Introducing the ACLator: fine-grained control over all the things

<p>We are pleased to announce the release of the Permissions and Access Control List Editor, which we've pet-named the ACLator.  Think "Ack-ell-a-tor" using an Arnold Schwarzenegger voice.<br /><br />The ACLator places the power of fine-grained access control squarely in your hands.  By default, users have limited, read-only privileges on queues of which they are members - just the minimum for staffing.  From those humble beginnings, users are commonly elevated to full administrative access across an account or to administrative access within a subset of the account.  But it doesn't stop there!  You can <b>grant</b> <b>or</b> <b>deny</b> read and/or write privileges to most anything to anyone - <i>and yes, even to LH3 users outside your account</i>.  That last part has super-exciting implications and really deserves it's own blog post.  But we'll get to that in a bit.  And as always, there is no extra charge for any of this new goodness.<br /><br /><h3>Groups & Folders -  The Building Blocks of Access Control</h3><div><br /></div>If you've ever used the admin dashboard to manage users or queues, then you've probably noticed folders.  Folders organize users, queues, conference rooms, canned messages, chat snippets, chat skins, and knowledge bases (FAQs) into a collection of resources.  Folders can also have child folders, allowing you to build hierarchies of resource collections.<br /><br />A group is a collection of users with the same access privileges to a set of folders.  There are two special groups that every LibraryH3lp account has - Everyone and Administrators.  The Everyone group automatically includes every user within the LibraryH3lp account and provides the basic read-only privileges that make staffing possible.  The Administrators group contains all users that have full administrative access to the LibraryH3lp account.  From there, you can create your own groups with customized access to the resources within your LibraryH3lp-powered service.<br /><br />As an administrator if you navigate to the ACLator (<a href="https://us.libraryh3lp.com/dashboard/#/groups" target="_blank">US</a>, <a href="https://ca.libraryh3lp.com/dashboard/#/groups" target="_blank">CA</a>, <a href="https://eu.libraryh3lp.com/dashboard/#/groups" target="_blank">EU</a>, <a href="https://sg.libraryh3lp.com/dashboard/#/groups" target="_blank">SG</a>), you'll see a list of all groups for your account.  You can manage groups (add, rename, delete) using the button toolbar above the list.<br /><br /><div class="separator" style="clear: both; text-align: center;"></div><table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody><tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxjvvGMjGTGE7u-B0QZY2MO8DD9H2ELGt8YM7qb0zbgWOLaSlfMgVROZAHEmuulL1n8t_EnifWpytKqBF141jpYNSq3MsMFD-s_SEnnjnQ85TLCqeW652yeZ-MSE0uOQBd28UTFShlG4k/s1600/aclator-main.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxjvvGMjGTGE7u-B0QZY2MO8DD9H2ELGt8YM7qb0zbgWOLaSlfMgVROZAHEmuulL1n8t_EnifWpytKqBF141jpYNSq3MsMFD-s_SEnnjnQ85TLCqeW652yeZ-MSE0uOQBd28UTFShlG4k/s1600/aclator-main.png" /></a></td></tr><tr><td class="tr-caption" style="text-align: center;">Example list of groups in the ACLator.  The management toolbar is located above the list.</td></tr></tbody></table><br /><h3>Managing Membership</h3><div><br /></div>When you click on a group from the list, you'll see a Members tab that lists the members of a group.  The default view is a flat list, but you can switch to a tree view that reveals the folder hierarchy.  Beside the view toolbar is a button that lets you add or remove members.<br /><br /><table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody><tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhldSgc9AKRvo2B37jW-PPNhKANdR5cP055Fgk9_qqQ_u5qnRVi484JRWBOewmLvl-4HvqQSVYuzkB-4bKzJRDZKvjdJCL0m_vkg9hawRkZ-gYwq_BRhrvGwUwOhz6kRuoSLzm_wkgeWEc/s1600/aclator-admins.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="150" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhldSgc9AKRvo2B37jW-PPNhKANdR5cP055Fgk9_qqQ_u5qnRVi484JRWBOewmLvl-4HvqQSVYuzkB-4bKzJRDZKvjdJCL0m_vkg9hawRkZ-gYwq_BRhrvGwUwOhz6kRuoSLzm_wkgeWEc/s1600/aclator-admins.png" width="400" /></a></td></tr><tr><td class="tr-caption" style="text-align: center;">Members for an Administrators group.  