How do I give additional permissions to user?

This article covers giving a User additional permissions in iplicit, within User Management. Only a System Administrator can make these changes, for security reasons – support cannot make this change on your behalf.

---

Choosing how to apply permissions

There are two ways to give a User more access: apply a User Role directly to their account, or add the User to a User Group that already holds the roles they need. Use a User Group when several people need the same standard set of permissions – it keeps setup consistent and is easier to maintain than editing each User individually. Use an individual User Role when the need is specific to one person. Available permissions depend on the licence applied to the User – contact your Customer Success Manager if you need to review licensing.

For the exact steps to assign, copy or select roles on the User Account permissions tab, see the iplicit user guide. For applying roles through a group instead, see User groups in the user guide.

---

Copying permissions from an existing User

If a new User needs the same access as someone already set up – for example, they are replacing that person – you can copy permissions across rather than rebuilding them from scratch. Before you rely on a copy, check the source User's roles and groups are still correct for the role. A copy carries across whatever that person currently has, including anything that should have been removed.

---

Data Access Control is separate from roles

If your organisation uses Data Access Control (DAC), giving a User a role does not automatically give them DAC. The two need to be set up separately – a User can have the right role but still be unable to see the data they need if DAC hasn't been applied. See Data access control in the user guide for how it works, and How does Data Access Control work? for the support-side explanation.

For background on what each type of User Role does, see User roles in the user guide or Understanding User Roles in iplicit. For DAC groups specifically, see Understanding Custom Data Access Controls (CDAC).