Privileges Management and Access Control

Whether a project can be accessed is determined by the project's privilege and access control.

All privilege management of project is maintained under the "Admin" - "Member" - "Privilege" -"Action". This document will mainly introduce the privileges management and access control system of the project.

1、Privileges Management of project

All privilege management of ZenTao is maintained under the "Admin" - "Member" - "Privilege".

Privileges of projects can be operated through privilege management and sight management.

1)、Privilege Management

Click the "Manage Privileges by Group" button on the right side of the "Admin" - "Member" - "Privilege" to enter the privileges management page.

The privilege management page of the project sight: checked to assign permissions, unchecked it to not assign permissions.

2)、Sight Management

Sight management privilege is a supplement to privilege management, which can quickly narrow the scope of privilege.

In other words, the sight management privilege provides a switch.

• Open (checked): You need to assign the relevant privileges of the project in the privilege management before you can actually access the project.
• Off (unchecked): Projects cannot be accessed even if the related privileges of the project are assigned in privilege management.

Scenarios for the use of Sight Management Privileges:

• For customized projects, Party A is also in the ZenTao system and needs to view the program, products, and projects.
• Party A's members are placed in a privilege group.
• Party A is assigned the relevant privileges for program, products, projects, and execution, but Party A cannot be allowed to see the program, products, and projects in ZenTao system.
• You can list Party A's accessible programs, accessible products, and accessible projects in Accessible Programs, Accessible Products, and Accessible Projects.
• In this way, Party A members of this privilege group can only view the listed accessible programs, accessible products, and accessible projects.

Click the "Manage Sight" button on the right side of the "Admin" - "Member" - "Privilege" to enter the sight management privilege page.

Sight Management Privilege Page：

• Access Sight: Checking the project means that the project can be accessed. Only the related privileges of the projects that have been assigned in the privilege management can actually access the projects.
• Access Program: Empty means that projects have no access restrictions. If projects are listed, members of that privilege group can only access the listed projects.
• Access Dynamics: The operations of projects are listed, and the project operation dynamics can be viewed in the dynamics only if checked.

2、Privileges Grouping and Privileges Management of project

Projects can not only maintain an independent privileges system, but also create independent privilege groups for projects, manage privileges and members, edit and delete operations.

1)、Create a project privilege group

In the "Admin"--"Member"--"Privilege", click "Create Group" button in the upper right corner to add a new privilege group. 

After the addition is successful, you can use the operation buttons on the right side of the privilege group list to perform privilege assignment, member maintenance, editing, copying, and deletion of the privilege groups.

2)、Privileges Management of project permission grouping

After the project permission group is created successfully, you can assign privilege and maintain members.

Click Privileges Management and Member Management of the project permission group.

Privileges Management of project permission grouping：

Member Management of project permission grouping: 

3、Combination of Access Control and Privileges Control for Projects

1)、Access Control and Privileges Control for independent Projects 

The access control of the project includes Private, Open, and Whitelist.

• Private: Only the project leaders, team members, and stakeholders can access.
• Open: Accessible with project view permissions.
• Whitelist: When access control is Private, you can set a whitelist. All whitelisted users can access the project.

Project privileges control includes inherit and reset.

• Inherit: Take a combination of system privileges and project privileges. Take the collection of privileges assigned in the "Admin" - "Member" - "Privilege" and privileges assigned in the project-independent privileges group.
• Reset: Only the privileges assigned by the independent privilege group of the project are taken, that is, the privileges assigned in the "Project" - "Settings" - "Permission".

1.1) Access is private:

When creating a user, the default access control is private, and the privilege is inherited by default. A whitelist can be set.

When project access is private, the combinations of project access control and privileges are:

• Access: Private; Privilege Control: Inherited.
• Access: Private; Privilege Control: Redefined.

1.2) Access is open

When project access is open, the combinations of project access control and privileges are:

• Access: Open; Privilege Control: Inherited.
• Access: Open; Privilege Control: Redefined.

2)、Privileges Management and Access Control for Programs

There is one more access control for the projects under the program: open in the program.

The access control of the project includes private, open, public in the program, and whitelist.

• Private: Only the project leaders, team members, and stakeholders can access.
• Open: Accessible with project view permissions.
• Open in the program: All upper-level program team leaders and stakeholders, project leaders, team members, and stakeholders can access.
• Whitelist: When access control is Private, you can set a whitelist. All whitelisted users can access the project.

Project privileges control includes inherit and reset.

• Inherit: Take a combination of system privileges and project privileges. Take the collection of privileges assigned in the "Admin" - "Member" - "Privilege" and privileges assigned in the project-independent privileges group.
• Reset: Only the privileges assigned by the independent privilege group of the project are taken, that is, the privileges assigned in the "Project" - "Settings" - "Permission".

4、Team, whitelist, and Stakeholders of the project

1)、Project Team

The project team members can be maintained independently, and the executing team members should be synchronized to the project team members.

You can click the button of "Manage Team" to add team members, and remove team members through the remove operation button of the team list. 

2)、Whitelist

When creating and editing projects, when the access control is private, the whitelist members will be listed in the project whitelist.

The execution whitelist under the project is also displayed in the whitelist of the project synchronously.

You can also add and remove members individually in "Project" - "Settings" - "Whitelist". 

3)、Stakeholders

Project stakeholders can be added in batches or individually in "Project" - "Settings" - "Stakeholder".

You can use the operation buttons on the right side of the stakeholder list to perform communication records, desired content, editing, and deletion operations.