You can control the visibility of entities to users in your system by adding or removing entities from the partitions these users are authorized to access.
When you put related entities, such as cardholders and credentials, into different partitions, users that are not authorized to access all the partitions involved may not have all the access rights they need to perform their tasks. To simplify the partition configuration process, when you add or remove entities from a partition, the system automatically adds or removes their related entities from that partition. The common sense rules applied by the system are as follows:
What you should know
- Adding a user group or a cardholder group also adds their members.
- Adding a user or a cardholder does not automatically add their parent groups.
- Removing a user group or a cardholder group also removes their members.
- Removing a user or a cardholder does not automatically remove their parent groups.
- Adding a cardholder also adds their associated credentials.
- Removing a cardholder also removes their associated credentials.
- Adding a credential does not automatically add its associated cardholder.
- Removing a credential does not automatically remove its associated cardholder.
- When adding an entity that has child entities attached (such as an area or a role), you need to specify whether or not you want to add its child entities as well (which includes everything that’s below that entity’s hierarchy).
- When removing an entity that has child entities attached (such as an area or a role), you need to specify whether or not you want to remove its child entities as well (which includes everything that’s below that entity’s hierarchy).
- Adding an entity to a partition does not remove it from the other partitions it belongs to. There is no limit to the number of partitions an entity can belong to.
- Removing an entity from a partition automatically adds it to the root partition if that entity does not belong to any other user-created partition.
- You cannot remove an entity from the root partition if that entity does not belong to any other partition.
From the Config
Tool home page, open any
administration task, and select a tab that shows an entity tree.
If the partitions are not visible, click Show partitions () in the Search box or press F4.
Select the partition you want to modify, and click the
The current contents of the partition are displayed in the Members list.
Do either one of the following:
Tip: Alternatively, you can change the content of partitions directly from the entity tree, using drag-and-drop to move entities, and Ctrl+drag-and-drop to copy entities.
- To add entities to the partition, click Add (), select the entities from the Search dialog box, and then click Select.
- To remove entities from the partition, select the entities from the Members list, and then click Remove ().
All changes are immediately applied.