Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Anchor
PermissionsTop
PermissionsTop

Excerpt

The Permissions Manager tool lets users request permission to drives on the Research Data Storage

...

systems. Instead of users emailing various folder

...

authorizers and having the email possibly get lost or deleted, Permissions Manager takes care of everything. All a user has to do is go through a few simple steps to submit a request and they will be properly routed for approval.

...


»To make a permission request for RDS6

...

 please visit https://bmirdsdp/dp or https://bmirdsdp.chmccorp.cchmc.org - this will only work while on the

...

CCHMC network on-site or connected to the VPN (RES or CORP VPN).

»To make a permission request for BMIISI on

...

Research Isilon storage please visit https://dp.research.cchmc.org - this link will only work while on the CCHMC network

...

on-site or or connected to the VPN (RES or CORP VPN).

Warning
title

...

Browser Compatibility

...

Please use Firefox or Chrome to access the

...

Permissions Manager. Safari and Edge have been known to have problems with this application.

Tip
titleBrowser Security Error

If you see a browser security error when trying to access the Permissions Manager, please follow the instructions here to resolve the error: Fix Security Error for Permissions Manager.

Tip

Download a PDF copy of this document:
RESITHUB-ManagingFolderPermissions-050523-1338-51.pdf

Table of Contents

Anchor
AddFolder
AddFolder
Request a Folder be Added to Permissions Manager

To request a folder to be added to Permissions Manager, send the following information to help-rds@bmi.cchmc.org:

...

  • Full path of folder to be protected (ex.\\rds6.chmccorp.cchmc.org\Cardio-S\Documents\Carla).
  • The names of at least 2 authorizers who will manage access to the protected folder.

Here is the home screen of the Permissions Manager:

image001.jpgImage Removed

...

After the folder has been protected, it will become available in Permissions Manager. Access to a protected folder must be requested via Permissions Manager. Instructions on how submit this request are detailed below in the section: Submitting Permission Requests.

Permissions Manager Home Screen

Screenshot-DataStorage-PermMgr-HomeImage Added

  1. Summary - Shows a list of all recent pending, approved, declined, or cancelled requests.

...

  1. Permission Requests - Allows

...

  1. a

...

  1. user to request or revoke permission to a folder or network drive.
  2. Membership Requests - Ignore this tab (for advanced users).

...

  1. Search My Requests - Allows for a search of any type of request, operation made on a permissions request, user, start or end date, or request ID.

...

About Drives and Managed Folders

There are two types of RDS drives, each of which can contain folders and sub folders.

All users can share data by uploading it to their (G:) drive, or divisional shared drive (ex. "Cardio-S" or "Psychology-S"). By default, data added to a divisional shared drive can be viewed and modified by anyone in your division. However, you can request that a folder be locked down so that data inside is shared only with select users.

If you need to share a large volume of data over a lengthy period of time -- for example, files related to a research lab or study -- it is better to store this data on a project drive. This is an area separate from your divisional shared (G:) drive, and can be shared among multiple users via the Permissions Manager tool.

Requesting

...

A New Drive

You should automatically have access to your divisional shared (G:) drive. If the drive doesn't appear automatically when you log in to the Cincinnati Children's network, please send contact your Business

...

/Admin Office.

To request a new project drive, you will need to go to BeMyIT Store, login with your CCHMC credentials, and submit a new request for an RDS drive. Instructions on using the BeMyIT Store are here: BeMyIT Store.

Also, if you add a new folder to your divisional shared or project drive, this folder does NOT automatically appear in the Permissions Manager.

...

It will have the same protections as the parent divisional drive or project drive. To protect this folder seperately, you need to send an email to help-rds@bmi.cchmc.org asking that it be protected, with

...

the full path of the folder to be protected, and the names of at least 2 authorizers who will manage access to

...

the protected folder.

Renaming

...

Folders

A protected folder will list in Permissions Manager.

...

If it is necessary to rename it, you must email help-rds@bmi.cchmc.org before renaming or

...

the permissions might not transfer properly.

Copying

...

Data from

...

Protected Folders and

...

Drives

A protected folder has its own set of permissions.

...

When moving data from a protected folder, you must copy & paste instead of drag & drop.

...

Drag

...

& drop will likely result in the permissions not transferring properly, resulting in access denied errors.

...

After pasting data in the new folder, the copied data can be deleted from the original folder.

Submitting

...

Permission Requests

There are two different types of user roles in Permissions Manager

...

:

  • Requestor: Can request access to any folder.
  • Authorizer: Can grant or revoke requests to gain access to a locked folder for which he/she is the approver. 

If you would like to request access for yourself or for another user to any folder maintained by the Permissions Manager, you first need to click on the Permission Requests tab on the left side of the screen

...

:

...

Screenshot-DataStorage-PermMgr-PermRequestsImage Added
Once the page loads, you will be taken to the request screen.

Step 1: Select a User

By default, you will be the user that is requesting permissions to access a folder. If you are trying to gain access for yourself then continue to Step 2.

  1. If requesting permissions for a user other than yourself, click the Change

...

  1. Users button

...

