Access Control

• The access to the crossTerm Web suggestion module can be controlled in two different ways:
• Rights-Based Access to the Suggestion Module
• Access to the Suggestion Module for AD Groups

Rights-Based Access to the Suggestion Module

The access to the suggestion module can be controlled via the Workflows section and the All workflows subsection of the user group rights of crossTerm. Members of the respective user groups (including the crossTerm Web user groups crossTerm Web read/write access and crossTerm Web read-only access) can be granted the right to suggest terms. By default, the user groups crossTerm Web read/write access and crossTerm Web read-only access have this right. Moreover, members of the respective user groups can be assigned the right to change the state of term suggestions. Users who have this right are permitted to process term suggestions. By default, members of the user group crossTerm Web read/write access have this right.

Access to the Suggestion Module for AD Groups

In addition to normal Across users, members of groups from Windows Active Directory can also be granted access to the crossTerm Web suggestion module. In this way, even people with no Across account can suggest terms.

In the properties of the user groups crossTerm Web read/write access and crossTerm Web read-only access, the desired Windows Active Directory groups can be determined. The members of the selected AD groups automatically have the rights for the access to the suggestion module of the respective crossTerm Web user group.

1. To grant AD groups access to the proposal module, proceed as follows:
2. In the module bar on the left, select the menu item Administration > Groups to enter the Groups module and select the required crossTerm Web group.
3. Click Properties.
4. Go to the AD Groups tab.
5. Click Add to add the AD groups whose members are to be granted access to the suggestion module.
   
   Tip

   Members of an AD group who have access to the suggestion module merely need to select the Windows authentication type in order to log in to the suggestion module. They do not need to enter a user name and password.

The login can be configured by means of a preset of crossTerm Web so that Windows authentication is already preselected. The manual selection of the Windows authentication is no longer necessary, so that the registration in the proposal module is additionally simplified.

Further information is available at:

Configuration

Furthermore, crossTerm Web can be configured in such a way that the login dialog is skipped if the Windows authentication is used for the login.

Members of AD groups with access to crossTerm Web that log in to the crossTerm Web suggestion module and for which users already exist under the same name in Across will appear twice in Across (e.g. in filters of crossTerm Web): Once as Across users and once as members of the respective AD group. It is therefore recommended that members of AD groups that have already been created as users in Across always log on with the Across user data in the suggestion module.

Across users with Windows authentication who are also members of an AD group with access to crossTerm Web must be members of the crossTerm Web group over which the members of the AD group access crossTerm Web. Within this group, Across users with Windows authentication must also have the needed rights for creating suggestions.