Assign user groups to objects

Administrators can assign user groups to study groupings. Study configurators can assign user groups to studies, clinical data models, transformations, or validation check batches.

To have access to any object, a user must be in a user group that is assigned to it. The user's role in the group determines the user's privileges on the object. Studies, clinical data models, transformations, and validation check batches are all objects.

1. Select the object and click the Apply Security icon.

   The Apply Security window lists all user groups associated with the object in any way. The Assignment Status column shows the current state of each user group's access to the object:

   • Inherited: The user group has access to the object through inheritance.

     When a user group is assigned to a study grouping, all studies in the grouping, and all objects in those studies (clinical data models, transformations, and validation check batches), inherit the assignment.

     When a user group is assigned to a study, all clinical data models, transformations, and validation check batches in the study inherit the assignment.

   • Assigned: The user group has access to the object because it was explicitly assigned to the object.

   • Revoked: The user group does not have access to the object. Its inherited access has been revoked.

   • Unassigned: The user group does not have access to the object. Its explicit assignment was undone.

   User groups that never had access to the object are not displayed.

2. In the Assign To field, select one:

   • Metadata: Required to create or modify studies, clinical data models, tables, validation checks, transformations, and custom listings.

   • Development: Required for creating, modifying, or executing the object in the Development lifecycle stage and loading or viewing data in the Development lifecycle stage.

   • QC: Required for testing or executing the object in the QC lifecycle stage and loading or viewing data in the QC lifecycle stage.

   • Production: Required for executing the object in the Production lifecycle stage and loading or viewing data in the Production lifecycle stage.

3. Make a user group assignment change:

   • To assign a user group that is not currently associated with the object, click Assign. The Assign User Group window appears. Query for the user group, select it, and click Apply.

   • To revoke the access of a user group that has an Inherited status, select the group and click Revoke.

   • To reinstate the access of a group whose status is Revoked, select the group and click Unrevoke.

   • To remove the access of a group whose status is Assigned, select the group and click Unassign.