Step 6: Assigning User Authorizations

This is step 6 of setting up a fully working Brand in Enterprise Server 10 for everyday use in a standard workflow environment. (See a list of all steps)

When users want to use Studio, Smart Connection for InDesign and InCopy or any other application that connects toEnterprise Server, they need to be added to at least one Brand that is set up on that server.

Adding a user to a Brand is done by making that user part of a user group and assigning that group to the Brand.

This is accomplished by setting up an Authorization Rule: a combination of a Category, Workflow Status and an Access Profile. Together, they define what actions a user is allowed to perform on a file while that file is part of that Category and Workflow Status combination.

Typically, multiple Authorization Rules are set up: one for each specific scenario.

The total 'result' of all these Authorization Rules eventually defines what a user is allowed to do (and thereby what a user is not allowed to do).

Note: As the first step in setting up your authorizations, we strongly advise to analyze your workflow, user groups, and the required access control on paper.

About minimizing the number of rules to set up

Users can be assigned to multiple user groups. Using this efficiently, it minimizes the number of Authorization Rules you need to specify, and thereby makes the setup and maintenance more manageable.

By introducing a user group such as 'All' or 'All for <my Brand>', generic access control can be set such as 'Listed in Search Results' and/or 'Read' rights for everybody involved with the Brand. This again minimizes the number of required Authorization Rules.

Because of this, it is good practice to grant 'Read' access rights to every file for everybody working in a Brand in order to make sure that the system can access files if needed. The 'Listed in Search Results' access can subsequently be used to determine which files are shown to the user. Without the 'Listed in Search Results' access, the user won't see a file and thus cannot open it.

Creating User Authorizations is done in the following locations:

• For periodic Brands (such as magazines and newspapers), User Authorizations are created on the Brand Maintenance page.
• For project-oriented Brands (typically used by book publishers and advertising agencies), User Authorizations are created on the Issue Maintenance page.

Step 1. Make sure that the following is in place:

• Each user is added to the Enterprise system as a user. See Managing user accounts.
• User groups have been created that hold all users who will be granted access to a Brand using a specific Access Profile. See Managing user groups.
• Access Profiles have been set up, each defining what a user can and cannot do. See Managing Access Profiles.

Step 2. Do one of the following:

• For periodic Brands: access the Brand Maintenance page for the Brand in which you want to add User Authorizations.

Show me how

Step 1a. In the Maintenance menu or on the Home page, click Brands. The Brands page appears.

Step 1b. Click the name of the Brand. The Brand Maintenance page appears.

• For project-oriented Brands: access the Issue Maintenance page for the Issue in which you want to add User Authorizations.

Show me how

Step 1a. In the Maintenance menu or on the Home page, click Brands. The Brands page appears.

Step 1b. Click the name of the Brand. The Brand Maintenance page appears.

Step 1c. Click the name of the Publication Channel in which the Issue is located. The Publication Channel Maintenance page appears.

Step 1d. For the Issue that needs to be edited, click the Edit button.

Step 3. Locate the User Authorization options.

Since we are working with a newly created Brand/Issue, no User Authorizations exist yet.

Step 4. Click Add.

The Authorization Maintenance page appears.

Step 5. From the User Groups list, choose the group for which Authorization Rules need to be created.

Lists appear in the Category, Status, and Profile columns for setting up the rule.

Step 6. Make the relevant choices from each list.

Step 7. Add the Authorization Rule by doing one of the following:

• Click the Add Authorization button. This will save the currently added rule and automatically display a new row of lists for adding a new rule.
• Click the Update button. This will save the currently added rule without displaying a new row of lists.

Step 8. When finished adding rules, return to the Brand Maintenance page.

Next step

Step 7. Assigning Admin Authorizations