  1. :

...

  1. Screenshot-DataStorage-PermMgr-PermRequests-1UsersImage Added

  2. The Select Users

...

  1. window will appear and you can search for the user for whom you wish to request permissions.

...

3.jpgImage Removed

  1. In the empty Search textbox, enter the user’s name as "last name, first name

...

  1. ".

...

  1. If you are not sure of the spelling of the names, then type

...

  1. just a few letters of the last name

...

  1. :
    Screenshot-DataStorage-PermMgr-PermRequests-1UsersSelectImage Added

  2. If a list of multiple users is displayed, then check the corresponding Department

...

There are additional ways to search for a user.  These search options are listed below:

Click in the box labeled Name, and select Logon Name

4.jpgImage Removed

  1. or Logon Name listed for the user. If you know the Logon Name (Network ID at Cincinnati Children’s) of the user, then

...

  1. click

...

  1. in the box labeled

...

5.jpgImage Removed

...

  1.  Name, select Logon Name and enter the network ID in the blank textbox.
    Screenshot-DataStorage-PermMgr-PermRequests-1UsersSelectNameImage Added


  1. Once the user is found, click on their name in the Display Name column and that is the user for whom you will be requesting permissions. Then click the Update button to close the Select Users window and proceed to Step 2.

Anchor
StepFolders
StepFolders
Step 2: Folders

  1. Here is where you select the folder to which you wish to give the user access. Click

...

  1. the Browse

...

  1. button:

...

  1. Screenshot-DataStorage-PermMgr-PermRequests-2FoldersImage Added

  2. The Select Folders window will appear

...

  1. :

...

  1. Screenshot-DataStorage-PermMgr-PermRequests-2FoldersSelectImage Added

  2. If you know the exact name of the path of the folder you can type it in the

...

  1. Search field at the top of the window

...

  1. :

...

  1. Screenshot-DataStorage-PermMgr-PermRequests-2FoldersSelectSearchImage Added

  2. Otherwise, look through the

...

  1. list of available drives until you find the drive you desire. Once it is found, click on

...

  1. the +

...

  1.  next to the name.

...

9.jpgImage Removed

  1. This will expand the drive and show all the sub folders of that drive.

...

Note

  1. If you

...

  1. want to collapse the drive you can click

...

  1. the -

...

  1.  next to the name and it will go back to the way it was.

...

  1. Sort through the folders until the desired folder is found.

...

10.jpgImage Removed

...

  1.  Select the checkbox next to the name of the folder and click

...

  1. the OK button at the bottom of the window.

...

Note

  1. You can also select multiple folders by clicking multiple checkboxes.

    Note
    titleNote

    If you know a sub folder exists but it is not listed, it probably has not been added to Permissions Manager as a managed folder. Learn more about how to request that folder to be added at the top of this page.


    Screenshot-DataStorage-PermMgr-PermRequests-2FoldersSelectExpandImage Added


  2. The path for the selected folder(s) will be added to the textbox.

...

11.jpgImage Removed

...

  1.  Click the Add button and the

...

  1. folder(s) will be moved to the

...

  1. Operations Step:
    Screenshot-DataStorage-PermMgr-PermRequests-2FoldersAddImage Added

Step 3: Operations

...

This field shows each folder you are trying to give permissions to. The available operations are shown and in this case it

...

is Grant Access

...

 since we are trying to gain access to

...

the Project B folder. The type of permission is also listed which

...

is Read Write, which allows the user to open, as well as edit, any file in that folder.

...

Note

...

Read Only is also available under the type of permission:
Screenshot-DataStorage-PermMgr-PermRequests-3OperationsPermImage Added

If a user already has permission to a folder and you would like to revoke their permission, follow the same steps up to this point. Under Available Operations it will instead say Revoke Access

...

:

...

Screenshot-DataStorage-PermMgr-PermRequests-3OperationsRevokeImage Added

If you wish to remove a folder from this list, click the checkbox next to the name of the folder you would like to remove and then click

...

the Remove button:
Screenshot-DataStorage-PermMgr-PermRequests-3OperationsRemoveImage Added

Anchor
Step4
Step4

...

Step 4: Explanation

An explanation as to why you are requesting access to this folder is MANDATORY. Briefly describe the reason in the textbox

...

:

...

Screenshot-DataStorage-PermMgr-PermRequests-4ExplanationImage Added

Step 5: Expiration (Optional)

...

If a user needs permissions for a finite length of time, you can enter the date or the number of days after which you want these permissions to be automatically revoked

...

:
Screenshot-DataStorage-PermMgr-PermRequests-5ExpirationImage Added

...

Finish

Click

...

the Submit button to submit the request.

Approving/

...

Denying Permissions Requests (Authorizers Only)

Permission Request Email

Once a Permission

...

Request has been sent, the

...

Authorizers will receive an email stating that the permission request needs to be approved or declined.

...

...

  1. This contains the link to the Permissions Manager where the

...

  1. Authorizer will grant or decline permission to a folder.

...

  1. This contains the information about the request such as the name of the user requesting permission, the folder they wish to have access to, permission level, and reason.

