Admins will now have greater control over which OUs their users have access to for each product. Several user interface changes have been made to the Add/Edit User Panels and CSV Upload in Org Management that enable users to specify which OUs a user has access to within each product. Prior to this new update, only Admin could utilize OU based restrictions, whereas the new design allows users to select OU based restrictions for any GG products that support them.
Organization Management Changes
Add/Edit User Panel Update
The layout and user interface for the Add/Edit User panel has been updated to allow users to select OU based restrictions for any GoGuardian products which support them. This allows for increased flexibility and more granular access control.
This has all products and roles in a list, and OUs (that apply only to Admin) listed below the list of roles.
New View - Collapsed
New View - Expanded (Admin)
Admin users can select a product role and which OUs users should have access to. These OUs come from the selected OU sync source on the Integrations page.
Note: Teacher, Beacon, and Director only have a role option in their drop down, as OU access works differently for these products.
New View - Expanded (Fleet)
Fleet users can select a product role and which OUs users should have access to. These OUs will come from the Fleet/GAC sync, which is a different source than Admin.
CSV Upload Changes
The User Management CSV upload has been updated to add support for Fleet OUs. In order to do this, some fields have been modified:
We’ve renamed the following columns:
admin → admin_role
teacher → teacher_role
fleet → fleet_role
director → director_role
beacon → beacon_role
ou_access → admin_ou
We added a new fleet_ou column
We changed the following behavior
Previously, if a column was missing from the upload, the missing column would be wiped from the DB. Now, the missing column is ignored.
Product roles are now required fields. OU fields are still not required.
CSV upload will be backwards compatible, customers can still upload the old template if they choose to. In this case, the ou_access column on the old template will update the admin_ou field.