Permissions and Relationships
Permissions
Permission Groups in the DrawBridge Console are analagous to User Groups in typical operating systems.
Permissions Groups are a way of assigning a particular Role to a Person: Adding a Person record to the Accountabilty
permission group gives them the access and controls exclusive to Accountability
and higher level permission groups.
Person records are given the permissions by being added as a member of a particular Permissions Group.
Permission Groups in the DrawBridge Console:
Permission Group | Required Relationship | About |
---|---|---|
Company Owner |
Company Owner | The owner of a Company |
Appstore Access |
Company or Accountability Policy | Allows Person to Enable App Store Access on a Company record |
Can Submit Autofix Requests |
Company | Allows use of the Autofix reclassification function |
Can Submit Sites for Human Review |
Company | Allows submission of a Classification Review support ticket |
Media Viewer |
Company | Allows classification of a video in the Media Room |
Company Media Room Admin |
Company | Allows administration of a company Media Room |
Report Viewer |
Company or Accountability Policy | Allows viewing of web activity Reports |
System Owner |
Company Owner | Allows visibility and control of all Tenant Companies on that DrawBridge |
ACL Pumpkineer |
Accountability Policy or Compass Foundation Staff | Allows creation and modification of ACLs |
Accountablity |
Accountability Policy | Allows visibility and control of member Company configurations and reports |
Device Detector Admin |
(?) | (?) |
Realtime Log Viewer |
Company Owner of Main Company | Allows access to the system-wide Realtime Log Viewer |
Reseller |
(?) | Allows visibility and control of all Tenant Companies on that DrawBridge |
Sysadmin |
(?) | (?) |
Further advanced reading, see the POSIX specification documentation by The Open Group and IEEE.
Relationships
Records in the DrawBridge console, particularly Person records, can have one or more relationship associations.
For an analogy, consider how individual people in real life have different relationships to others, depending on their role: Parent-Parent, Parent-Child, Brother-Sister, and so forth.
Relationships in the Console
A Person can have the following relationships to Companies:
- Owner
- Associate
- Tech Support
- General Contact
A Person can have the following relationships to an Acountability Policy:
- Accountability Contact
A Company can have the following relationship to an Accountability Policy:
- Member
Examples
Person fred_smith owns Company Eastwood Trading Co. He therefore is assigned a Company Owner
Relationship, and added to the Company Owner
Permissions Group.
Company Eastwood Trading Co. has an on-premises DrawBridge, so fred_smith is also added to the System Owner
Permissions Group.
Person jack_miller is on the IT staff for Eastwood Trading Co. He is assigned a Tech Support
Relationship, and added to the Sysadmin
Permissions Group.