Network Users, Groups, and Privileges
For all Network and dataverse users, you can do the following:
Manage New Dataverses Invitation
You can invite users to create a dataverse in the Network. When you enable this invitation, the Create your own Dataverse link is displayed in the top-right corner. Users click this link to create a dataverse in the Network.
To invite users to create a dataverse in your Network:
- Navigate to the Network homepage.
- Click Network Options in the top-right corner, scroll to Network Users, Groups, Privileges, and then click Manage Users Privileges.
You see the Dataverse Creation and Network Users' Privileges page.
- Under Creating a New Dataverse, click the check box for the option Allow users to request to create a new Dataverse when they create an account.
- Click Save Changes to keep your changes, or click Cancel to lose your changes.
On the Network homepage, the Create your own Dataverse link is displayed.
Manage User Privileges
You can add users to the Privileged List and then assign roles to those users. You can grant users the privileges of a Network Admin, who can access and use the Network Options page, or a Dataverse Admin, who can create and manage dataverses and permit other users access to their dataverses.
You also can clear a role, removing any privileges assigned to a user at any time.
Read the following topics for detailed information about these tasks:
Add User to Privileged List
To add a user to the Privilged List and assign a privileged role to that user:
- Log in and navigate to the Network homepage.
- Click Network Options in the top-right corner, scroll to Network Users, Groups, Privileges, and then click Manage Users Privileges.
You see the Dataverse Creation and Network Users' Privileges page.
- Under the Network Privileged Users settings enter the username for the selected account in the Enter the Username text field, and then click Add.
The account is added to the Network Priviledged Users list.
- Click the radio button for the role that you choose to assign to this user.
Note:You must assign a Privileged Role to the user before you click Save Changes, or the user is not added to the Privileged Users list. See Assign Roles for details.
- Click Save Changes to save your work. Or click Cancel to lose your changes.
If your save was successful, you see an Update Successful! message.
Assign Roles
To manage creator and Network permissions for user accounts:
- Log in and navigate to the Network homepage.
- Click Network Options in the top-right corner, scroll to Network Users, Groups, Privileges, and then click Manage Users Privileges.
You see the Dataverse Creation and Network Users' Privileges page.
- Under the Network Privileged Users settings, locate the username for the selected account to which you choose to assign a role.
- To grant a user Network Admin privileges and give that user permission to use Network Options, click the radio button in front of the Network Admin role.
To grant a user Dataverse Admin privileges and give that user permission to create and manage dataverses, click the radio button in front of the Dataverse Creator role.
- Click Save Changes to save your work. Or click Cancel to lose your changes.
If your save was successful, you see an Update Successful! message.
Clear Roles
To remove permissions for user accounts:
- Log in and navigate to the Network homepage.
- Click Network Options in the top-right corner, scroll to Network Users, Groups, Privileges, and then click Manage Users Privileges.
You see the Dataverse Creation and Network Users' Privileges page.
- Under the Network Privileged Users settings, locate the username for the selected account for which you choose to remove a role.
- To remove creator or Network privileges from a user, click the Clear Role button in the row for that account.
- Click Save Changes to save your work. Or click Cancel to lose your changes.
If your save was successful, you see an Update Successful! message.
Add New User Account
To create an account for a new user in your Network:
- Log in and navigate to the Network homepage.
- Click Network Options, scroll to Network Users, Groups, Privileges, and then click Add New User Account.
You see the Create a New Account page.
- Complete the account information page.
Enter values in all required fields.
- Click Create Account to save your entries, or click Cancel to lose them.
If your save was successful, you see a message that the account was created.
Manage Users
You can do the following for all user accounts in the Network:
Edit Accounts
To edit an existing user account's information or change the password:
- Log in and navigate to the Network homepage.
- Click Network Options, scroll to Network Users, Groups, Privileges, and then click Manage Users.
You see the All Users in [Your] Dataverse Network page.
- In the Username column, click the account name of the user for whom you choose to edit information.
You see the Account for [username] page.
- To edit the account settings, click the Update Account link in the top-right corner.
To change the account password, click the Change Password link.
To exit the account page without making any changes, click the Go To All Users List link.
- If you chose to edit the account or change the password, you see the Edit Dataverse Network Account page.
Enter or change the values on this page.
Note: If you chose to change the password, be sure to enter your Network admin password in the Current Password field.
- Click Save to apply your changes, or click the browser's Back button to leave this page and lose your changes.
If your save was successful, you see a message that the account was updated.
Deactivate Accounts
You can make user's accounts inactive and prohibit them from logging in to the Network. You also can reactive the accounts at any time. It is not possible to delete an account after you set it up.
To deactivate a user account:
- Log in and navigate to the Network homepage.
- Click Network Options, scroll to Network Users, Groups, Privileges, and then click Manage Users.
You see the All Users in [Your] Dataverse Network page.
- To change the status of a user account from Active to Inactive, click the Deactivate link in the Status column of that account.
