Policy Groups: Difference between revisions

From external.wiki.duke.edu
Jump to navigation Jump to search
(Added an example)
(update policy groups page to reflect the new farm version that creates managers- and members- and puts the requester in both of them)
 
Line 1: Line 1:
[https://groups.oit.duke.edu/groupmanager/dukeGroups/about Policy groups] are a special type of [https://groups.oit.duke.edu/groupmanager/ group manager] group.
[https://groups.oit.duke.edu/groupmanager/dukeGroups/about Policy groups] are a special type of [https://groups.oit.duke.edu/groupmanager/ group manager] group.
*They are organized under an umbrella [https://groups.oit.duke.edu/groupmanager/dukeGroups/policyGroups/duke-wiki policy space]
 
*Each new wiki is gets a policy group owned by a support group, which controls access to the wiki membership
'requester' refers to the netid of the person who filled out the qualtrics form to request a wiki.
*Only members of the policy group may edit the wiki space, which means that users will need to be added to the policy group
*Policy groups are organized under an umbrella [https://groups.oit.duke.edu/groupmanager/dukeGroups/policyGroups/duke-wiki policy space]
*A member of the support group needs to find the wiki's specific policy group in the [https://groups.oit.duke.edu/groupmanager/dukeGroups/policyGroups/duke-wiki duke-wiki policy space] and click on it. The name of the policy group is in the space is the words 'Wiki for' followed by the first bit of the wiki's address, before <code class="mwt-code">wiki.duke.edu</code>
*Each new wiki is gets two policy groups visible in the [https://groups.oit.duke.edu/groupmanager/dukeGroups/policyGroups/duke-wiki umbrella policy space].<code>$wikiname-members</code> lists access to the wiki membership, and can only be modified by members of <code>$wikiname-managers.</code>
**Then they will be able to add members to the group
*The requester is automatically a member of the both the wiki-members group and the wiki-managers group, which means they can:
**Nobody is automatically a member of a policy group, including the owners of that policy group
**edit the wiki and
*Only IT staff are members of [https://groups.oit.duke.edu/groupmanager/dukeGroups/supportGroups support groups] and will have to update the membership at least once
**control membership of the members wiki policy group and
**If the owner of the space wants, they can add a regular [https://groups.oit.duke.edu/groupmanager/myGroups/viewCreateGroup ad-hoc group-manager group] to the membership of the policy group, and then whoever has rights to that can control the membership of the wiki space
**control the list of who can control the membership group
**For example:  If Danny is in the support group, he can add duke:group-manager:roles:duke-ucem-wiki-profiles to the policy group as a member, then Ed can control the membership of that group without having to bother Danny.
*Only members of the members policy group may edit (and read, if you picked 'private') the wiki space, which means that users will need to be added to the members policy group.
**If a new user wants to edit the wiki space, the add them to the wiki-members group
**If a user wants to control who edits the wiki space, add their netid to the wiki-managers group
*If the manager of the space wants, they can add a regular [https://groups.oit.duke.edu/groupmanager/myGroups/viewCreateGroup ad-hoc group-manager group] to the membership of the wiki-manager policy group, and then whoever has rights to that can control the membership of the wiki space.
*''For example'':  If Danny is in the wiki-managers group, he can add <code>duke:group-manager:roles:duke-my-wiki-profiles</code> to the managing policy group as a member, then members of that ad-hoc group, Ed and Susan, can control the membership of that group without having to bother Danny.
*NB: only users in the wiki-membership can edit/read the wiki, being in wiki-managers does not grant access to the wiki.

Latest revision as of 10:57, 13 July 2023

Policy groups are a special type of group manager group.

'requester' refers to the netid of the person who filled out the qualtrics form to request a wiki.

  • Policy groups are organized under an umbrella policy space
  • Each new wiki is gets two policy groups visible in the umbrella policy space.$wikiname-members lists access to the wiki membership, and can only be modified by members of $wikiname-managers.
  • The requester is automatically a member of the both the wiki-members group and the wiki-managers group, which means they can:
    • edit the wiki and
    • control membership of the members wiki policy group and
    • control the list of who can control the membership group
  • Only members of the members policy group may edit (and read, if you picked 'private') the wiki space, which means that users will need to be added to the members policy group.
    • If a new user wants to edit the wiki space, the add them to the wiki-members group
    • If a user wants to control who edits the wiki space, add their netid to the wiki-managers group
  • If the manager of the space wants, they can add a regular ad-hoc group-manager group to the membership of the wiki-manager policy group, and then whoever has rights to that can control the membership of the wiki space.
  • For example: If Danny is in the wiki-managers group, he can add duke:group-manager:roles:duke-my-wiki-profiles to the managing policy group as a member, then members of that ad-hoc group, Ed and Susan, can control the membership of that group without having to bother Danny.
  • NB: only users in the wiki-membership can edit/read the wiki, being in wiki-managers does not grant access to the wiki.