Map Permission Roles to OUs


Map Permission Roles to OUs

You can map users and user groups to a permission role for a specific OU from its Manage User Permissions dialog box. This allows you to assign users permissions for that OU, including managing and browsing the OU and its projects and children.

Note: the Manage User Permissions screen only grants users and groups permissions for the object you are currently editing (i.e., for the selected OU). It applies to child objects only when it explicitly says "browse child" or "manage child." If you want a user or group to have permissions that apply across all of Kion's objects, you'll need to change the Global Permissions User Mapping.

To access the Manage User Permissions menu:

  1. In the left navigation menu, click OUs > All OUs.
  2. Click on the ellipsis menu on the OU's card and select Manage User Permissions.
  3. Use the Users and Groups dropdowns to select and deselect the users and groups to manage and browse this OU and objects associated with it. For more information about what these permissions grant, see the Permission Types article.
  4. Click Save.


The Manage User Permissions screen allows you to change the user and user groups assigned to each role for this OU. To change the permissions for a role, you can see the Edit a Permission Scheme article. The permission scheme you see here is the one that was set for the OU; to set a different permission scheme for this OU, see the Edit an OU article.

Users can be granted permissions at various origin points. You can learn where each user was granted their permissions using the permissions explorer, which allows you to view origins by user or by permission. To do this, click on the OU's name in the OU list and click the Permissions tab. Then select a user, permission, and role to see the permission's origin. You can also click the By Permission tab to select a permission, user, and role to see its origin.



Was this article helpful?
0 out of 0 found this helpful