Files
Marco Mooij | DigiState db2b6e62b8 Access control documented
2026-05-15 13:43:56 +02:00

1.5 KiB
Raw Permalink Blame History

User groups

All users in Sentri are assigned to a user group. There are currently two types of user groups:

  • Administrator Users not tied to specific companies. They are responsible for administering Sentri and are created Admins.
  • User Intended for future use for users linked to specific companies. This group type is not yet active in Sentri.

User group weight

Each user group has an associated weight, which is used to enforce hierarchy and prevent privilege escalation.

For example, if your current user group has a weight of 10, you cannot create or assign a user to a group with a lower weight (e.g. 1) if that would result in higher permissions than your own. This ensures users cannot create accounts with greater access than their own.

Adding a user group

To add a user group, you need the admin-access-control-user-groups RW permission.

Navigate to Access Control > User groups and click Add user group. Enter a name and select the group type.

After creation, you will be able to configure the groups Permissions. To modify permissions, you also need the admin-access-control-permissions RW permission.

Viewing user groups

To view user groups, you need the admin-access-control-user-groups RO permission.

Go to Access Control > User groups and click the view icon next to a user group. This will show detailed information about the group, including all configured Permissions.