What are Permissions?

There are three levels of permissions that Coghead allows Administrator to customize:

• Account level - Permissions which allows Users to set the permissions of other users and gives access to all Applications in the multi-user account.
• A pplication level – Permissions which allow Users to set the access of specific Applications. Application level permissions for a specific Application overwrite Account level permissions granting access to all Applications.
• Collection level – Permissions which allow Users to set the access of Collections within an Application. Collection level permissions overwrite Application level permissions. For example, A Collection level permission preventing the access of the Resources Collection in the Basic Project Manager Application overwrites access provided at the Application level that allows a User to see all Collections in the Basic Project Manager Application.

Setting Application Level Permissions

To set Application permissions you must have Admin or Account level Authoring Update permissions. Application permissions can be found on the Applications tab of the Managing Accounts on the Properties tab. On the Applications tab you will see two permissions tables. The top table allows Administrators to set authoring permissions for the highlighted Application while the bottom table allows Administrators to set user permissions for the highlighted Application. The Authoring and Using permissions can be broken down into four separate permissions which can be assigned to groups:

• Create - This allows Users to create new records. There is no Create authoring permission at the Application level since the Application has already been created before Application level permissions can be set.
• Read – This allows Authors and Users to view the selected Application. If not set, Users will not be able to launch the Application from the Admin Console and Authors will not be able to enter Author mode for this Application.
• Update – This allows an Author to modify the Application, this includes creating Collections and forms, editing Views or customizing Actions. The Update permission grants Users the ability to edit records existing.
• Delete – This allows Authors to permanently delete Applications from the Application List or Users the ability to delete records from a Collection's record list.
• Admin - This allows Admins to grant groups the ability to set Author and User permissions for this Application which may affect other account users.

All Users in a multi-user Account must be part of the <Account> .Users group to stay in the Account. By default, all users will have access to use every Application in a multi-user Account. To prevent users from having access to a specific Application, set custom permissions and be sure the <Account> .Users group does not have permission to use that Application.

Setting Application level permissions

You can set custom permission at the Application level through these steps:

1. Click on the Application so that its name is highlighted in the Application List and mouse over the Groups column of the desired permissions table.

1. 
2. Click on the Group name you want to select to turn permission on or off for each Group in the Account.
   
3. When you are done setting the Groups to the permission level, click on Save . The groups assigned the permission level will appear under the Groups column of the permission table.
   

Congratulations! You have now set the Groups that have access to the permission level. By assigning different Create, Read, Update, and Delete permissions to Authors and Users, you can create unique settings for each Application. It is possible to allow some groups to access and edit certain Applications while hiding other Applications from the same group.

As soon as you create a custom permission for Authoring Applications at the application level Create, Update, Read, Delete, and Admin are all affected. So if you set custom Update authoring permissions but leave Read, Delete, or Admin blank no group in the account will be have permission to Read, Delete or Administer for authoring in the Application. You will need to set each one of these permissions if you customize one of them. The same is true when changing a single permission for Using Applications.

Removing Custom Permissions

You can remove custom permissions at the Application level through these steps:

1. Click on the Application so that its name is highlighted in the Application List and mouse over the Groups column of the desired permissions table. An arrow will appear at the right side of the row.
2. Click on the column in which you want to edit the permissions and select the blank area in the columns.
   
   
3. Click on Save .