The membership management buttons are located above the member list.</td></tr></tbody></table><br />The ACLator makes granting users full administrative privileges easy.  Click on the Administrators group as shown in the screenshot above.  Then click the add/remove members button to make your changes.  Yep.  That's it.<br /><br /><h3>Using the ACLator to Isolate Departments</h3><div><br /></div>How about extending your LibraryH3lp subscription to include other departments, but not giving the departmental administrator the full keys to your entire kingdom?   We call these users mini-admins.  Mini-admins can manage their own resources but cannot see any data (including transcripts) for the rest of the account.  Their view of the world is capped at their own folder.<br /><br />Let's set up a mini-admin in 5 easy steps! <br /><br /><ol><li>Visit the Users page of the admin dashboard and create a new folder.  </li><li>Add a new user within the folder.  You can use drag and drop if needed to get the user situated. </li><li>Head over to the ACLator and create a new group.</li><li>Add the new user as a member of the new group.</li><li>Click the Permissions tab and select your newly created folder containing the mini-admin.  Click Grant for read and write access.</li></ol><div>The screenshots below shows how the ACLator Members and Permissions tabs look when it is all said and done. <br /><br /><table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody><tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZ_9yjV72g6imYPAzRvaUMZU52p3iTWvnt241NAJsPAPwLLlVqBhAkG_CLeeQKtlxfSgvTVOGUha1m0T86OhoVD-bqrX2LDN8HO1iSUY-PXXl4MRPaE-XB4PLzAjCCyTr5Gi2juCiRn3k/s1600/aclator-it-group.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="142" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZ_9yjV72g6imYPAzRvaUMZU52p3iTWvnt241NAJsPAPwLLlVqBhAkG_CLeeQKtlxfSgvTVOGUha1m0T86OhoVD-bqrX2LDN8HO1iSUY-PXXl4MRPaE-XB4PLzAjCCyTr5Gi2juCiRn3k/s1600/aclator-it-group.png" width="400" /></a></td></tr><tr><td class="tr-caption" style="text-align: center;">The new user is part of the mini-admin group. </td></tr></tbody></table><br /><table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody><tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiqO_XDIaL2K4XwZkBhEyaSfHNteRgDc-4RSLFjH3FX8-hZulbLnDp43jGzKnXOhyphenhyphen_TKLqxOESZUjPZsdRR76igrZZvQcqr_rvENG4xVHch4FWEIaCnd0UaEdyqKHtFwFb3TWk-zDAazaI/s1600/aclator-it-group-permissions.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="168" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiqO_XDIaL2K4XwZkBhEyaSfHNteRgDc-4RSLFjH3FX8-hZulbLnDp43jGzKnXOhyphenhyphen_TKLqxOESZUjPZsdRR76igrZZvQcqr_rvENG4xVHch4FWEIaCnd0UaEdyqKHtFwFb3TWk-zDAazaI/s1600/aclator-it-group-permissions.png" width="640" /></a></td></tr><tr><td class="tr-caption" style="text-align: center;">Granting mini-admin privileges on the "mini-admin" folder.</td></tr></tbody></table><br />When a new mini-admin user logs into the admin dashboard, they'll be able to create their own users, queues, knowledge bases (FAQ sites), conference rooms, canned messages, chat snippets, chat skins, and administrative hierarchies within their own restricted subdomain.  Since a mini-admin's view is capped at their own folder, they won't see their parent folder since that is beyond their administrative access.</div><br /><h3>Building Collaborative Services</h3><br />Within the ACLator, you probably noticed the Collaborators tab.  This tab let's you manage access control for LibraryH3lp users <i>outside</i> your account.  Awhile back, we talked about how you can <a href="http://libraryh3lp.blogspot.com/2013/04/building-grassroots-collaboratives-with.html" target="_blank">build ad-hoc collaboratives with LibraryH3lp</a>.  The Collaborators tab lets you build collaborative services on-the-fly!  The ability to self-organize is unprecedented in the world of virtual reference software, removing the need for any middle man to form collaboratives.  In an upcoming post, we'll walk you creating and managing an ad-hoc collaborative.  Stay tuned.<br /><br /></p>

We are pleased to announce the release of the Permissions and Access Control List Editor, which we've pet-named the ACLator.  Think ...