Roles and sites question

Usage and Config Platform
1

(imported topic written by beasleya)

Hi,

Which scenario would be more efficient…

  1. Granting read permissions globally on external sites

or

  1. Adding external sites to a role and assigning the role to all operators

or does it make no difference

2

(imported comment written by SystemAdmin)

It depends on the level of control you’d like to have over permissions.

Granting permissions globally means if at a later date you want to change that, you’ll have alot of cleanup work to implement individual permissions to users/groups.

on the other hand, if you specify permissions based on roles, you can easily add/remove users from various roles as they move from position to position. The work here is clear, everytime you have an operator change positions a little prep-work will be required for them to have access to the proper content for their new position.

3

(imported comment written by beasleya)

I was thinking more in terms of what is internally more efficient. E.g. propogation of actionsite, etc…

Which scenario would result in better TEM performance ? (maybe it makes no difference ?)

4

(imported comment written by SystemAdmin)

Ad far as I’m aware there is no difference. I’m not 100% on the new 8.2 roles feature but considering every user that logs in gets their own operator site, I’d assume the impact on the infrastructure would be identical.

I believe when users log into the console, their new “abilities” or removed abilities will propagate at that time.

5

(imported comment written by beasleya)

Ok thanks, sounds like its not much of an issue either way.