The rest of the email contains frequently asked questions which are sent with every permission request email and can be helpful.

Click the link at the top to proceed to

...

the Request Details window in the Permissions Manager site.

Screenshot-DataStorage-PermMgr-PermRequests-EmailImage Added

Viewing Requests Waiting for Approval in Permissions Manager

Alternately, you can also view any Permissions Requests that are waiting for your approval directly in Permissions Manager. Login to Permissions Manager and find the "Requests waiting for my approval" section on the Summary Screen. You can click the section to expand it if it is not already visible. Click the Request Details icon or the Request ID Number to proceed to the Request Details window in the Permissions Manager site. If you select the checkbox next to one or more requests and then click the Approve/Decline button you can approve or decline those requests in bulk and bypass viewing the details screen for each one.

Screenshot-DataStorage-PermMgr-PermRequests-SummaryImage Added

Request Details Window - Approve or Decline

...

The top of the screen is very important. It displays the Request Type. In many cases it will

...

be Grant Access, but in some cases it may

...

say Revoke Access.

Screenshot-DataStorage-PermMgr-PermRequests-DetailsImage Added

...

Screenshot-DataStorage-PermMgr-PermRequests-RequestTypeImage Added

If a user already has access to a folder and another request is made to revoke access for

...

that user

...

make sure you are approving the correct action. If you approve

...

Revoke

...

 request, that user will no longer have permission to that

...

folder. If you decline

...

Revoke

...

 request, the means the user will still have their current permissions.

...

Parts of the Request Details Window:

  1. The user

...

  1. the request is for along with all their information

...

  1. .

...

  1. The folder the user will have access to

...

  1. , the type of permission

...

  1. , and the reason the user needs access.
  2. The length of time the permission will last. If

...

  1. an Expire On

...

  1.  or Expire After time was selected, a different

...

  1. time can be picked

...

  1. by the Authorizer.
  2. Clicking the View Approval Status button will display a list of all of the authorizers

...

  1. for the folder.

...

  1. The

...

  1. Approve and Decline buttons.

Approve or Decline the Request:

  1. Click the Approve or Decline button.
  2. Enter a Reason for choice made.
  3. Click the Approve/Decline button.

Permission Request Email Update

Once a Permission Request has been approved or declined

...

an email will be sent to that user.

...

...

  1. The request type (i.e. Grant or Revoke).

...

  1. Whether the request was approved or declined.

...

  1. A link that goes to

...

  1. Permissions Manager and displays the full details of the request.

...

The rest of the email contains additional instructions and information that is useful such as mapping a network drive to a computer and contact information.

Screenshot-DataStorage-PermMgr-PermRequests-EmailUpdateImage Added

Viewing

...

Permissions

  1. If you would like to see who has permissions to a particular folder you can click on the Management tab on the left side of the screen.

...

  1.  Then underneath Management click Folder Authorizer:
    Screenshot-DataStorage-PermMgr-PermRequests-FolderAuthImage Added

  2. On the Folder Authorizer screen under the Host/Folder Name column

image039.jpgImage Removed

Then underneath Management click Directory Authorizer and you will be taken to the management screen.

image040.jpgImage Removed

...

  1. click on the folder you would like to look into

...

  1. :

...

  1. Screenshot-DataStorage-PermMgr-PermRequests-FolderAuthNameImage Added

...


  1. Next, on the Permissions

...

  1. tab click the Magnifying Glass icon to switch the view to "Monitored permissions". This will make sure you only see the relevant groups to view permissions on the folder.
    Screenshot-DataStorage-PermMgr-PermRequests-FolderAuthMonitoredImage Added

  2. Click the + and - in the Display Name column next to the name of the

...

  1. group you are interested in to see

...

  1. a list of the users

...

  1. and when their permissions expire.

...

image042.jpgImage Removed

...

  1. The groups ending in "_F" and "_R" are the main permissions groups used to grant someone access to a folder. The "_F" is the Read Write group and the "_R" is the Read Only group.

    Tip

    There may be other groups appearing that are used by Information Services or automated server applications. Do not worry about them being listed under your

...

  1. folders and groups.

    You can change the Expiration Date for any user listed by clicking the date or the text "Never".


    Screenshot-DataStorage-PermMgr-PermRequests-FolderAuthGroupsImage Added

Changing the Expiration Date

You can change the Expiration Date for a user that already has permissions to a folder without revoking and granting a new permission request.

  1. Follow the steps above for Viewing Permissions to find the group and user.

  2. Look to the right of the user's name for the "Expiration Date" column.

  3. The text in the "Expiration Date" column will either show the date the user's permissions will expire or "Never". Click the text.
    Screenshot-DataStorage-PermMgr-PermRequests-ExpirationImage Added

  4. Choose the new expiration (Never, On Specific Date, or Days After Approval), enter a Reason, and then click the OK button.
    Screenshot-DataStorage-PermMgr-PermRequests-EditExpirationImage Added

Getting additional help

If there are still any issues after reading these instructions and any help is still needed please email help-rds@bmi.cchmc.org for further assistance.