Portail ZAPP rights (screens, knowledge bases, menus…) are granted to groups. The Synchronized groups screen keeps a group up to date automatically from organizations: for example a group that contains every client referent, or every partner member. It is reserved for Administrators; the Synchronized groups button on the Organizations page is only shown to them (address: /organizations/group-rules).
Creating a rule
Fill in New rule:
- Group code: letters, digits and underscores, at most 100 characters, starting with a letter (for example
CLIENTS_PREMIUM); the code is saved in uppercase. The group is created if it does not exist. An existing ordinary group is never taken over, because its hand-picked members would be erased: choose another code. A code that permissions already use although the group does not exist yet (a module's role group, for example) is also refused; - Group name and Description;
- Organization types: Internal, Partner, Client (at least one);
- Roles: Member, Referent, or both (at least one).
Click Create. The group then contains the active users who belong to an active organization of one of the chosen types, with one of the chosen roles. Several rules can target the same group: their populations add up. A rule is edited on its row (Save); a rule marked Declared by the product was set up at installation.
How the group follows organizations
- The group follows at once every member added or removed, every change of role, type or status of an organization.
- A catch-up task recalculates every group every hour (at the fifteenth minute) and fixes any gap. Synchronize now runs this catch-up immediately.
- Members of a synchronized group cannot be edited by hand: not on the groups screen, not on a user's record (the group shows a lock there), not by directory synchronizations. The group can be neither deleted nor deactivated while a rule targets it.
Deleting a rule
The bin icon of a row (Delete rule) removes the rule, after confirmation. If it was the group's last rule, the group becomes an ordinary group again: its members are kept, they can be edited by hand again, and the group no longer follows organizations.
Granting rights to the group
The screen grants no rights by itself: once the group is filled, grant it the rights you need on the usual screens (screen permissions, knowledge base rights, menu entry visibility).