SSP 2.X Adjust the Permissions for the Accommodation Tool

Instructions to Adjust the Permissions for the Accommodation Tool

Updated: 3/28/2014
 

Purpose:  By default, the Accommodation tool is granted to the Coach, Manager and Administrator role.  Some implementers would like to remove the Accommodation tool from the Coach (or other) role and create a custom security group to manage permissions.  The instructions below describe how to remove the tool from the Coach and create a group to add to specific users only.

Steps

1. Remove the Accommodation tool from the Coach role permissions
2. Create a custom security group for the Accommodation tool
3. Add Permissions to the custom security group for the Accommodation tool
4. Add users to the custom security group for the Accommodation tool

Remove Permissions for the Accommodation Tool

1. As an administrator, navigate to Manage Users -> Manage permissions
2. Use Ctrl+F to find the "ACCOMMODATION_READ" permission. Click it.
3. You will see a list of SSP role with the ACCOMODATION_READ permission
4. Select Edit in the row for SSP_COACH
5. Click the Choose Principals buttons
6. In the right column named "Your Selections" hover SSP_COACH and click on the red icon with the dash symbol in the middle. This will remove the role from the list. Repeat for any other roles (possibly Manager)
7. Click the Submit button in the lower right corner when finished.
8. Choose the Manage Users link again from the top menu

Create a Custom Security Group

1. As a super user, navigate to Manage Users -> Manage groups
2. Click the Groups of People
3. Click the "SSP Role" group
4. You should see a list of SSP_* groups. Click the green "plus" icon above that list,
5. Click the Next button at the bottom
6. Click "Create Member Group"
7. Name: SSP_ACCOMMODATION
8. Description: SSP Accommodation access only
9. Click the Next button in the lower right corner
10. Click the Save button in the lower left corner

Add Permissions to the Accommodation Custom Security Group

1. As a super user, navigate to Manage Users
2. Choose Manage permissions
3. Use Ctrl+F to find the "ACCOMMODATION_READ" permission. Click it.
4. Click "Add an Assignment"
5. You'll get an unlabeled input field with instructions to select a target. Type "All permissions".
6. Click the "Submit" button
7. Click "Choose Principals"
8. Click the "SSP Roles" group, then the "SSP_ACCOMMODATION" group
9. Click the green "plus" icon above that list, next to "SSP_ACCOMMODATION". That group should appear in the right hand panel with a green "checkmark" icon.
10. Click "Submit"
11. You should see the permission granting tree view from d/e, but with the SSP_ACCOMMODATION group now present, with a "Inherit (Deny)" grant.
12. Change that to "Grant". The change will be applied immediately. There is no form submission button.
13. If you see the SSP_COACH role in the list still, change the "Grant" to "Deny"

Add Users to the Accommodation Custom Security Group

1. As a super user, navigate to Manage Users -> Manage groups -> Groups of People
2. Click the "SSP Roles" group, then the "SSP_ACCOMMODATION" group
3. Click the green "plus" icon above that list
4. Click the Next button
5. Click "Edit Members" link on the far right side of the page
6. Search for a user by username to be added to the SSP_ACCOMMODATION group
7. Choose the user in the results list
8. After clicking on the searched-for user, the user name should appear in the right hand panel with a green "checkmark" icon.
9. Click "Save"
10. The username should appear under the "Members" header.
11. Click "Done" or repeat the process starting at #5 to add more users to the group