Permission sets disallow rights
Hello,
I have been experimenting with permission sets and batch grant access and it works perfectly when granting access to another user.
The problem is when i need to deny someone access. I thought the replace all with function will delete the access i granted to an user but it doesn't seem it does that(it only replaces the allow rights). If i grant someone full access and after a day i want to put them back to reader i don't see another way except maunlly giving them deny on everything. Is there a better solution or am i missing something?
Best regards,
-Sebastian
All Comments (3)
Hello Sebastian,
If your goal is to have a user have specific permissions only for a certain time, I would recommend the temporary access feature. You can read more about it in our documentation here, and there is an academy video on the subject as well: https://docs.devolutions.net/rdm/user-interface/content-area/temporary-access/grant-temporary-access-without-request/
Basically, you would give the user the bare minimum permissions on your entries by default. Then, when they need access, either they would make the request (which needs approval) or you would grant them temporary access to specific entries or a folder. The temporary access feature works with the permission sets, meaning it's easy to give them a specific set of permissions in temporary fashion.
Let me know if this helps.
Regards,
Hubert Mireault
Hello Sebastian,
If your goal is to have a user have specific permissions only for a certain time, I would recommend the temporary access feature. You can read more about it in our documentation here, and there is an academy video on the subject as well: https://docs.devolutions.net/rdm/user-interface/content-area/temporary-access/grant-temporary-access-without-request/
Basically, you would give the user the bare minimum permissions on your entries by default. Then, when they need access, either they would make the request (which needs approval) or you would grant them temporary access to specific entries or a folder. The temporary access feature works with the permission sets, meaning it's easy to give them a specific set of permissions in temporary fashion.
Let me know if this helps.
Regards,
Hello @Hubert Mireault,
This helped a lot i thought the option for temporary access was missing in the Azure database.
Thank you!
Glad to hear it works well for you! Let us know if you have any other question on this flow and we'd be happy to help. I'll mark the thread as resolved.
Regards,
Hubert Mireault