CMS (Manager) - Grant/Revoke Workspace Permissions

Add or remove an individual's author and publish access to a workspace in NDSU CMS.
    On Tuesday, October 20, 2020 permissions were migrated to Grouper.
    CMS group permissions are managed in Grouper - How to use Grouper .

    Workspace managers can add and remove authors and publishers to the workspace(s) they manage using Grouper.

    Add an author

    An author has access to view and edit new draft contents/pages in the workspace, and to upload/delete files in the workspace.

    1. Log in to Grouper
    2. Click My groups to see the groups you can manage
    3. Locate and click the CMS group Author Add/Remove group
    4. Click the orange +Add members button
    5. In the Member name or ID field, enter the name, username, or EmplID of the individual you want to add
    6. Click the correct username from the drop-down list that displays
    7. Click Add
    8. The request should process within about 15 minutes. If access still has not gone through after that time, you should check with the individual to verify they have enrolled in Multi-Factor Authentication (MFA).

    All CMS accounts require Multi-Factor Authentication (MFA) . If you add an individual to a CMS group you manage and that individual has not yet enrolled in MFA, their CMS account will not be created. Their CMS account will be automatically created the next day after they enroll in MFA for NDSU Services - [Link for document 99733 is unavailable at this time] .

    Add a publisher

    Adding a publisher works the same as adding an author except you will Locate and click the CMS group Publisher Add/Remove group to add the publisher.

    In Grouper, publisher access automatically grants author access. You do not need to manually add a member of the Publisher group to the Author group.

    Remove a member

    To remove a member,

    1. Log in to Grouper
    2. Click My groups to see the groups you can manage
    3. Locate and click the CMS group Author Add/Remove group or the Publisher group respective to the type of member you intend to remove
    4. Locate the individual in the table of group members The Filter (table search) does not work at this time
    5. From the Actions button for the member to remove, choose Revoke Membership

    If your intent is to convert a publisher into an author, you should remove the individual from the Publisher group and add them to the Author group.

    Change managers

    Only university staff or faculty members may be a manager. Students (student employees, graduate assistants, etc.) are not eligible for this role.

    1. Log in to Grouper
    2. Click My groups to see the groups you can manage
    3. Locate and click the Owners group associated with the group you want to change manager for (in the same table row as app : CMS : Workspaces : the group : Owners and Managers that you're changing mangers for)

    Add manager

    1. Click +Add members and search for the individual
    2. In the Member name or ID field, enter the name, username, or EmplID of the individual you want to add
    3. Click the correct username from the drop-down list that displays
    4. Click Add

    Remove manager

    1. In the table row for the individual that should be removed, click the Actions button and select Revoke membership

    This only revokes their Owner/Manager access, not their author or publisher access!

    In the event all managers have left the university, contact the IT Service Center by phone, in person, or using online self service. The IT Service Center will verify the former managers no longer have affiliation with the university and confirm the new manager is someone authorized to be responsible for the group.

    What access does each type of group provide?

    Table describing what access each Grouper policy gives you.
    Edit contents in draft Publish drafted records Change Authors/Publishers Change Managers/Owners
    Author edit contents
    Publisher edit contents publish contents
    Manager add authors and publishers
    Owner add authors and publishers add other owners/managers

    Other questions

    The member type "publisher" is disabled

    There may be up to 10 publishers per workspace. To add another publisher, you must remove one first.

    Why can't I see my workspace in Typo3?

    Generally, there are two issues that cause you to not see your workspace:

    1. If you requested a workspace, and put yourself as a Manager on the ticket, you do not have Publisher access by default. You either need Author or Publisher access to view/edit the workspace.
    2. You or the group manager added your account to both the "Add" and "Remove" policies. In this situation, the remove policy wins causing you to not have access to your workspace.

    Can the IT Service Center grant/remove access?

    Requests to add or remove individuals from a workspace can be submitted to the IT Service Center by phone, in person, or using Online Self Service (you must log in; do not use any unauthenticated online help forms).

    Can there be more than one workspace manager?

    Additional workspace managers can be added. An existing workspace manager should contact the IT Service Center by phone, in person, or using online self service (you must log in; do not use any unauthenticated online help forms).



    Keywords:
    Access, TYPO3 
    Doc ID:
    94568
    Owned by:
    Trevor K. in NDSU IT Knowledge Base
    Created:
    2019-09-19
    Updated:
    2024-08-22
    Sites:
    NDSU IT Knowledge Base