Managing users and permissions
A guide to managing users and their permissions in your Mediaflux project
You can manage users and their permissions by:
adding or removing users from a project
modifying user access levels within a project
using restricted folder ACLs (access control lists) in a project
We encourage you to use the self-service UAM (User Account Management) Portal to manage your users' access.
The possible roles you can give users are described project roles guide.
Accessing the UAM Portal
To use the UAM Portal you must be involved in the RCP Activity in which the Mediaflux project resides, in at least one of these ways:
you are its RCAO (Research Computing Activity Owner)
you have a ‘manage resources’ permission within it
Viewing projects and users
Login to the UAM Portal
For the Domain field, enter unimelb (for staff account holders) or student (for student account holders)
For the User and Password fields, enter your University username and password (i.e. your central University credentials), and click Sign In
Click on Projects
Select the project you want to view from your list of projects
Click on the Users tab on the right to see which users have what access to the project
Adding users to your project
Click on the Add button at the bottom of the user list (see screenshot in Step 4 above)
In the resultant pop-out window choose the relevant Role from the standard project roles available, then click Add
Modifying a user’s project access level
Select the user in the user list (tick the checkbox to the left of their row)
Click on the Modify button at the bottom of the user list
In the resultant pop-out window, change the role selection in the Role dropdown menu
Removing users from your project
Select the user in the user list (tick the checkbox to the left of their row)
Click the Remove button at the bottom of the list
Click Remove again in the resultant pop-out window
Logging out of the UAM Portal
Logout by clicking on this button on the top right of the screen:
Managing access to restricted folders
Restricted folders are located under /projects/project-id/Restricted.
They are special folders in your project that have extra privacy controls — you decide exactly who can see what's inside them and what they can do with them (read, write or partial write). See more about how they work in our ACL structure guide.
Note: A user must already be added to your project (with at least read-only access) before you can control their access to any restricted folders.
View existing ACLs
Once you’ve selected your project from the list on the left hand side, click on the Folder ACLs tab (to the right of the Users tab) to view who has access to a restricted folder.
Users will have listed permissions in the table view:
Read: user can view the contents of the folder and all subfolders (unless the subfolder itself has a specific access control set)
Write: user can view, modify, create and delete the contents of the folder and all subfolders (unless the subfolder itself has a specific access control set)
Partial Write: user can view, and do some (but not all) modify, create or delete actions on, the contents of the folder and all subfolders (unless the subfolder itself has a specific access control set)
Change existing ACLs
To modify a user’s access within a restricted folder, simply toggle the tick/cross icons against their respective ‘read/write/partial write’ permissions in the project’s listed Folder ACLs table.
Important
If you want to remove someone's read access, you need to remove their write access first. Trying to remove their read access while they still have write access won't work.
In addition to user based access, you can set project admins access to the folder by selecting the Administrator access checkbox next to the folder name in the folder list on the left tab. If enabled to all users who have the project-administrator role for the project, this will automatically grant them Write access to the folder even if they have not been given access individually.
Create a new restricted folder
Click on the Create Folder button above the folder list to create a new restricted folder.
You will be prompted to enter the folder name in the pop up dialogue and click Add to create your folder.
NOTE: Folder names need to start with a letter/number and can only contain letters/numbers and dots in the name.
Traverse the folder tree
Although you can only apply access controls for folders in the Restricted directory, you can view other folders of the project and any access controls that may have been set on them by traversing the folder tree:
to move up a folder click on the Up icon above the folder list on the left side
to move down into a folder double click on a folder
Note: For folders outside the restricted folder all users have access to them if no ACLs are indicated, with users that have access to the parent folder also having access to the child folders unless there is an ACL set.
Known UI bug: sometimes the up arrow for traversal will be non responsive, when this happens click once on the right hand side list containing the users and try clicking on the up arrow again.