Manage DocuShare Administrator Roles and User Accounts

Manage DocuShare Administrator Roles and User Accounts

Overview

DocuShare provides three built-in administrator groups. Assign users only the administrative authority they need. A user can have broad site access through administrator-group membership even when the user has no special permission on an individual object.

Understand the Administrator Groups

• Group-1 - Site Administrators: Broad site administration, including access to administration tools and management of site objects, users, and groups. By default, Group-1 is also a member of Group-2 and Group-3.
• Group-2 - Content Administrators: Administrative authority for site content and related content-management tasks.
• Group-3 - Account Administrators: Administrative authority for user and group account management.

The main admin account (User-2) is a special system account. Site Administrators cannot edit the main admin account's properties or password.

Removing Group-1 from Group-2 or Group-3 changes the privileges of all Group-1 members, not just one person. Review the resulting access before changing these memberships.

Add a User to an Administrator Group

1. Sign in as the main admin account or a Site Administrator authorized to manage administrator groups.

2. Open Admin Home > Account Management > Groups.

3. Open the appropriate administrator group: Group-1, Group-2, or Group-3.

4. Edit the group's Members property and add the existing user account.

5. Apply or save the change.

6. Have the user sign out and sign back in, then verify only the intended administration tools are available.

To remove an administrator's privileges, remove the user from the relevant group and verify the resulting access. If the user inherits privileges through multiple administrator groups, update each applicable membership.

Account Administration and External Directories

Use Account Management > Users or Groups to locate and manage DocuShare-managed accounts. For accounts synchronized from LDAP, Active Directory, or another external directory, make authoritative account changes in that directory as well. A local DocuShare change may be overwritten by the next synchronization.

When a user or group is deleted or merged, review object ownership, group membership, and access permissions first. These actions can affect access to content across the site.

Troubleshooting

• If the user does not see Admin Home, confirm the user's administrator-group membership and have the user sign in again.
• If the user sees more administration functions than expected, review membership in all three administrator groups.
• If Group-1 is missing or cannot be edited, use the main admin account or contact DocuShare Support through your support case.