User Group Permissions (2024)

User Group Permissions

Note: Users that belong to the OPERA Supervisor group, are NOT allowed to have permissions granted or revoked.

The User Group Permissions screen allows you to assign or revoke permission belonging to user groups and to "embed" user groups (along with associated permissions) into other user groups. When users are associated with a user group, they "inherit" the permissions of the user group. If additional permissions are required for the user at a specific property, they can be granted beyond the ones already granted from the user group.

To grant/revoke permissions belonging to the user group, users must have the Setup Config > Grant Revoke Permission. The application parameter General > Grant Individual Permissions can be either active for inactive for assigning permissions to User Groups.

Workflow Overview

To assign permissions to user groups, select Configuration > Setup > User Configuration > User Groups.

From the User Groups screen highlight a group and select the Permissions button. The User Group Permissions screen appears. The name of the user group you highlighted on the User Groups screen appears in blue text at the top of the User Group Permissions screen.

To grant/revoke permissions using the User Group Permissions screen, a user must have the Setup Config > Grant Revoke Permission. The user can only grant/revoke permissions for user groups that they belong to. For example, a user is assigned permissions for the Catering group only and is then given permission to grant permissions. The user will be allowed to assign permissions for the Catering user group only and not for any other user group.
The functionality of the screen is similar whether you are assigning permissions to user groups or to users; however, this topic will address only the assignment of permissions to user groups. For further details on assigning permissions to users, see User Permissions.
If the MHOT_OPP Multi-Property add-on license is active, the Property field defaults to the user's logged-in property. By selecting the down arrow, a single select list of values is displayed that allows you to choose another property where you want to work with user group permissions. Permissions that are configured for the current user group can be assigned to other properties using this feature.
The User Group Permissions screen is split into a Non-Granted side (on the left) and a Granted side (on the right). On the Non-Granted side, you can see all the user groups to which the current user group does not belong, and all the individual permissions, by permission group, that are not granted to the current user group.
On the Granted side, you can see all the user groups to which the current user group belongs, along with the user group's permissions, by permission group.
On both sides, user groups can be expanded in Explorer tree-fashion to display their permission groups by clicking on the plus sign next to the user group name. Similarly, permission groups can be expanded to show the individual permissions each includes.

Buttons

Grant. The Grant button moves user groups, permission groups or single permissions from the non-granted side of the screen (left) to the granted side (right). See Granting Permissions, below, for details.

Revoke. The Revoke button moves user groups, permission groups or single permissions from the granted side of the screen (right) to the non-granted side (left). See Revoking Permissions, below, for details.

Group Grant. Select the Group Grant button to grant single permission to multiple other user groups and properties at once. See Group Grant, below, for details.

Grantees. Highlight a user group and select this button to see any other user groups that are embedded in that user group. Or highlight an individual permission and select the Grantees button to see which users and user groups have been granted that permission.

Find. Display the Find Permission box to locate specific permissions starting from the highlighted user group or permission group. Enter all or the first part of the permission name or its description in the Find Permission/Description field and select Find Next. Once a match is found, you can repeatedly select Find Next to continue to step through the permission groups to locate additional matches.

Granting Permissions

To add a user group to another user group, thereby granting the user all permissions that belong to the group, click on the group displayed in the upper left-hand panel and select the Grant button (right-arrow). Or, you can double-click on the group.

To grant the user permissions for an entire permission group to a user group, click on the permission group in the lower left-hand panel and select the Grant button. Or, you can double click on the permission group. Permission groups can be expanded in order to grant specific permissions from the permission group using either the arrow method or the double-click method.

By selecting a user group or an individual permission and choosing the Grantees button, a screen displays which users and/or user groups have been granted that permission (if a permission is highlighted) or which users belong to that group (if a user group is highlighted).

Group Grant

To grant a single permission or a group of permissions to several user groups at once, highlight the permission or permission group on the left side of the screen and select the Group Grant button (right arrow). The Copy Permissions screen appears.

This screen allows you to copy permissions to selected user groups. If the MHOT_OPP Multi-Property add-on license is active, you can also copy permissions to other properties.

(To copy permissions between user groups and/or between properties, the Copy button is used. See Copying Permissions Between User Groups and Between Properties, below.)

Provide the following information, then select the OK button to copy permissions.

Permission. Read only. The permission group or permissions you are copying.

Revoking Permissions

Revoking permissions is handled by highlighting user groups, permission groups, and permissions on the right side of the screen and moving them to the left side of the screen by using the Revoke button (left arrow).

Copying Permissions Between User Groups and Between Properties

To copy permissions between user groups and/or between properties (when the OPP_MHOT Multi-Property add-on license is active) select the Copy button. The Copy Permissions screen appears.

Provide the following information to copy permissions and select the OK button.

Copy to Another Group. Select to copy the permissions to another user group or multiple user groups.

Copy to Property. Select to copy permissions to another property or multiple properties.

From Group. Select the user group from which the permissions will be copied. By default, the user group identified at the top of the User Group Permissions screen appears here. You can change this user group or add other user groups.

To Group. Select the group to copy the permissions to. Not available when Copy To Properties is selected.

From Property. Select all of the properties to copy permissions from. By default the login property appears here. You can change this property or add other properties.

To Property. Select all of the properties to copy the permissions to.