Permissions and groups¶

The model in one paragraph¶

An item's creators can see, edit and delete it. Members of a group the item is shared with can see it, but not edit it. Anyone who can see a collection can see the items in it. Managers can see and edit the items of the people they manage. Administrators can do everything. Starting materials and equipment are the exception: any active user can edit them.

Who can do what¶

Items with no creators are visible to everyone who can log in.

Creators¶

The person who creates an item is its first creator. To add more, edit the item's Creators field, or use the Share button. Anyone you add as a creator can edit the item. Use this for close collaborators working on the same samples.

Groups¶

A group is a set of users, such as a research group or a project team. Groups are created and managed by administrators.

To share an item with a group, use the item's Share button, or pick the group when you create the item. To share many items at once, tick them in a table and choose Batch share.

Roles¶

Each user has one role:

User

The normal role. Can create items and edit their own.

Manager

A user who has been made the manager of other users, such as a group leader. Can see and edit those users' items.

Admin

Can manage users, groups and roles. Can edit every item. Can switch on super-user mode to see every item.

Roles are assigned by administrators.

Account status¶

A deactivated account can still log in and read items, but cannot change anything. An unverified account is waiting for an administrator to approve it.