Skip to content
Snippets Groups Projects
Commit 8516a19f authored by Carina Antunes's avatar Carina Antunes
Browse files

Merge branch 'fix_admin_permissions_docs' into 'master'

[#3] Improve admin permissions docs

See merge request drupal/paas/drupal-documentation!39
parents 80c0129d 7f27f7a5
No related branches found
No related tags found
No related merge requests found
......@@ -21,6 +21,14 @@ When you create a new CERN Drupal website, a predefined list of roles is automat
<p className="image-caption-shadow">Overview of users of a Drupal website.</p>
### Configuring administration privileges for a freshly created website
As explained above websites come with predefined roles, one of them behind the administrator role. The admin role sets access to every part of the website and that consequently means that the users that are granted this role, have the ability to modify every aspect of the website.
All freshly created websites have mapped the `drupal-supporters` e-group to this role. This is a requirement for support, please don't remove this group.
We advice to re-use the administrator e-group seen on the webservices-portal for the website administrator role, but any or multiple groups can be configured. Please follow the instructions under [Grant admin access to a new group](/roles-and-permissions#grant-admin-access-to-a-new-group) to configure this initially.
### Creating and Assigning Roles
While the predefined roles accommodate most use-cases, it may be relevant to create a new role.
......@@ -71,22 +79,37 @@ In this case, you want to give another user the ability to create new pages. Acc
### Grant admin permissions
This case is easier to achieve but you, as an admin, need to be sure about what you try to achieve.
The admin role has access to every part of the website and that consequently means that the users that are granted this role, have the ability to modify every aspect of the website.
As a result, you need to be extra careful before making the decision to grant this role to a user.
If you have doubts about this user, we recommend creating a custom role and granting only the specific permissions you want the user to have.
If you are sure that you want to grant admin access to a user, then the only procedure that you need to follow is to add this user to the admin e-group.
For this use case, assume that the Drupal website that we own is called `accelerating-science.web.cern.ch` and that the user’s email that we want to make an admin is `user@cern.ch`.
By default, every CERN Drupal website comes with an e-group called `drupal-admins-name_of_the_website` and contains all the admins of the created website.
So in our case, the e-group will be called `drupal-admins-accelerating-science` and in order to make the user an admin, the only thing that we need to do is to add `user@cern.ch` to the `drupal-admins-accelerating-science` e-group.
If you are sure that you want to grant admin access to a user, you have the option to either create a new e-group or reuse an existing by visiting https://e-groups.cern.ch/. For this use case, let's assume that the Drupal website that we own is called `accu.web.cern.ch` and that the user’s email that we want to make an admin is `user@cern.ch`. After performing a search with the keyword `drupal-admins-accu` in https://e-groups.cern.ch/, we verify that the e-group `drupal-admins-accu` already exists. To grant admin permissions, you should add the user as a member of the drupal-admins-accu. If this step is not performed, users do not appear as administrators by default, eg:
![example](/assets/img/1-getting-started/roles_and_permissions_7.png)
If a group is synchronized from https://e-groups.cern.ch/ you can only reuse it from there, but if this is not the case, you can visit the [Webservices Portal](https://webservices-portal.web.cern.ch/my-sites) and select `Add users to the admin group via the Groups Portal`, eg:
![example](/assets/img/1-getting-started/roles_and_permissions_8.png)
![example](/assets/img/1-getting-started/roles_and_permissions_9.png)
![example](/assets/img/1-getting-started/roles_and_permissions_10.png)
To sum up:
1. Visit https://e-groups.cern.ch/
2. Find the `drupal-admins-accelerating-science` e-group
2. Find and reuse an existing or create a new e-group
3. Add `user@cern.ch` to this e-group
Alternatively:
1. Go to the [Webservices Portal](https://webservices-portal.web.cern.ch/my-sites)
2. Select `Add users to the admin group via the Groups Portal`
3. Locate the group
4. Add `user@cern.ch` to this group
### Grant admin access to a new group
This case refers to the situation where a new group is to be added as administrators of the website's content.
......
docs/static/assets/img/1-getting-started/roles_and_permissions_10.png

51 KiB

docs/static/assets/img/1-getting-started/roles_and_permissions_7.png

92.2 KiB

docs/static/assets/img/1-getting-started/roles_and_permissions_8.png

73 KiB

docs/static/assets/img/1-getting-started/roles_and_permissions_9.png

53 KiB

0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment