Skip to main content

Permissions and Relationships

Permissions

Permission Groups in the DrawBridge Console are analagous to User Groups in typical operating systems.1

Permissions Groups are a way of assigning a particular Role to a Person: Adding a Person record to the Accountability permission group gives them the access and controls exclusive to Accountability and higher level permission groups.

Person records are given the permissions by being added as a member of a particular Permissions Group.

Permission Groups in the DrawBridge Console:

Permission Group Required Relationship About
Company Owner Company Owner The owner of a Company
Appstore Access Company or Accountability Policy Allows Person to Enable App Store Access on a Company record
Can Submit Autofix Requests Company Allows use of the Autofix reclassification function
Can Submit Sites for Human Review Company Allows submission of a Classification Review support ticket
Media Viewer Company Allows classification of a video in the Media Room
Company Media Room Admin Company Allows administration of a company Media Room
Report Viewer Company or Accountability Policy Allows viewing of web activity Reports
System Owner Company Owner Allows visibility and control of all Tenant Companies on that DrawBridge
ACL Pumpkineer Accountability Policy or Compass Foundation Staff Allows creation and modification of ACLs
Accountablity Accountability Policy Allows visibility and control of member Company configurations and reports
Device Detector Admin (?) (?)
Realtime Log Viewer Company Owner of Main Company Allows access to the system-wide Realtime Log Viewer
Reseller (?) Allows visibility and control of all Tenant Companies on that DrawBridge
Sysadmin (?) (?)

1For further advanced reading, see the POSIX specification documentation by The Open Group and IEEE.

Relationships

Records in the DrawBridge console, particularly Person records, can have one or more relationship associations.

For an analogy, consider how individual people in real life have different relationships to others, depending on their role: Parent-Parent, Parent-Child, Brother-Sister, and so forth.

Relationships in the Console

A Person can have the following relationships to Companies:

  • Owner
  • Associate
  • Tech Support
  • General Contact

A Person can have the following relationships to an Acountability Policy:

  • Accountability Contact

A Company can have the following relationship to an Accountability Policy:

  • Member

Examples

Person fred_smith owns Company Eastwood Trading Co. He therefore is assigned a Company Owner Relationship, and added to the Company Owner Permissions Group.

Company Eastwood Trading Co. has an on-premises DrawBridge, so fred_smith is also added to the System Owner Permissions Group.

Person jack_miller is on the IT staff for Eastwood Trading Co. He is assigned a Tech Support Relationship, and added to the Sysadmin Permissions Group.