Control over who can see and do what
Users have to be divided into user groups that reflect the structure of the organization. These groups are then assigned access rights to the data based on need. Access to information is controlled through the various user groups and their roles in the business, combined with how the information is grouped. For example, everyone can use information that has been reviewed and approved in their daily work, but information with ongoing revisions can only be accessed by concerned parties.
This can be achieved in various ways; for example, user groups can be linked to appropriate object folders or directly to the information. A user group can be assigned different roles in different object folders, which means that users may be granted different rights in different object folders. You can also assign a level of confidentiality to an object, such as by stamping information as “Confidential” so that only certain groups of users can see this information. In this way, particularly sensitive information can be stored according to the current information structure, but it can still be stamped confidential to add an extra level of precaution.
