Overview
Version
| FineBI Version | Enhanced Version of the Role Management Plugin |
|---|---|
6.0 | V 1.0 |
Application Scenarios
Sub-admins with Personnel Management with Manage Permission can manage roles or departments and modify relevant information of roles and relevant users.
But for super admins, sometimes they want sub-admins:
1. Not to be able to perform global operations such as renaming or deleting roles.
2. To be able to add users from departments with permissions to corresponding roles.
3. Not to be able to modify the configuration of users in departments without permissions.
Plugin Introduction
Installing the Plugin
Click to download the plugin: Enhanced Role Management
For details, see Plugin Management.
Functions
After installing the plugin, log in to the decision-making platform as admin, choose System Management > Permission Management > Common Permission Configuration, and you can find that Move User is added to All Roles under Personnel Management tab.
A user has the management permission of department A and the Move User permission of role X, but does not have the management permission of department B. In addition, some users in role X are from departments A and B.
Under this circumstance, you can add or remove users from department A to role X, but cannot move users from department B.
Example
In the role Development Group, there are users from the departments Technical Support and Development Department.
Assign permissions to Minister of Technical Support, allowing Minister Alice to have the permission to add or remove users from the role Development Group to Technical Support, but not allowing her to modify the personnel configuration of the Development Department for that role.
Adding a Role
Log in to FineBI as admin, choose System Management > User Management > Role, click to add a role, enter Development Group as Role Name, and click OK.
Click Edit User under User List, add Anna and Alice from Technical Support, and Mike and Billy from the Development Department to the role.
Enabling Hierarchical Authorization
Log in to FineBI as admin, choose System Management > Permission Management, click to go to Global Setting interface, enable Hierarchical Authorization, and click Save.
Assigning Personnel Management Permission
Log in to FineBI as admin, choose System Management > Permission Management > Common Permission Configuration, and select the permission carrier Dept, Role or users.
Take Minister in Technical Support as an example. Select Personnel Management tab.
1. Configure management permission of Technical Support for the Minister.
2. Configure Move User permission of Development Group for the Minister.
Assigning System Management Permission
Log in to FineBI as admin, choose System Management > Permission Management > Common Permission Configuration, and select the permission carrier Dept, Role or users.
Take Minister in Technical Support as an example. Select System Management tab and configure the using permission of User Management for the Minister.
Demonstration
Alice (Alice, 1), the Minister of Technical Support, logs in to FineBI and chooses System Management > User Management > Role.
1. In the User List of Development Group, only users Anna and Alice are visible, who come from authorized Technical Support. However, users Mike and Billy are invisible because they are from Development Department without permissions.
2. When editing users in the role, only users from authorized Technical Support can be added or removed, while users from other unauthorized departments cannot be added or deleted.
3. Operations such as renaming or removing roles are not supported
Notes
When you disable or delete the plugin, configured Move User permission will be lost. When you disable the plugin, the system will prompt: Disabling the plugin will affect the configured user movement permissions. Are you sure to disable it?
When you re-enable or reinstall the plugin, the configured Move User permission will be lost, so you need to be cautious about relevant operations.
