Configuring custom permission sets

You can create custom global and workspace permission sets.

A custom permission set allows you to have more precise control over global and workspace permissions.

For example, you might want a workspace permission set that allows a user to configure the workspace but not run data generation. Or you might want to limit the types of workspace configuration that a user can change.

For global permissions, you might want a global permission set that allows a user to configure Tonic Structural data encryption and generator presets, but not manage Structural users.

Creating a custom permission set

To create a custom permission set:

1. On the workspace or global permission sets list, click the create permission set button.

2. On the permission set details panel, in the Permission Set Name field, type the name for the new permission set. Permission set names must be unique.

3. To base the permission set on an existing permission set, from Create from existing permission set, select the existing permission set to use. When you base the permission set on an existing permission set, Structural copies the permissions from the existing permission set to the new permission set. You can then update the selected permissions as needed. For example, you might want to create a workspace permission set that is nearly identical to the built-in Editor permission set, but that removes the option to generate data. You can base the new permission set on the Editor permission set, then remove the data generation permission. After you save the new permission set, it is not connected to the permission set that you used to obtain the initial set of permissions.

4. Select the permissions to grant to the permission set. If a permission checkbox is checked, then the permission is granted to the permission set. If a permission checkbox is not checked, then the permission is not granted to the permission set.

5. To save the new permission set, click Save.

6. For a global permission set, Structural prompts you to configure access to the new permission set. To display the access management panel for the permission set, click Manage User Access. To not manage access at that time, click Skip.

Editing an existing custom permission set

You cannot make any changes to a built-in permission set.

For a custom permission set, you can change the permission set name and adjust the assigned permissions.

To edit an existing custom permission set:

1. On the workspace or global permission sets list, click Settings.

2. On the permission set details panel, update the permission set configuration.

3. Click Save.

Deleting a custom permission set

You can delete a custom permission set. You cannot delete a built-in permission set.

You cannot delete a permission set that is assigned to any users or groups. Before you can delete the permission set, you must remove the assignment.

To delete a custom permission set:

1. On the workspace or global permission sets list, click Settings.

2. On the permission set details panel, click Delete Permission Set.

3. On the confirmation panel, click Confirm.