Groups Management in Admin 2.0

Birst Account Administrators can manage user groups at the account level, in addition to the existing space level groups.

An Account Administrator can also provision (enable or disable) features based on account level user groups.

You can access Account Groups from the Admin 2.0 Home page by clicking the Groups tile.

Click the + Create Group icon to get started creating a new group. Provide a brief description of the group, such as Admins or Report Writers, and start selecting the permissions and features you want to assign to the user group.

Related to Account Groups is the ability to override account level permissions at the space level by employing space level group permissions. Birst Account administrators will have the power to provide or deny access to users to assign space level group permissions that can override the account level group permissions using the Disable Space Groups permission. The default value will be set to off. Disable Space Groups is shown as disabled in this example)

Setting the Disable Space Groups option means the Manage Groups tab will not be visible in the (Birst 5) Admin module for Users in an Account Group with the Disable Space Groups ACL enabled.

After creating your Account Group, you can start adding users to the account group. When a user belongs to multiple account groups, the user's permissions are inclusive. Note: The type ahead feature is enabled when adding users to account groups for ease of finding existing users in the account.

With the creation of Account Level Groups, Space Administrators can assign account level groups to custom subject areas (CSAs) in Classic Admin.

Space Administrators can assign report (folder/file) security permissions to account level groups. Note: You select the report folder and right-hand click to select the report folder permission option to open the following dialogue action box.

Birst Account Administrators can now assign account level user groups to data level security groups.

Important: If there are space level groups, you will not see account level groups to assign to data level security groups.

Note: Deleting users from an account will remove them from any associated account groups.

Note: Users will be able to pass account group as a session variable for SSO/SAML.