Admin : Space Group Config

Space Group Configuration

Pre CSUM 4.0.10

 

Data Centre instances of Confluence will see an additional section:

 

Post CSUM 4.0.10

Group tab

User tab

General tab

Group

Global Permission Groups can only be manipulated through Delegated Groups. Specified Groups or Users must be authorised to this Global Group as a Delegated Group by a system admin before they can add/remove users to the Global Group within the Space configuration CSUM Delegated Group tab.

Allow space group actions permitted

Options are Yes or No. Choose whether you want to allow Space Administrators the ability to perform add/remove operations on groups specified via group matching (see Space group pattern). Note that if set to no, Space admins can not still rename or create/delete groups.

Allow Space group add/remove users permitted

Options are Yes or No. Choose whether you want to allow Space Administrators the ability to perform add/remove operations on groups specified via group matching (see Space group pattern). Note that if set to no, Space admins can still rename or create/delete groups.

Allow delegated Group Actions Permitted

Options are Yes or No. Choose whether you want to allow Administrators the ability to delegate management of a group to other groups/users, or Space Administrators the ability to add/remove users from said delegated groups in the space view.

Show Group information

Options are Yes or No. Choose whether you want to show Group information such as Group description (currently only implemented for Crowd Groups) as well as the Source Directory where the Group originates from.

Space group pattern

Specify a group name prefix and/or suffix for all groups that are to be manageable by Space Administrators. 

These fields should include SPACEKEY somewhere, which is a special term replaced with the contextually available Space key when admins use CSUM. 

Changing this key will be immediate, and will prevent admins from finding and managing any group matching the old format.

  • Either a prefix or suffix must be present otherwise you will not be able to save your configuration.

  • If neither is set, Space admins will not be able to perform any CSUM operations and will be shown an error when attempting to access CSUM.

  • Once defined this should not be changed, as it will immediately apply, possibly excluding pre-existing space groups.

Group name allowed characters RegExp

This dictates what characters can be used for a new Group name when creating or renaming a Group.

The default value will be set to .* which means that as many of any characters can be used when creating or renaming a Group.

Excluding the Prefix and Suffix, the entire new Group name must match against the RegExp. If any characters don’t match then the Group will not be created or renamed.

Max Number of UserIds to Act On at One Time

Sets the limit of how many users a Space Administrator can add at one time.

Max Number of GroupIds to Act On at One Time

Sets the limit of how many groups a Space Administrator can create at one time.

Hide Operations Group Select

Hides the Import Groups dropdown(s) in the Space Page Operations (Add Users / Remove Users modals).

Server-Side Group Table Pagination

Enables the Space Page Datatables serverSide processing setting, improving performance of rendering Groups / Delegated Groups in the respective table.

Group Blocklist

When you add a group to the Group Blocklist field, they will no longer be used in for certain app features, these include:

  • The group wont be shown in any Group selectors other than at the System configuration level, one example is that they wont be able to be seen by Space admins when attempting to add users from within a specified group or just adding the blocklisted group to another group itself. This also applies to delegated groups

  • The group wont appear and therefore wont be able to be imported to another space

  • The group wont be able to be manipulated by bulk changes (csv)

Allow space admins to delete audit data

When this is off, Space admins are no longer able to delete any audit data from Spaces that they can manage, from the audit tab.

User

 

Allow remove current user from global permission group

Options are Yes or No. Choose whether you want to allow the current user to be removed from a global permission group manually or through a CSV task. Default set to no.

Disabled User Visibility

Choose whether to hide disabled users in CSUM tables or show them but add a “deactivated” flag to the end of their table entry.

User Group Filter

Select which group you would like to visually filter by in CSUM table views, any users not belonging to a selected group will have a ‘FILTERED GROUP’ flag added to any CSUM table entry.

Auto join groups

Select groups here that any user who is added through CSUM will gain membership of.

User search enabled

Options are Yes or No.  Setting this to Yes allows Space Administrators to perform user searches when defining users for an operation (adding to a group for example).  This is useful as it means Space Administrators do not have to rely on knowing the exact details of the users they are looking for.  However, you may want this set to No if there may be security measures in place meaning that you do not want Space Administrators to see all users in Confluence.

Example showing how specific Directories can be included in user searching

 

Customize User Search Directories

By default, CSUM will use Confluence default search for users that includes all configured User Directories.  Its possible that a broken directory (intentional or other) will cause the search to fail.  New in 3.0.16 is the ability to select from defined User Directories, those which should be queried for users.  If a custom search is set, at least one User Directory needs to be set, otherwise default search behaviour will result.

Example showing LDAP used to source user data

User Lastname Extraction Strategy Since 3.1.2

This feature adds a new ‘Lastname’ Column to Group Member tables to allow tables to be sorted by Lastname. The Lastname is extracted form the user's ‘Full Name’ according to the selected Extraction Strategy. If no Lastname is found the ‘Full Name’ will be used instead.

 

Note: By Default CSUM will set this value to 'None' which will not add the new Column.

 

Examples:

The following shows how the Lastname would be extracted from a selection of names using each strategy.

Full Name

None

[Lastname] Firstname(s)

Firstname(s) [Lastname]

Firstname [Lastname(s)]

Full Name

None

[Lastname] Firstname(s)

Firstname(s) [Lastname]

Firstname [Lastname(s)]

Blogs, Joe Annon

Not Shown

Blogs

Annon

Joe Annon

Example User

Not Shown

Example

User

User

Example Multiple Lastname User

Not Shown

Example

User

Multiple Lastname User

Comma,Separated,Names

Not Shown

Comma

Names

Separated Names

 

Cache Expiry

Setting

Description

Setting

Description

Configuration

Set the duration of which the Configuration cache will expire. The default value is 24 hours.

Space Groups

Set the duration of which the Space Groups cache will expire. The default value is 12 hours.

Delegated Groups

Set the duration of which the Delegated Groups cache will expire. The default value is 5 minutes.

 

Hide Operations User Select

Hides the Import Users dropdown(s) in the Space Page Operations (Add Users / Remove Users modals).

Server-Side User Table Pagination

Enables the Space Page Datatables serverSide processing setting, improving performance of rendering Users / Delegated Users in the respective table.

General

 

Personal Space User/Group Administration Allowed

Options are Yes or No.  Choose whether or not you want users that have personal spaces to be allowed to administer users/groups for their space.  This is not recommended, so if you are unsure choose NO.

Use Redirects to Refresh Group Membership

Options are Yes or No.  Choose whether redirects occur when refreshing group membership views in your browser.

Add-on Deactivated

Prevents usage of the add-on.  While this may sound like an unnecessary duplication of the standard way of disabling the add-on, it can be useful as this way allows you to specify a downtime message which is not currently possible through normal disabling.

Add-on Downtime Message

The message that is shown when the add-on has been disabled using the Plugin Deactivated setting mentioned above.  If left blank, a default message will be used.  The field does not currently support wiki syntax.

Once you are happy with the configuration, click the Save button located at the bottom of the configuration page.