Grouper Training End Users Lite UI – Permissions – Part 2 Chris Hyzer Internet2 University of Pennsylvania This work licensed under a Creative Commons Attribution-NonCommercial 3.0 Unported License.

2 Contents Introduction Getting started (part 1) Show permissions for user (part 1) Show who has a permission (part 1) Show if user has a permission (part 1) See why a user has a permission (part 1) Assign a role permission (part 2) Assign a user permission (part 2) Unassign permissions (part 2) Advanced features (part 3)

3 Introduction to Integration

4 Getting started The Permission Lite UI is accessed by Deep link From Admin UI From Lite UI menu Note: permissions are used in different ways for different applications You need to be familiar with the application permissions before assigning / unassigning

5 Assign a role permission Role permissions are effectively assigned to all entities in the role They are also effectively assigned to all roles which inherit permissions from that role On the permissions lite-UI screen: Select ‘role’ type permissions Select a permission definition (optional) Select a role / permission / action

6 Assign a user permission Entity permissions apply to one entity in the context of a role On the permissions lite-UI screen: Select ‘entity’ type permissions Select a permission definition (optional) Select a role / permission / action / entity

7 Unassign permissions For role or entity permissions, view the permissions in the filter Uncheck the assignment checkbox and click “Submit” Or click on the red or green icon that shows if permission allowed or not If the checkbox is not checked, it is an inherited permission. Analyze the result and unassign where it is direct

8 Quiz Click on the quiz link in the video description to reinforce your knowledge of this topic

Thanks! Further information: Infosheets, mailing lists, wiki, downloads, etc.: Grouper demo server: grouperdemo.internet2.edu/ grouperdemo.internet2.edu/ Grouper Online Training Home: spaces.internet2.edu/x/IIGfAQ This work licensed under a Creative Commons Attribution-NonCommercial 3.0 Unported License. 9