Configuring custom global permission sets

Required license: Enterprise

Required global permission: Create and manage custom permission sets

Custom permission sets are not supported on Structural Cloud.

You can create custom global permission sets.

A custom permission set allows you to have more precise control over global permissions.

For example, you might want a global permission set that allows a user to configure Tonic Structural data encryption and generator presets, but not manage Structural users.

Creating a custom global permission set

To create a custom global permission set:

Permission set details panel for a new custom permission set

1. On the global permission sets list, click Create Global Permission Set.
2. On the permission set details panel, in the Permission Set Name field, type the name for the new permission set. Permission set names must be unique.
3. To base the permission set on an existing permission set, from Create from existing permission set, select the existing permission set to use. When you base the permission set on an existing permission set, Structural copies the permissions from the existing permission set to the new permission set. You can then update the selected permissions as needed. For example, you might want to create a global permission set that is nearly identical to the built-in Admin permission set, but that removes the option to manage users. You can base the new permission set on the Admin permission set, then remove the user management permission. After you save the new permission set, it is not connected to the permission set that you used to obtain the initial set of permissions.
4. Select the permissions to grant to the permission set. If a permission checkbox is checked, then the permission is granted to the permission set. If a permission checkbox is not checked, then the permission is not granted to the permission set.
5. To save the new permission set, click Save.
6. Structural prompts you to configure access to the new permission set. To display the access management panel for the permission set, click Manage User Access. To not manage access at that time, click Skip.

Editing a custom global permission set

You cannot make any changes to a built-in permission set.

For a custom permission set, you can change the permission set name and adjust the assigned permissions.

To edit an existing custom permission set:

1. On the global permission sets list, click Settings.
2. On the permission set details panel, update the permission set configuration.
3. Click Save.

Deleting a custom global permission set

You can delete a custom permission set. You cannot delete a built-in permission set.

You cannot delete a permission set that is assigned to any users or groups. Before you can delete the permission set, you must remove the assignment.

To delete a custom permission set:

Delete Permission Set option for a custom permission set

1. On the global permission sets list, click Settings.
2. On the permission set details panel, click Delete Permission Set.
3. On the confirmation panel, click Confirm.