User Permissions Overview

Permissions Overview

In Shares, there are five user types:

Standard Users
Project Admins
Organization Admins
User Manager
System Admins

All admins have access to a settings menu that allows them to manage their area(s) of administration. This may include:

Adding and removing users and groups
Authorizing and revoking access for users and groups
Adding nodes and shares
Configuring settings
Configuring content permissions to resources

Standard users can access only resources authorized by an admin. A resource can be a node, share, group, or user. Resources are allocated to organizations for admins in that organization to authorize to projects and shares.

Standard User

A standard user is a non-admin user account in the Shares application. Standard users can only access project resources authorized by an admin.

A standard user can:

Access all organizations, projects, and shares the user has permission to access
Browse all organizations and projects the user has permission to access
Perform authorized file operations on shares the user has permission to access

Project Admin

Project admins are user accounts authorized to a project with the Admin option enabled. Project admins can manage every aspect of a project using the eligible resources an organization admin has authorized to the project.

Project admins can:

Create shares from eligible nodes in the project
Create shares from folders in a share when browsing a share
Modify and delete shares within the project
Authorize eligible users and groups to shares in the project

Project admins cannot:

Create or new users, groups, or nodes, or add them to the project

For instructions on creating a project admin, see Managing Users in a Project.

Organization Admin

Organization admins are user accounts authorized to an organization with the Admin option enabled. Organization admins can manage every aspect of an organization using the eligible resources a system admin has authorized to the organization.

Organization admins can:

Create, modify, and delete projects within the organization
Create, modify, and delete shares within the organization
Delegate content and resource administration of a project by authorizing user accounts as project admins
Authorize eligible users and groups to projects and shares in the organization
Authorize eligible nodes to projects in the organization

Organization admins can also perform any of the actions available to project admins.

Organization admins cannot:

Create or new users, groups, or nodes, or add them to the organization

For instructions on creating an organization admin, see Managing Users in an Organization.

User Managers

A user manager is a user account that can manage users and groups in the application. User managers can access the Users and Groups tabs in the System Administration menu, but cannot access the Nodes, Authentication, and Configurations tabs.

User managers can:

Create, modify, and delete application user accounts and groups
Manage user memberships of local groups
Import and create remote users from already configured LDAP/SAML authenticatioh providers

User managers cannot:

Create or configure LDAP/SAML authentication providers
Authorize users as admins of organizations or projects

For instructions on making a user a user manager, see .

Note: User managers can also be authorized as project and organization administrators.

System Admins

System admins are user accounts that have been granted administrator privileges. System admins have full access to the application.

Only system admins can:

Create, modify, and delete application nodes
Create, modify, and delete organizations
Delegate content and resource administration of an organization by authorizing user accounts as organization admins
Allocate resources to an organization
Configure global system preferences

System admins can also perform any of the actions available to organization and project admins.