Novell Doc: Kablink Vibe OnPrem 3 Administration Guide - Controlling User Access in Workspaces

2.2 Controlling User Access in Workspaces

The access control settings on each Kablink Vibe workspace determine who can see the workspace and how different types of users can participate in each workspace.

2.2.1 Controlling User Access to Personal Workspaces

Default Access Controls

By default, personal workspaces are created with the following access:

User or Group	Access Role	Role Description
Workspace Owner (user)	Administrator	Can create, modify, or delete workspaces or folders; moderate participation (modify or delete the entries of others); design entries and workflows; and can perform Participant tasks.
All Users group	Participant	Can create and modify entries, plus perform the Visitor tasks.
All Users group	Visitor	Has read-only and comment-only access.

Restricting Access to Personal Workspaces throughout the Vibe Site

You might want to set up your Vibe site so entries in users’ personal workspaces remain hidden and confidential.

Navigate to the Personal Workspaces page by clicking the Workspace tree icon , then clicking Personal Workspaces.
Click Workspace > Access Control.
In the All users row of the access control table, ensure that no check boxes are selected.
Click Save Changes > Close.

Vibe users can adjust the access control for their personal workspaces, as described in Controlling Access in the Kablink Vibe OnPrem 3 Advanced User Guide.

2.2.2 Controlling User Access to Team Workspaces

By default, new team workspaces created under the main Team Workspaces directory are visible only to members of the team workspace. Following are some of the default access control options:

User or Group	Access Role	Role Description
Workspace Owner (team creator)	Administrator	Can create, modify, or delete workspaces or folders; moderate participation (modify or delete the entries of others); design entries and workflows; and can perform Participant tasks.
All Users group	Participant	Can create and modify entries, plus perform the Visitor tasks.
All Users group	Visitor	Has read-only and comment-only access.

After you create a new team workspace, you can configure different access control settings for it.

Navigate to the new team workspace, then click Workspace > Access Control.
Select No in the Inheritance box.
Click Apply to activate the Access Control table:
Adjust the access control settings for the new team workspace as needed, as described in Controlling Access in the Kablink Vibe OnPrem 3 Advanced User Guide.
Click Save Changes > Close.

2.2.3 Controlling User Access to Global Workspaces

By default, the Global Workspace directory immediately under the Home Workspace inherits the access control settings of the Home Workspace:

User or Group	Access Role	Role Description
Workspace Owner (admin)	Administrator	Can create, modify, or delete workspaces or folders; moderate participation (modify or delete the entries of others); design entries and workflows; and can perform Participant tasks.
All Users group	Participant	Can create and modify entries, plus perform the Visitor tasks.
All Users group	Visitor	Has read-only and comment-only access.
All Applications group	Visitor	Has read-only and comment-only access. For information about application groups, see Managing Remote Applications in the Kablink Vibe OnPrem 3 Advanced User Guide.

When you create a new global workspace under the main Global Workspaces directory, the new global workspace by default inherits the access control settings of the main Global Workspaces directory, as listed above. After you create a new global workspace, you can configure different access control settings for it.

Navigate to the new global workspace, then click Workspace > Access Control.
Select No in the Inheritance box.
Click Apply to activate the Access Control table:
Adjust the access control settings for the new global workspace as needed, as described in Controlling Access in the Kablink Vibe OnPrem 3 Advanced User Guide.
Click Save Changes > Close.