Access Control
Access Control is where you invite people into your workspace and decide what each of them can do. It holds three kinds of thing, and only one of them grants anybody anything, so get the difference straight before you invite anyone.
To open it, select its icon in the top bar, the green shield, or select your avatar at the top right and choose Access Control. It opens on Users. The rail on the left also holds Roles, Departments, Groups and Invitations, and each list has one button at its top right for the thing that list holds: Invite User on Users and Invitations, and Add Role, Add Department or Add Group on the other three.
A role carries permissions, nothing else does
A role is a named set of permissions. Whatever it allows, the people holding it can do. A person can hold several roles, and then they can do everything any of their roles allows. When someone cannot open a page or use a button, a role is what decides it.
A department and a group are named lists of people: a name, a description and the members. Neither carries permissions of its own. A knowledge base or a voice application can be shared with one, though, and then everyone in it gets that access, so adding someone to a department or group can open those to them.
| Role | Department | Group | |
|---|---|---|---|
| What it is | A named set of permissions | A named list of people | A named list of people |
| Grants permissions? | Yes | Not by itself; it can be given access to a knowledge base or voice application | The same as a department |
| How you create one | Add Role | Add Department | Add Group |
| How someone gets one | Chosen when you invite them (a role is required), or later in User Details | Pre-assigned at invitation, Manage Members, or User Details | The same as a department |
| Ready-made ones? | Five, badged SYSTEM | No | No |
Departments and groups work identically. The difference is the meaning you give them: a department for where someone sits in the organisation, a group for a team that cuts across departments.
A role only grants permissions for modules your plan includes. Ticking a permission for a module your workspace has not bought changes nothing.
Other modules scope access with all three
Elsewhere in Elie you say who something is for by choosing Roles, Departments and Groups: an IntELIEDocs orchestrator's visibility scope, a knowledge base's access, or a Voice application's access. Each one is offered there as soon as it exists.
Removing a department or group does not tell you where it is used, so check those settings first.
Getting started
- Invite a user
Send an invitation and choose the person's role before they arrive.
- Manage roles
Create a role, rename it, or remove one nobody should hold.
- Choose a role's permissions
Tick what a role may do, in the layout that suits you.
Find your way
- Managing users
Find someone, and change their name, roles, department or group.
- Disabling and removing accounts
Sign someone out, reset their password or MFA, disable or remove them.
- Tracking invitations
See who has not joined yet, resend a link or revoke it.
- Departments
Arrange people by where they sit in the organisation.
- Groups
Gather people into teams that cut across departments.
- Permissions reference
What each permission family covers, module by module.