Organizational Units
Managing organizational units
Delegation trees can be created and organized so as to allow different levels of delegated administration.
For instance, you can set up delegations:
By geographic area:
- Root
- Americas
- Americas/North/Canada
- Americas/North/Canada
- Americas/North/Alaska
- Americas/Pacific
- Americas/Pacific/Hawaï
- Americas/North/Canada
- Europe
- Europe/France
- Europe/Italy
- Europe/UK
- Europe/UK/England
- Europe/UK/Scotland
- Americas
Or according to the company's structure:
- Root
- IT
- IT/Technical
- IT/Support
- Administration
- Administration/Managers
- Administration/Assistants
- Administration/Sales&Marketing
- Administration/Sales&Marketing/Sales
- Administration/Sales&Marketing/Marketing
- Production
- Production/Management
- Production/Technical
- IT
In these two examples, administrators and target populations can be set for each delegation level.
Root
The "Root" unit is the parent of all other units. It is the BlueMind domain: it cannot be deleted and enables you to grant rights for the whole domain. All users belong to this organisational unit by default.
The Root unit incorporates additional rights relative to other delegations (for data that cannot be divided and applies to the whole domain: system configuration, server management, applications to assign to users, etc.)
Access to the admin console
The Root includes the Admin Console right which must be enabled for a user you want to grant rights over an organisational unit to. This isn't enabled automatically.
Creation
- Click the "Create Organizational Unit" button to open a creation window:
- Enter the name for organizational unit you want to create and, if appropriate, a parent to create a new tree branch.
- Click "Create" to apply.
Deletion
In the Organizational Units page:
- Select the unit(s) you want to delete by checking the appropriate box(es)
- Click the "Delete" button at the top of the list
- Confirm
Assigning a member to a delegation
By default, a user always is a member of the Root organizational unit. For a user to be a member of a child organizational unit, go to the user's administration page:
in the General tab, fill in the "Member of delegation" field using autocomplete which suggests existing units:
Save to apply the changes.
A user can be a member of one delegation only.
Delegating administration rights
Administrators may only assign or withdraw roles they themselves have.
Administration and membership
An administrator does not need to be a member of an organizational unit to administer it.
To a user
To assign a unit's administration rights to a user, go the user's administration page, and in the "General" tab, go to the "Roles" section:
This section shows:
- Top: the rights assigned to the user for each organizational unit – as text
- Left hand side (gray background): the list of organizational units concerned.
- Right hand side: the rights for the unit currently selected in the list.
The rights inherited from a parent organizational unit or a group are grayed out, they can be deleted for this organizational unit only.
What are roles and what does each of them do?
For more details on roles, go to the dedicated page: Roles: Access and Administration Rights
To add administration rights for an organizational unit that isn't included in the list:
- Click the button at the top of the section and search for the unit using autocomplete:
- Select the unit and confirm
- The organizational unit is then added to the list of delegations:
- Check the appropriate rights (they are added to the text list at the top as you check them):
Save to apply the changes.
To a group
To assign rights to a group of users, go to the group's management page > Roles tab:
The rights assigned here will be applied to all group members and throughout the domain they belong to.
In individual users' pages, the roles they are assigned via a group are then checked and grayed out – they cannot be unchecked individually. Users who belong to a group automatically enjoy all the rights assigned to that group.
What are roles and what does of them each do?
For more details on roles, go to the dedicated page: Roles: Access and Administration Rights