How to limit Access to a Service

There are several ways to limit access to a Service. We will show them to you here and explain more details.

TABLE OF CONTENTS

• Service Security
• Service Group Security
• Language
• EXAMPLE 1

All of the Options can be used separately. When multiple Options are configured we count all of them and show the Service if the User is allowed to see it depending on Service and Service Group Security and Language Setting.

Our standard Configuration is not taking care about recursive Group Membership, read our Active Directory recursive Settings for more Details

Service Security

In the Service Configuration, you must select "Security" to limit a Service to an Active Directory Group. You can choose one or multiple Groups here.

If no Active Directory Group is selected, the Service might be visible to every User.

When a Group is selected, the User needs to be a Member of that Group to see the Service.

The available Active Directory Groups can be configured in Datasources

Service Group Security

Every Service needs to be a Member of a Service Group. In the Service Group configuration, you can select one or multiple Groups to limit Acces to a Service Group.

If you limit a Service Group to an Active Directory Group, the User must be a Member of the Active Directory Group to see the Service Group at the "Start a Request" Page.

The available Active Directory Groups can be configured in Datasources

Language

Each Service and Service Group can be configured to a specific Language. Configuring a Service or a Service Group to a language will limit the access to users with the same Profile Language.

Read our How Language Settings works in au2mator for more Details

All of the above Options are included in calculation, what service or Service Group a User can see.

So when a User has access to a Service, but the Service Group is limited to an Active Directory Group, the User is not a Member of. He will not see the Service.

When a Service and the Service Group has no Security Limitation, but are configured to a specific Language. The User can only access the Services when his Profile Language matches.

EXAMPLE 1

Jasmine

   Jasmine's Profile is set to "German" and she is a Member of "AD Group B"

• Service Group 1
  • Jasmine has Access to "Service Group 1" cause the Language settings match and also limit the Security Group.
• Service 1
  • Jasmine has no Access to "Service 1" cause the Service is limited by "AD Group A" and Jasmine is not a Member of this Group.
• Service 2
  • Jasmine has Access to "Service 2" cause the Service is limited by "AD Group B" and Jasmine is a member of this AD Group.

• Service Group 2
  • Jasmine has access to "Service Group 2" cause it has no limitation
• Service 3
  • Jasmine has no access to "Service 3" cause it is limited to US Language.
• Service 4
  • Jasmine has no access to "Service 4" cause the Service is limited by "AD Group A" and Jasmine is not a  member of this AD Group.