To change the status of a user account from Inactive to Active, click the Activate link in the Status column of that account.
Manage Groups
You can create user groups based on account names or IP addresses.
For example, you can create a user group for an organization and enable affiliate users of that organization's domain to access the Network. Or you can create a group based on some organizational criteria and add user accounts to the group to help you track those accounts collectively.
See the following topics for detailed information about how to manage users and IP groups:
Create a User Group Based on Account Names
To create a user group based on account names:
- Log in and navigate to the Network homepage.
- Click Network Options, scroll to Network Users, Groups, Privileges, and then click Manage Groups.
You see the User Groups in [Your] Dataverse Network page.
- Click the Create a New Group link at the top of the group list.
You see the User Group page.
- Enter a Group Name, and enter an easily referenced name in the Friendly Group Name field.
- Click the radio button in front of the Username Group option.
The radio button options are removed, and a Usernames field is displayed for you to add users to the group.
- Enter the username for an account that you choose to add to this group.
- To add another name, click the plus-sign beside a username entry, and then enter the next username in the additional field.
To remove a user from the group, click the minus-sign beside that username.
- When the list of users is complete, click Save to create the group, or click Cancel to lose your edits.
The User Groups in [Your] Dataverse Network page is displayed, and your new group is listed on the page.
Create a User Group Based on IP Addresses
To create a user group based on IP addresses:
- Log in and navigate to the Network homepage.
- Click Network Options, scroll to Network Users, Groups, Privileges, and then click Manage Groups.
You see the User Groups in [Your] Dataverse Network page.
- Click the Create a New Group link at the top of the group list.
You see the User Group page.
- Enter a Group Name, and enter an easily referenced name in the Friendly Group Name field.
- Click the radio button in front of the IP User Group option.
The radio button options are removed, and the IP Addresses/Domains field is displayed for you to add users to the group. A check box, labeled This IP group has an affiliate login service, also is displayed at the bottom of the IP Addresses/Domains list.
- Enter the IP address or domain name that you choose to add to this group.
- Click the check box beside the This IP group has an affiliate login service field if the domain has one or more login services associated with it.
New fields are displayed for you to enter the affiliate names and associated URLs for the services.
- Enter the login service name and URL, if appropriate.
- To add another address, click the plus-sign beside an entry in the IP Addresses/Domains field, and then enter the next address in the additional field.
If you enter a login service domain, be sure to enable and enter the login service fields for that domain.
To remove an address or domain from the group, click the minus-sign beside that address.
- When the list of addresses and domains is complete, click Save to create the group, or click Cancel to lose your edits.
The User Groups in [Your] Dataverse Network page is displayed, and your new group is listed on the page.
Edit a User Group
To edit the members of a user group:
- Log in and navigate to the Network homepage.
- Click Network Options, scroll to Network Users, Groups, Privileges, and then click Manage Groups.
You see the User Groups in [Your] Dataverse Network page.
- In the group list, click the Group name or Friendly Group Name for the entry that you choose to edit.
You see the User Group page containing the existing group set up.
- To edit the group name or friendly group name, change the existing values in the name fields.
- To add a new user or address, click the plus-sign beside an existing entry, and add the new member in the additional field.
If you enter a login service domain, be sure to enable and enter the login service fields for that domain.
To remove an existing member, click the minus-sign beside the entry that you choose to remove from the group.
- Click Save to save the edited user group, or click Cancel to lose your edits.
You see the User Groups in [Your] Dataverse Network page. If your save was successful, you see a Successful message at the top of the list.
Delete a User Group
When you delete a user group from the Network, any privileges that you assigned to that group are no longer available to members of the group.
Note: There is no confirmation step to prevent you from deleting a user group accidentally. If you click the link to delete a user group, that group is deleted from the Network immediately.
To delete a user group:
- Log in and navigate to the Network homepage.
- Click Network Options, scroll to Network Users, Groups, Privileges, and then click Manage Groups.
You see the User Groups in [Your] Dataverse Network page.
- In the group list, locate the group that you choose to delete, and then click the Delete Group link in the row for that entry.
The deleted user group is removed from the list on the User Groups in [Your] Dataverse Network page.
Advanced Setting for Custom Authentication
Release 1.3 includes an experimental feature that enables Network users to access restricted content on another DVN, or in another location where Basic HTTP authentication is used.
You must arrange with the remote institution to create an account for you, grant that accout the desired access privileges, and pass the credentials (username and password) to you.
To configure privileged access, create an entry in the RemoteAccessAuth database table by using the following command:
INSERT INTO RemoteAccessAuth (id, hostname, authtype, authcred1,
authcred2) VALUES (1, 'REMOTEHOST', 'dvn', 'REMOTEUSER',
'REMOTEPASSWORD');
In this command, authtype is set to dvn. If you are authenticating via HTTP/Basic Auth, set this to httpbasic.
Note: You must grant access to these materials only to authorized users of your DVN, in accordance with the access agreement between you and the provider institution.