To assign a secondary permission group:
74
+
75
+
. Open the account of the user.
78
76
. Click *Edit*.
79
77
. Click *Secondary Groups*, located to the right of the *Main (Profile) Permission Group*.
Evergreen provides group application permissions in order to restrict which
113
-
staff members have the ability to assign elevated permissions to a user, and
114
-
which staff members have the ability to edit users in particular groups.
115
-
116
-
If a permission is designated as _Grantable_ for a staff permission group, that permission can be assigned individually to another staff member’s account through the User Permission Editor. (See xref::admin:permission_groups.adoc#depth_and_grantability[Depth and Grantability])
112
+
If a permission is designated as _Grantable_ for a staff permission group, that permission can be assigned individually to another staff member’s account through the User Permission Editor. (See xref:admin:permission_groups.adoc#depth_and_grantability[Depth and Grantability] for more information on grantability). Evergreen provides group application permissions in order to restrict which staff members have the ability to assign elevated permissions to a user, and which staff members have the ability to edit users in particular groups.
117
113
118
114
The User Permission Editor displays the full list of permissions available in Evergreen and shows which permissions are assigned to a specific account.
119
115
120
116
To access the User Permission Editor:
121
117
122
-
. Go to *Administration > *User Permission Editor* and enter the staff account
123
-
barcode.
118
+
. Go to *Administration > *User Permission Editor* and enter the staff account barcode.
124
119
+
125
120
OR
126
121
+
127
-
Retrieve the staff account first through the patron search, then go to *Other* > *User Permission Editor*.
122
+
Retrieve the staff account first through the patron search, then go to *Other* > *User Permission Editor*.
128
123
+
129
124
image::permissions/permissions_1.png[Click User Permission Editor in the Patron's Other menu]
130
125
+
131
126
. The User Permission Editor will load (this may take a few seconds). Greyed-out
132
127
permissions cannot be edited because they are either a) already granted to the
133
-
account, or b) not grantable, i.e., available for the staff member to assign.
128
+
account, or b) not grantable, i.e., not available for the staff member to assign.
134
129
+
135
130
image::permissions/profile-5.png[profile-5]
136
131
+
137
132
138
133
This interface shows:
139
134
140
-
* List of permission names.
141
-
* Whether or not the permission is applied, or assigned. If checked, the permission is assigned.
135
+
* The list of permissions available in Evergreen.
136
+
* Whether or not the permission is applied, or assigned. If the _Applied_ column is checked, the permission is assigned.
142
137
* The depth at which the permission is assigned.
143
-
* Whether the permission is grantable. If checked, this staff account will be able to grant the new privilege to
138
+
* Whether the permission is grantable. If the _Grantable_ column is checked, the staff account will be able to grant the new privilege to
The difference between patron and staff accounts is that every staff member needs a working location assigned. This determines where they can perform functions (based on their permissions) within the staff client.
160
-
161
-
To assign a working location:
162
-
163
-
. Go to *Administration > *User Permission Editor* and enter the staff account
164
-
barcode.
165
-
+
166
-
OR
167
-
+
168
-
Retrieve the staff account first through the patron search, then go to *Other* > *User Permission Editor*.
169
-
+
170
-
image::permissions/permissions_1.png[Click User Permission Editor in the Patron's Other menu]
171
-
+
172
-
. Place a check in the box next to the desired working location, then scroll to
173
-
the bottom of the display and click _Save_.
174
-
+
175
-
NOTE: In multi-branch libraries, it is possible to assign more than one working
176
-
location.
177
-
178
-
179
-
180
-
== Managing Permissions in the Database ==
151
+
=== Managing Permissions in the Database ===
181
152
182
153
Evergreen libraries that are comfortable manipulating the database directly may choose to manage permissions at the database level. At the database level, you can make a user belong to many different permission groups, and that can simplify your permission
183
154
management efforts. For example, if you create a _Student Circulator_ group and
@@ -340,3 +311,25 @@ the permission profiles of your system relatively simple in comparison to the
340
311
alternative approach of rapidly reproducing permission groups, overlapping
341
312
permissions, and permissions granted on a one-by-one basis to individual users.
342
313
314
+
== Assigning Working Locations to Staff Accounts ==
315
+
316
+
In addition to having the appropriate permission groups(s) assigned, staff need a working location to perform the necessary functions within the staff client. During the initial permission check, the working location is looked at in determining _where_ the staff member can complete certain actions.
317
+
318
+
To assign a working location:
319
+
320
+
. Go to *Administration > User Permission Editor* and enter the staff account
321
+
barcode.
322
+
+
323
+
OR
324
+
+
325
+
Retrieve the staff account first through the patron search, then go to *Other* > *User Permission Editor*.
326
+
+
327
+
image::permissions/permissions_1.png[Click User Permission Editor in the Patron's Other menu]
328
+
+
329
+
. Place a check in the box next to the desired working location, then scroll to
330
+
the bottom of the display and click *Save*.
331
+
+
332
+
NOTE: In multi-branch libraries, it is possible to assign more than one working
333
+
location.
334
+
335
+
Patron accounts do not need a working location assigned.
0 commit comments