Info |
---|
TeamForm has defined user access groups, which provide control access to parts of the application. TeamForm has additional user-based access controls which enable further use level behaviourcustomisation to grant specific usages or behaviours. User access groups are typically defined via SSO groups, these can be created new or re-used if there already are already access groups that cover the intended population. |
TeamForm Access Groups
The below Groups are to be created on the customer Identity and Access Control Provider (IACP). Once setup the access groups can mapped into TeamForm to provide synchronised access and control.
Access Groups | Directory User | Power User | Reporting User | Admin | TeamForm Support |
---|---|---|---|---|---|
Typically given to | All team members | Leaders of teams, to enable team and work planning | Analyst / reporting, some leadership roles, admin roles | TeamForm Admins | Typically reserved for TeamForm Support |
| |||||
Directory View |
|
|
|
|
|
TeamForm App |
|
|
|
| |
TeamForm Reporting |
|
|
| ||
Admin Controls |
|
| |||
Dev Tools |
| ||||
|
Workspaces
View default workspace only (unless access to other workspaces granted via settings → workspace access)
View default and other workspaces via workspace switcher.
Workspace management.
Workspace Config.
Directory |
| All from Directory Users and:
| |||
Tags |
|
Edit tags in directory.
Only for tags which type has edit enabled via tag config.
|
|
|
| |||||
Workspaces |
|
| |||
| |||||
Planner | No access |
| |||
Forecast | |||||
Team Builder | |||||
People Allocation | |||||
Reporting | No access |
| |||
| |||||
Settings | No access |
No access
No access
|
| ||
Dev Tools | No access |
|
User Home
A user can be shown a personalised landing page in both App & Team Directory.
TeamForm needs to be able to link a user’s auth0 account to person data stored in the teamform-api
backend. The mechanism for this is email address matching.
A user’s email address needs to come in as an attribute with a type of id
to be used for this purpose. The easiest way to achieve this is to run an import with this column header, where each row contains the email address of the person: Attributes:id:email:Email
...
|
...
Troubleshooting
ensure the person data returned from the backend has the id attribute. The easiest way is to use
devtools
on Chrome or Firefox and inspect the person -> attributes payload on the network tab.Seek TeamForm support to ensure the user’s email in TeamForm’s authentication platform (auth0) matches that loaded into TeamForm from the people or HR information system.
The feature can be tested by performing an import that has your own email address as an attribute, and then visiting Team Directory or App.
Further restrictions you can apply
...
Related information
Filter by label (Content by label) | ||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
...