Area permissions let you control who can do what in each area of your intranet, so the right people can manage content, homepages and security where they need to.
There are two types of permissions: Advanced and Simplified. This guide will walk you through assigning security permissions in an area using Advanced permissions.
This guide covers:
- Assigning security permissions in an area
- Understanding inherited permissions
- Considerations, tips & guidance
Before you start:
- You need the Area Security Manager permission for the area.
- Security permissions are set area by area, so you'll need to assign them in every area of your intranet where they're needed.
Assigning security permissions in an area
-
Go to the area, open the page options (three vertical dots) in the top right and select Manage Security.
Note: If you have Simplified Permissions enabled in your site, the manage button will say Manage Permissions. To continue assigning permissions with Advanced, for example at the top business level where there are additional permissions, skip to Advanced by clicking the Advanced button in the Simplified menu.
- Check you're in the right area, then select a category from the list on the left to see the permissions within it.
- To change who has a permission, select the pencil icon next to it and choose people or user groups in the object picker. For help, see How to use the Object Picker to select areas, content and people.
- Make your selection and select Confirm to update.
Understanding inherited permissions
Some permissions include others. On the Content tab, these are shown with icons. For example, the Content Manager permission automatically includes every content permission beneath it, shown by the green, blue and yellow icons.
Considerations, tips & guidance
- Use user groups: assign permissions to user groups rather than individuals, even if a group only has one member. When someone leaves or changes role, you only need to update the group. See How to create and manage User Groups.
- Setting up a new intranet: if you're building your structure before importing users, set permissions at main business level first. New areas can then copy their security settings from your company area, which saves time.