Setting instance permissions

Permissions can be set based on the features using the Features tab or by using the granular settings on the Object Security tab, Tab Visibility tab, or Admin Operations tab.

Edit instance permission settings from the Instance Details tab. Access Admin security with the following steps:

1. Click the Relativity logo in the upper left corner or navigate to Home with the user drop-down menu.
2. Navigate to Instance Details.
3. Click Manage Permissions.
4. Click Edit Permissions next to the group whose permissions you want to manage.
5. Modify the settings on the tabs as needed. Refer to the Features tab, Object Security tab, Tab Visibility tab, or Admin Operations tab sections for specific information of each tab.
6. Click Revert All if you need to undo all your unsaved toggle key changes. The features will return to their original toggle key settings.
7. Click Review and Save after modifying settings.
8. Review the unsaved changes displayed on the Review Permissions Changes modal.

• Features changes—lists the features that were changed and how they were changed. Changes at the granular level may affect the status of the feature setting, so review this information carefully.
• Granular permissions changes—lists the changes made at the granular permissions level, including those resulting from feature changes or direct edits at the granular permission level.

9. Click Save to finalize the changes.

From here you can edit the admin permissions of groups.

Groups Management tab

The Group Management tab displays all groups that have admin security privileges.

In the Group Management tab you can view all users in a group, edit the permissions of any group, transfer a group's permissions to another group, or preview a group's current permission settings. The Group Management tab displays all groups that have Admin Security access in Relativity. The following actions are available for groups added to a workspace other than system admins:

• View Users—displays a list of users in a group.
• Edit Permissions—opens the Object Security tab for editing the admin permissions of a group.
• Copy—opens a list of groups whose permission settings you can transfer to the group. Click Copy Permissions at the bottom of the list to complete the transfer.
  
• Preview—preview currently applied security settings for a group. See Preview Security for more information.
• Add/Remove Groups—opens the Add/Remove Groups dialog to grant admin access to groups. See Add/Remove Groups for more information.

Note: A system admin is the only user able to grant other users membership into the System Administrators group. Any user who is not a member of the System Administrators group is unable to add themselves to any group.

Add/Remove Groups

Click the Add/Remove Groups button on the Group Management tab of the Admin Security window to access the Add/Remove Groups window. The Group Management page displays all groups that exist in your Relativity environment.

The Add/Remove Groups window displays the following lists:

• Available Groups—lists groups in your Relativity environment not yet granted access to the workspace.
• Groups with Admin Permissions—lists groups granted access to admin permissions.

You must add a group to the Groups with Admin Permissions column to grant the group admin security privileges.

Adding groups to the Groups with Admin Permissions column

To add admin permissions to a group, follow these steps:

1. Navigate to Instance Details.
2. Click Manage Permissions.
3. Click Add/Remove Groups.
4. Scroll through the Available Groups list or search for a specific group using the search bar.
5. Select one or more groups from the Available Groups list in any order.
6. Click Add.
7. Click Save.

Removing groups from the Groups with Admin Permissions column

To remove admin permissions from a group, follow these steps:

1. Navigate to Instance Details.
2. Click Manage Permissions.
3. Click Add/Remove Groups.
4. Scroll through the Groups with Admin Permissions list or search for a specific group using the search bar.
5. Select one or more groups from the Groups with Admin Permissions list in any order.
6. Click Remove.
7. Click Save.

Features tab

You can set permissions based on features in the system using the Features tab. Rather than managing specific permissions by navigating through the three tabs (Object Security, Tab Visibility, Admin Operations) individually, permissions can be set based on features in the system using the Features tab. Examples of features include Preservation, Production, and Imaging.

Each feature listed consists of a collection of the required permissions for that feature from the other three tabs. Once you enable a feature, its associated permissions are automatically enabled.

Note: Adjusting the settings for individual permissions requires accessing their respective source tabs (Object Security, Tab Visibility, Admin Operations). Editing them from the Features tab is not possible.

Setting permissions at the feature level is intuitive and simplifies the management of permissions within Relativity. With one click, the necessary permissions can be enabled or disabled for a particular feature.

Considerations

Keep these factors in mind when setting Feature permissions:

• Granular permission settings on the Object Security, Tab Visibility, and Admin Operations tabs are the primary source of truth and propagate to features listed on the Features tab. Changes to these permissions from those tabs will also update in the corresponding features.

• Changing a specific permission under the Object Security, Tab Visibility, and Admin Operations tab associated with an enabled feature will result in the feature being disabled.

• Disabling a feature on the Features tab disables its associated granular permissions for that feature. However, if a granular feature is part of another enabled feature, then it will remain enabled (blue check mark) on the disabled feature’s See Details panel.

• Disabling a feature revokes access to all granular permissions associated with the feature that are not currently granted as part of a different enabled feature. Therefore, enabling and then disabling a feature will not necessarily return the group to the state it was previously in. Be sure to examine the Review Permissions Changes dialog to confirm all permissions changes are as expected.

Using the Features tab

The Features tab displays a list of features currently available for the selected group in the instance. Click the toggle key next to one or more features to enable or disable them. You can also do the following from here:

• Use the Search bar to locate a particular permission in the list.
• Click See Details to view the list of granular permissions associated with this feature and their settings. They are propagated from the Object Security, Tab Visibility, and Admin Operations tabs. To collapse the details panel, click the double arrow button. The panel includes:
  • Ability to enable or disable the feature’s toggle key from here in addition to doing so from the main Features dialog.
  • Current state of each granular permission for the feature. A blue check mark indicates the selected group has permission to use this feature (enabled). A red circle with a slash indicates the selected group does not have permission to use it (disabled). The state permissions may change based on the toggle key setting.

Frequently asked questions

Object Security tab

With the Object Security tab you can grant admin permissions to Relativity objects.

You can apply the following group permission settings to any Relativity object in the Object Security window:

• None —denies users access to the object.
• View —view the object. This is the lowest level object permission.
• Edit —edit and view the object.
• Delete —delete, edit, and view the object.
• Add —add new objects. This icon turns blue when the setting is unsaved; once you click Save, the blue icon becomes grey. This icon turns green when you give users this permission both when the setting is unsaved and saved.
• Edit Security —grants users the ability to edit the security of objects. This icon turns blue if you click twice indicating a not applicable status.

See Object list for a complete list of objects and the impact of each assignable security permission.

Tab Visibility tab

With the Tab Visibility tab you can grant a group permission to view admin tabs.

You must grant tab visibility independent of permission settings for users in a group to access a permitted tab. You can make any tab visible by selecting the checkbox in the list. To make all sub tabs visible, click on the parent tab and click Select all (#).

Note: Do not use tab visibility as a sole method of preventing security permissions.

Admin Operations tab

With the Admin Operations tab you can grant admin action permissions to particular groups. See Admin Operations tab for a complete list of actions you can grant through this tab.

Note: For more scenario examples, see Permissions scenarios