Groups

In primedocs, groups control the visibility of templates and Snippets as well as the assignment of roles and permissions. A template can be visible "to everyone" or only to a specific group — controlling access via groups requires considerably less maintenance than individual permissions.

primedocs distinguishes two types of groups: Windows groups (AD) and primedocs groups. Both are managed in the Admin Dashboard under Security.

Windows groups (Active Directory / Entra ID)

Under Windows Groups in the Admin Dashboard, the Active Directory groups that are to be targeted in primedocs are listed.

note

Not all AD groups are loaded into primedocs, only those you actually want to use in primedocs — for example, to control the visibility of templates or Snippets. This keeps the configuration clear.

primedocs groups

primedocs groups are intended as a supplement to the AD groups for the case where a group is needed that is not available as an AD group or may not be created there.

A primedocs group can contain:

• individual primedocs users,
• AD groups,
• further primedocs groups.

Membership can be defined statically or made dynamic via a configuration. With dynamic groups, a stored configuration automatically assigns users to the group based on their user information, or removes them again.

Recommendation

• Control visibility and permissions via groups rather than via individual users wherever possible — individual permissions involve considerable manual maintenance effort.
• Load only the AD groups that you really need in primedocs.
• Use primedocs groups when the desired grouping cannot be represented in the Active Directory.

See also: Roles and Users, Profiles & Organisations.