Admin Permission Assignment Recommendations

Keeping your LityxIQ instance well organized will greatly aid in successful use of the platform for you and your team members.  Here we recommend some best practices to get you started off well.  

1. Use User Groups to assign permissions of functionality and access.  Rarely if ever do this at the user level.  Do it at the user group level.

2. Create two different types of user groups: (1) groups that have different LityxIQ functional permissions such as say light, standard and admin;  A user should only be in one of these groups. (2) groups that do nothing for LityxIQ function, but do control access to projects and libraries.  A user can be in more than one of these groups.

3. Example: Create a user group called Functionality All that includes all permissions except those that include admin in the name.  There are about 100 permissions included in this.  All of your users can be assigned to this one.  New users can be assigned to it.  Should you want to have another group where some users can only view, but not create you could make a user group called Functionality Light and reduce the functionality all permissions down.  These groups are mutually exclusive so a users is only in one of them.    

4. Example: Create a user group called Admin that include all permissions. For anyone that will be setting up and maintaining your LityxIQ instance.  Again, anyone in this group is not in any of the other functionality permission groups.

5. Example Create any number of other user groups that define how your users or your LityxIQ work is organized and thereby with which you will use to control access to projects and libraries.  Users can be in more than one of these groups.

6. Do not mix the use of functionality user groups with access groups, i.e. do not begin assigning functionality permissions within an access user group.  Things will get very messy very fast if you do this.  An access user group should have no functionality permissions. It is just a group of users with which when you assign wish to give access to projects and libraries you can select the user groups you want to. 

7. At times you may want to just grant individual access to a project or library.  Keep in mind you will be doing it again for anyone else that needs the same access.  Assigning it to a user group, even with just a single person initially, allows you to later add new members to that group which gives them access and then you not having to go and grant individual access to all the places that single person was granted.