Skip to main content
Kofax

Priority given to conficting permissions between User Profile and Group Profile

3004

QAID # 3004 Published 

Question / Problem:

Within User Profiles, which has higher priority: User Rights or Group Rights?

Answer / Solution:

User Profile Rights are inclusive, meaning: Users inherit whichever rights are least restrictive.

Example 1
If the user does not have access to the Scan queue, but the group to which he belongs has rights to the Scan queue, then the user inherits the greater rights of the group.
Example 2
If the user has access to the Scan queue, but the group to which he belongs does not have rights to the Scan queue, then the user retains the greater rights of his user profile.
Example 3
If the user does not have access to any queues, and he belongs to multiple groups, the user inherits the greater rights of each group.

Each of the examples also apply to Batch Classes, and the Allow Administration module access, Allow admin utility usage, and Allow batch editing in Validation and Verification options.

Applies to:

Product Version
CAPTURE 10.0
  10.1
  10.2
  11.0