Managing Advanced Access Privileges (Profiles & Inscribe Permissions)

Depending on the type of user, you may choose to restrict access to specific tools. Insight provides an array of configurable permissions to restrict access to specific features or tools.
By default, Insight Studio creates five profiles for each collection, tuned towards: Administrators, Editors, Catalogers, General Access, and Restricted Access users.
To create your own profiles or adjust existing profiles, use the Administrator Tools. Common tasks include changing the IP Address restrictions for a collection, changing the image view and export permissions, and adjusting the Administrator Tools user permissions.

Adjusting the IP Address Restrictions for a Collection

1. Open the Administrator Tools and connect to the Collection Manager which hosts the collection you wish to manage.

2. Go to the Collection Settings node and open the entry for the collection you wish to configure.

3. Click on the User Groups node for your collection. Each User Group must map to a user group on the User Manager – these groups function as private keys between the User Manager and Collection Manager.

4. Right-click on the User Group you wish to add the IP Restrictions to, and select Edit.

5. Specify IP Ranges (for the Insight Java Client) and Browser IP Ranges valid for the User Group. If you have multiple IP addresses or ranges, they can be separated by commas with NO space between them.

1. Press Save.

NOTE: Collection Managers refresh cached User Group and Profile settings every five minutes, so your changes, while active in the database, may take a few minutes to fully take effect.

Adjusting Profile Settings for a User in a Collection

Within Insight, profiles are mapped to User Groups in the Collection Manager, which, in turn are mapped to User Groups and users in the User Manager. (Please see Figure 33: Mapping of Permissions from the User Manager to Collection Manager on page ). Adjusting a profile will adjust permissions for one or potentially a large number of users. If you are unsure of which users are mapped to a given profile, you may want to create a new User Group. There are two steps to adjusting the profile settings for a user in a collection:

1. Adjusting the profile (or creating a new profile).

2. Mapping that Profile to a User Group.

Changing an Existing Profile or Creating a New Profile

Profiles are collection-specific groups of rights and permissions.
To change an existing profile, or create a new profile:

1. Open Administrator Tools and connect to the Collection Manager which hosts the collection you wish to manage.

2. Go to the collection Settings node and open the entry for the collection you wish to configure.

3. Click on the Profile node for your collection. On the table to the right is a list of existing profiles. Review them, and see if any of them match the set of permissions you wish to use. For a list of the Default Profiles created with a collection or Personal Collection, please see Table 16: Default Profiles for Collections and Associated Permissions and Table 17: Personal Insight Manager Default Profile Privleges on pages and . If they do, please see the next section, on mapping a profile to a User Group. If they don't, right-click on an existing profile and select add.

4. Enter the specific restrictions you want for the user, and the SPS Value for the collection (this should be the same for all profiles).

5. Press Save.

6. If Inscribe-specific permissions changes are necessary, open the "Inscribe Profile Privileges" node and adjust the settings for your profile (there's a 1:1 correlation between Profiles and Inscribe Profiles).

Mapping a User Group to a Profile

Once you have created or modified your profile, you must map it to a specific User Group in order to change the permissions for a user.
To map a Profile to a User Group

1. Open the User Groups node for your collection (located under Collection Settings).

2. Right-click the entry you want to edit and select "Edit".

3. Make your selection from the Profile pull-down.

4. Press Save.

Changing the Admin Account Permissions for a Collection

For more information on changing the Admin Account Permissions, please see Managing Administrative Users on page .

Advanced Configurations for Access & Permissions

There are many advanced settings and configurations for permissions and access in the Administrator Tools. Below is a list of the main configuration settings and where to find them in the Administrator Tools.

• WARNING: Be careful when adjusting these settings. Back up your settings before you make any changes.

Table 4: Advanced Permissions and Access Restrictions and where to control them in the Administrator Tools