Granting Access Through Groups - Beta

Overview

As we redesign and improve ZenGRC user roles, we're releasing an initial beta feature that provides administrators granular control over individual object permissions.

This functionality allows administrators to create user groups, which can then be assigned to objects. All users in the group have full read, write, and delete control of the object regardless of their respective role permissions.

However, while users in the group have administrative control over the object, their ability to see other objects mapped to their assigned item depends on their roles.

Creating Groups

To create or modify a group, complete the following:

1. Click Settings | Groups.
2. Click Actions | New Group.
   
   
   
   
3. Add a descriptive title so it can be differentiated from other groups or users.
4. Select one or more users in the People drop-down.
5. Click Save.
6. Alternatively, click Cancel to close the dialog box without saving.

Assigning Groups to Items

To allow a group or groups to have access to an item, complete the following steps:

1. Open the item from the System of Record or a module's home page.
2. Click to edit the Owner field.
3. Select the group in the drop-down.
   
   
   
   
4. Click Save.