Privileges Management and Access Control 

Whether an execution can be accessed is determined by the execution's privilege and access control.

This document will mainly introduce the privileges management and access control system of the execution.

1、Privileges Management of Execution

All privilege management of ZenTao is maintained under the "Admin" - "Member" - "Privilege".

Privileges of execution can be operated through privilege management and sight management.

1)、Privilege Management

Click the operating buttons the right side of the "Admin" - "Member" - "Privilege" to enter the privileges management page.

The privilege management page of the execution sight: checked to assign permissions, unchecked it to not assign permissions. 

2)、Sight Management

Sight management privilege is a supplement to privilege management, which can quickly narrow the scope of privilege.

In other words, the sight management privilege provides a switch.

• Open (checked): You need to assign the relevant privileges of the execution in the privilege management before you can actually access the execution.
• Off (unchecked): Execution cannot be accessed even if the related privileges of the execution are assigned in privilege management.

Click the "Manage Sight" button on the right side of the "Admin" - "Member" - "Privilege" to enter the sight management privilege page.

Sight management permission page of execution

Viewable dynamic items for assignment execution

2、Access Control of Product

The access control of the execution includes Private, Inherited Execution ACL, and Whitelist.

• Private: for team members and execution stakeholders.
• Inherited Execution ACL: for who can access the current execution.
• Whitelist: Users in the whitelist can access it.

When creating an execution, the default access control is private, and a whitelist of users can be set under private. 

Access control is inherited execution ACL

The whitelist of executions can be added when creating and editing executions, or can be added and removed directly from the execution whitelist.