Admin : Space Group Config
- 1 Space Group Configuration
- 1.1 Group
- 1.1.1 Allow space group actions permitted
- 1.1.2 Allow Space group add/remove users permitted
- 1.1.3 Allow delegated Group Actions Permitted
- 1.1.4 Show Group information
- 1.1.5 Space group pattern
- 1.1.6 Group name allowed characters RegExp
- 1.1.7 Max Number of UserIds to Act On at One Time
- 1.1.8 Max Number of GroupIds to Act On at One Time
- 1.1.9 Hide Operations Group Select
- 1.1.10 Server-Side Group Table Pagination
- 1.1.11 Group Blocklist
- 1.1.12 Allow space admins to delete audit data
- 1.2 User
- 1.3 Cache Expiry
- 1.4 General
- 1.1 Group
Space Group Configuration
Pre CSUM 4.0.10
Data Centre instances of Confluence will see an additional section:
|
Post CSUM 4.0.10
Group tab
User tab
General tab
Group
Global Permission Groups can only be manipulated through Delegated Groups. Specified Groups or Users must be authorised to this Global Group as a Delegated Group by a system admin before they can add/remove users to the Global Group within the Space configuration CSUM Delegated Group tab.
Allow space group actions permitted
Options are Yes or No. Choose whether you want to allow Space Administrators the ability to perform add/remove operations on groups specified via group matching (see Space group pattern). Note that if set to no, Space admins can not still rename or create/delete groups.
Allow Space group add/remove users permitted
Options are Yes or No. Choose whether you want to allow Space Administrators the ability to perform add/remove operations on groups specified via group matching (see Space group pattern). Note that if set to no, Space admins can still rename or create/delete groups.
Allow delegated Group Actions Permitted
Options are Yes or No. Choose whether you want to allow Administrators the ability to delegate management of a group to other groups/users, or Space Administrators the ability to add/remove users from said delegated groups in the space view.
Show Group information
Options are Yes or No. Choose whether you want to show Group information such as Group description (currently only implemented for Crowd Groups) as well as the Source Directory where the Group originates from.
Space group pattern
Specify a group name prefix and/or suffix for all groups that are to be manageable by Space Administrators.
These fields should include SPACEKEY somewhere, which is a special term replaced with the contextually available Space key when admins use CSUM.
Changing this key will be immediate, and will prevent admins from finding and managing any group matching the old format.
Either a prefix or suffix must be present otherwise you will not be able to save your configuration.
If neither is set, Space admins will not be able to perform any CSUM operations and will be shown an error when attempting to access CSUM.
Once defined this should not be changed, as it will immediately apply, possibly excluding pre-existing space groups.
Group name allowed characters RegExp
This dictates what characters can be used for a new Group name when creating or renaming a Group.
The default value will be set to .* which means that as many of any characters can be used when creating or renaming a Group.
Excluding the Prefix and Suffix, the entire new Group name must match against the RegExp. If any characters don’t match then the Group will not be created or renamed.
Max Number of UserIds to Act On at One Time
Sets the limit of how many users a Space Administrator can add at one time.
Max Number of GroupIds to Act On at One Time
Sets the limit of how many groups a Space Administrator can create at one time.
Hide Operations Group Select
Hides the Import Groups dropdown(s) in the Space Page Operations (Add Users / Remove Users modals).
Server-Side Group Table Pagination
Enables the Space Page Datatables serverSide processing setting, improving performance of rendering Groups / Delegated Groups in the respective table.
Group Blocklist
When you add a group to the Group Blocklist field, they will no longer be used in for certain app features, these include:
The group wont be shown in any Group selectors other than at the System configuration level, one example is that they wont be able to be seen by Space admins when attempting to add users from within a specified group or just adding the blocklisted group to another group itself. This also applies to delegated groups
The group wont appear and therefore wont be able to be imported to another space
The group wont be able to be manipulated by bulk changes (csv)
Allow space admins to delete audit data
When this is off, Space admins are no longer able to delete any audit data from Spaces that they can manage, from the audit tab.
User
Allow remove current user from global permission group
Options are Yes or No. Choose whether you want to allow the current user to be removed from a global permission group manually or through a CSV task. Default set to no.
Disabled User Visibility
Choose whether to hide disabled users in CSUM tables or show them but add a “deactivated” flag to the end of their table entry.
User Group Filter
Select which group you would like to visually filter by in CSUM table views, any users not belonging to a selected group will have a ‘FILTERED GROUP’ flag added to any CSUM table entry.
Auto join groups
Select groups here that any user who is added through CSUM will gain membership of.
User search enabled
Options are Yes or No. Setting this to Yes allows Space Administrators to perform user searches when defining users for an operation (adding to a group for example). This is useful as it means Space Administrators do not have to rely on knowing the exact details of the users they are looking for. However, you may want this set to No if there may be security measures in place meaning that you do not want Space Administrators to see all users in Confluence.
Example showing how specific Directories can be included in user searching
Customize User Search Directories
By default, CSUM will use Confluence default search for users that includes all configured User Directories. Its possible that a broken directory (intentional or other) will cause the search to fail. New in 3.0.16 is the ability to select from defined User Directories, those which should be queried for users. If a custom search is set, at least one User Directory needs to be set, otherwise default search behaviour will result.
Example showing LDAP used to source user data
User Lastname Extraction Strategy Since 3.1.2
This feature adds a new ‘Lastname’ Column to Group Member tables to allow tables to be sorted by Lastname. The Lastname is extracted form the user's ‘Full Name’ according to the selected Extraction Strategy. If no Lastname is found the ‘Full Name’ will be used instead.
Note: By Default CSUM will set this value to 'None' which will not add the new Column.
Examples:
The following shows how the Lastname would be extracted from a selection of names using each strategy.
Full Name | None | [Lastname] Firstname(s) | Firstname(s) [Lastname] | Firstname [Lastname(s)] |
|---|---|---|---|---|
Blogs, Joe Annon | Not Shown | Blogs | Annon | Joe Annon |
Example User | Not Shown | Example | User | User |
Example Multiple Lastname User | Not Shown | Example | User | Multiple Lastname User |
Comma,Separated,Names | Not Shown | Comma | Names | Separated Names |
Cache Expiry
Setting | Description |
|---|---|
Configuration | Set the duration of which the Configuration cache will expire. The default value is 24 hours. |
Space Groups | Set the duration of which the Space Groups cache will expire. The default value is 12 hours. |
Delegated Groups | Set the duration of which the Delegated Groups cache will expire. The default value is 5 minutes. |
Hide Operations User Select
Hides the Import Users dropdown(s) in the Space Page Operations (Add Users / Remove Users modals).
Server-Side User Table Pagination
Enables the Space Page Datatables serverSide processing setting, improving performance of rendering Users / Delegated Users in the respective table.
General
Personal Space User/Group Administration Allowed
Options are Yes or No. Choose whether or not you want users that have personal spaces to be allowed to administer users/groups for their space. This is not recommended, so if you are unsure choose NO.
Use Redirects to Refresh Group Membership
Options are Yes or No. Choose whether redirects occur when refreshing group membership views in your browser.
Add-on Deactivated
Prevents usage of the add-on. While this may sound like an unnecessary duplication of the standard way of disabling the add-on, it can be useful as this way allows you to specify a downtime message which is not currently possible through normal disabling.
Add-on Downtime Message
The message that is shown when the add-on has been disabled using the Plugin Deactivated setting mentioned above. If left blank, a default message will be used. The field does not currently support wiki syntax.
Once you are happy with the configuration, click the Save button located at the bottom of the configuration page.