Laserfiche Security: Global Feature Rights
Many of our clients ask us if there is a way to globally configure or limit what a user can do in the Laserfiche repository.
In this month’s article, we’ll explore how we can use the Laserfiche Administration Console to set a user or group’s functional feature rights within the Laserfiche repository.
Laserfiche calls the ability to take an action in the Laserfiche client, whether it be the Windows client or Web client, a “Feature Right”. For example, the ability to delete entries from the repository can be enabled or disabled for a user or group. These settings supersede any folder access rights already assigned in the repository itself.
Navigate to The Windows Administration Console, Web Management Console or Cloud Management
If using the Windows Administration Console
Launch the Windows Administration Console:
1. Open the Laserfiche Administration Console and navigate to the Users and Groups node.
a. From the Start menu, scroll to the Laserfiche folder and click on “Laserfiche Administration Console 10.4”
b. Or, from the Laserfiche Windows Client, click on Tools>Administration Console…
2. Login using your Laserfiche administrative account.
3. Expand the Repositories node, expand the named Repository, then expand the Users and Groups node.
a. If you want to set Feature rights on a Laserfiche User (not a Windows user), select the Repository Users node.
b. If you want to set Feature rights on a Laserfiche Group select the Repository Groups node.
c. If you want to set Feature rights on a Windows User or Group, select the Windows Accounts node.
4. Next, double-click on the Account name to open the Properties box for that user or group.
5. Select the Rights tab
6. Select the desired global Feature Rights you want to assign to the account. These settings allow a user or group to use these functions within the Laserfiche client application. Do not assign Privileges, unless the trustee is going to be a Laserfiche Administrator, responsible for the maintenance of the system.
For example, if you don’t want a user to be able to delete anything in the repository, simply leave the Delete box unchecked. If you want the trustee (user or group) to be able to email or download documents out of the repository, select the Export check box.
If you want the trustee to be able to do everything, check all the boxes.
If using the Web Administration Console...
Launch the Web Management Console:
1. Sign-in to your Web Client, as usual, then press the drop-down next to your name and select Management.
2. Select Users.
3. Select the Trustee from the list on the left-side of the screen, then on the right-side expanded panel click on the Rights tab.
4. In the Feature Rights column, select the desired rights. These settings allow a user or group to use these functions within the Laserfiche client application.
For example, if you don’t want a user to be able to delete anything in the repository, simply leave the Delete box unchecked. If you want the trustee (user or group) to be able to email or download documents out of the repository, select the Export check box.
If you want the trustee to be able to do everything, check all the boxes. Do not assign Privileges, unless the trustee is going to be a Laserfiche Administrator, responsible for the maintenance of the system.
If using Laserfiche Cloud...
Launch the Repository Administration Console
1. Click on the app Picker or grid icon at the top-right of the screen and click on Repository Administration.
2. Select Users.
3. Select the Trustee from the list on the left-side of the screen, then on the right-side expanded panel click on the Rights tab.
4. In the Feature Rights column, select the desired rights. These settings allow a user or group to use these functions within the Laserfiche client application.
For example, if you don’t want a user to be able to delete anything in the repository, simply leave the Delete box unchecked. If you want the trustee (user or group) to be able to email or download documents out of the repository, select the Export check box.
If you want the trustee to be able to do everything, check all the boxes. Do not assign Privileges, unless the trustee is going to be a Laserfiche Administrator, responsible for the maintenance of the system.
If you have any questions regarding Global Feature Rights or wish to speak with a CDI professional team member, contact us at support@cdi.support.