In Tosca you can manage the following access rights:

• visibility of folders and objects

• write permissions for folders and objects

• write permissions for user groups

• access rights for specific operations

How to limit the visibility of folders and objects - ViewingGroupName

To determine the object that should be visible to a certain user group:

• select the property ViewingGroupName from an object and then choose the required user group in the drop-down menu in the Value column. The drop-down list includes all user groups that are currently defined.

• select the required user group in the Usermanagement tab. Drag the user group onto the according object in the workspace while keeping the Shift key pressed. Select the option Assign Viewer from the appearing menu.

  The value of the property ViewingGroupName is adjusted for the respective object.

• assign the user group simultaneously to several objects and folders by selecting Modify->ViewingGroupName from the context menu or the dynamic menu (see chapter "Modify objects via the context menu").

How to limit write permissions for folders and objects - OwningGroupName

To determine the user group that should have write access for a specific object:

• select the property OwningGroupName from an object and then choose the required user group in the drop-down menu in the Value column. The drop-down list includes all user groups that are currently defined. The property OwningGroupName overrides the property ViewingGroupName: If the OwningGroupName is e.g. All Users, all users are able to see the project, regardless of what value you have selected for ViewingGroupName.

• select the required user group in the Usermanagement tab. Drag the user group onto the according object in the workspace while keeping the Shift key pressed. Select the option Assign Owner from the appearing menu.

• assign the user group simultaneously to several objects and folders by selecting Modify->OwningGroupName from the context menu or the dynamic menu (see chapter "Modify objects via the context menu").

Inherited means that the parent object will take over the assigned user group.

How to limit write permissions for user groups

You can assign user groups to other user groups as Owning Group, provided that the Owning Group contains at least one Admin user.

Only administrators of the Owning Group can make changes to subordinated user groups.

To determine the user group that should have write access for another user group:

• Go to the Usermanagement tab and select the user group which should be provided with write permissions from the Owning Group column.

• Drag the user group which should receive write permissions onto the required user group and drop it there. If your user groups consist of various hierarchical levels, please make sure that you hold the Shift key down upon dragging and dropping (see chapter " Use hierarchical user groups").

How to define access rights for specific operations - classifying users

Use the Level column in the Usermanagement tab to define the operations that users are allowed to perform.

The following categories are available:

User management - level categories

Level	Description
Expert	Users of this level have access to all functions and operations. This is the default level for each user.
Advanced	Same as Expert: users have access to all functions and operations.
Basic	Users of this level can't replace Modules with other Modules (see chapter "Replace Modules").