User rights groups

Here you can add user rights groups for the user, if needed. The user rights groups must first be created in the User rights groups procedure.

Normally, it is not necessary to add user rights groups to users, since there are built-in user rights in the pre-defined roles. But sometimes you might need to add user rights groups for one or several users. For example if there are no roles that suit or if several user's user rights need to be adjusted.

The same user can also belong to several user rights groups. One user rights group should be set as Default for the user if you add user rights groups. The purpose of the default user rights group is to automatically load default values (saved in selections to lists) based on the default user rights group when the user opens a certain procedure.

A difference compared to roles is that user rights groups can either allow or deny different activities. Roles can only allow activities. Deny is ranked higher than Allow. If for example a user has a role that allows a specific activity but at the same time belongs to a user rights group that deny the same activity, the user will not be allowed to perform the activity. This will also be displayed in the box Resulting user rights.

As an alternative or as a complement to user rights groups you can per user configure User specific user rights. These work in the same way.