In Mediafly Engagement, managing user and group permissions is crucial to ensuring a seamless and secure experience. This guide highlights the best practices for setting up and maintaining permissions to optimize user access and protect sensitive content. By adhering to these recommendations, you can avoid common pitfalls and ensure that users have the correct level of access.
Users often have incorrect access, leading to potential security risks or content mismanagement.
To prevent this from happening to you, we recommend the following best practices for set up and that you regularly review permissions to ensure that users only have access to what they need. This prevents unauthorized sharing or editing of content.
Best Practices for User Permissions
-
View Content: Allows users to view content within the platform.
Best Practice: Enable for all users who need access to view materials. -
Share Content: Grants users the ability to create shareable links and share content externally.
Best Practice: Enable for users who need to share content with clients or prospects. Be cautious with sensitive information. -
Manage Content: Permits users to add, update, and remove content within the platform.
Best Practice: Typically reserved for admin and marketing teams responsible for content management. -
Manage Access: Allows users to control who can access specific content.
Best Practice: Limit to admins and select marketing users to ensure proper content security. -
Manage Accounts: Grants the ability to add or remove users and assign permissions.
Best Practice: Restrict to admin users to maintain control over user access. -
View Reporting: Enables users to view usage reports and insights.
Best Practice: Typically granted to admin and marketing teams to analyze content performance.
Best Practices for Group Permissions
- Set Permissions at the Group Level: Always set permissions at the group level rather than the individual user level. This simplifies management and ensures consistency across similar roles.
- Use "For All Items" Permissions Sparingly: Be cautious with the "For All Items" option, as it overrides other permissions set at the group or content level. For example, if sensitive content is marked as view-only but a group has "Can Share For All Items," they could still share it.
Admin Group Permissions Typical Setup
- Full Access: Admins usually have access to all content and settings, including viewing, sharing, managing, and reporting.
- For All Items: Use this selectively for permissions like managing content and access, but ensure it aligns with security protocols.
Sales Group Permission Typical Setup
- Restricted Access: Sales teams often have more limited permissions, such as viewing, sharing, and downloading specific content.
- Manage Content: Enable only for necessary items, like editing templates or presentations.
- View Reports: Sales reps generally only need access to their own share data, not overall usage reports.
Marketing Group Permissions Typical Setup
- Moderate Access: Marketing teams usually have broader permissions than sales, including managing content and access to reporting for content audits.
- View Reports: Essential for analyzing content engagement and effectiveness.
Content-Level Permissions
- Assign Permissions at the Folder Level: Set permissions at the folder level to streamline access management. For example, a customer folder may have different levels of access for admins, sales, and marketing teams.
- Avoid Overriding Permissions with "For All Items": Ensure that specific permissions like "View Only" are not overridden by group-level settings.
General User & Group Permission Tips
- Group and Folder Level Permissions: Set up permissions at the group and folder level rather than individually to simplify management and reduce errors.
- Be Cautious with "For All Items": Always review and understand the implications of using "For All Items" permissions to avoid unintended access issues.
- Manage Content for Sellers: Only enable "Manage Content" for sellers when they need to edit specific templates or documents.
- Reporting for Sales Teams: Sales teams usually only need access to their own data, so consider disabling broader reporting permissions.
- Download Permissions: To allow downloads, ensure that both content and group permissions are set appropriately.
Replies have been locked on this page!