Ehanced Role Management

Version

Application Scenarios

Sub-admins with Personnel Management with Manage Permission can manage roles or departments and modify relevant information of roles and relevant users.

But for super admins, sometimes they want sub-admins:

1. Not to be able to perform global operations such as renaming or deleting roles.

2. To be able to add users from departments with permissions to corresponding roles.

3. Not to be able to modify the configuration of users in departments without permissions.

Installing the Plugin

Click to download the plugin: Enhanced Role Management

For details, see Plugin Management.

Functions

After installing the plugin, log in to the decision-making platform as admin, choose System Management > Permission Management > Common Permission Configuration, and you can find that Move User is added to All Roles under Personnel Management tab.

A user has the management permission of department A and the Move User permission of role X, but does not have the management permission of department B. In addition, some users in role X are from departments A and B.

Under this circumstance, you can add or remove users from department A to role X, but cannot move users from department B.

In the role Development Group, there are users from the departments Technical Support and Development Department.

Assign permissions to Minister of Technical Support, allowing Minister Alice to have the permission to add or remove users from the role Development Group to Technical Support, but not allowing her to modify the personnel configuration of the Development Department for that role.

Adding a Role

Log in to FineBI as admin, choose System Management > User Management > Role, click  to add a role, enter Development Group as Role Name, and click OK.

Click Edit User under User List, add Anna and Alice from Technical Support, and Mike and Billy from the Development Department to the role.

Enabling Hierarchical Authorization

Log in to FineBI as admin, choose System Management > Permission Management, click  to go to Global Setting interface, enable Hierarchical Authorization, and click Save.

Assigning Personnel Management Permission

Log in to FineBI as admin, choose System Management > Permission Management > Common Permission Configuration, and select the permission carrier Dept, Role or users.

Take Minister in Technical Support as an example. Select Personnel Management tab.

1. Configure management permission of Technical Support for the Minister.

2. Configure Move User permission of Development Group for the Minister.

Assigning System Management Permission

Log in to FineBI as admin, choose System Management > Permission Management > Common Permission Configuration, and select the permission carrier Dept, Role or users.

Take Minister in Technical Support as an example. Select System Management tab and configure the using permission of User Management for the Minister.

Demonstration

Alice (Alice, 1), the Minister of Technical Support, logs in to FineBI and chooses System Management > User Management > Role.

1. In the User List of Development Group, only users Anna and Alice are visible, who come from authorized Technical Support. However, users Mike and Billy are invisible because they are from Development Department without permissions.

2. When editing users in the role, only users from authorized Technical Support can be added or removed, while users from other unauthorized departments cannot be added or deleted.

3. Operations such as renaming or removing roles are not supported

When you disable or delete the plugin, configured Move User permission will be lost. When you disable the plugin, the system will prompt: Disabling the plugin will affect the configured user movement permissions. Are you sure to disable it?

When you re-enable or reinstall the plugin, the configured Move User permission will be lost, so you need to be cautious about relevant operations.