CiviCRM Community Forums (archive)

I have setup CiviCRM to manage my contacts. I would like to delegate the task of updating my contacts to a temporary employee. This employee has been given the role of Manager in my Joomla site. I don't want them to have Admin or Super Admin rights, for obvious reasons. For those unclear about which permissions/roles I'm talking about, let me clarify:

In Joomla, there exists a series of usergroups with inherent permissions for use of the system. These include Public Frontend permissions, (Registered, Author, Editor, and Publisher) and Public Backend permissions, (Manager, Administrator, and Super Administrator).

Each of these permissions are assigned through the User Manager to specific users as the administrator sees fit. Only two of these permission types may access CiviCRM by default; Admin and Super Admin.

I would like for managers to be able to access CiviCRM as well. Essentially, I need a way to grant them access to this component without giving them the keys to the kingdom.

Any ideas?

Thanks,

K

Well, as kvisions posted there are two categories of user with three types each:


Public Front-end
| ---- Registered
| -------- Author
| ------------- Editor
| ------------------- Publisher

Administrator Back-end
| ------- Manager
| ------------- Administrator
| ------------------- Super Administrator

The Front-end privileges are:

• Author Group: These Users are given access to submit new content and edit their own content items/pages by logging into the Front-end.
• Editor Group: These Users are given access to submit and edit any content by logging into the Front-end.
• Publishers Group: These Users are given access to submit, edit and publish any content by logging into the Front-end.

The Back-end privileges are:

• Super Administrator:The Super Administrator Group has access to all of the Back-end (Administrator) functions. Your site must have at least one User designated as a Super Administartor to perform the site's Global Configuration.  Users in this group cannot be deleted and cannot be switched to another group.
• Administrator:The Administrator Group has slightly restricted access to the Back-end (Administrator) functions. Administrators cannot:
  
  • Add or edit a User in the Super Administrator group
  • Access the Global Configuration settings
  • Access the Mass Mail function
  • Manage/install Templates
  • Manage/install Language files
• Manager:The Manager Group is generally restricted to matters of content creation. A User in this group, in addition to the restrictions for an Administrator, cannot:
  
  • Manage Users
  • Install Modules
  • Install Components
  • Access some Components (as determined by the Super Administrator)

Great!

Will the permission model in 2.x support the following case?

Members can see limited information about other members (such as names and addresses) but can see more of their own data (such as contribution history, date of birth).