Assignments are additive

If User has access to a logbook by at least one rule - User is able to see the Logbook 

If User has access to a logbook with some Role by at least one rule - User is able to do all operations with the Logbook which the Role allows

Terminology

CONFIDENTIAL Logbook is a logbook with Privileged and Confidential option enabled

NON-CONFIDENTIAL Logbook is a logbook with Privileged and Confidential option disabled

Custom Assignments

Applicable to: a Logbook with Custom Assignments (including CONFIDENTIAL Logbooks)

Access granted to:

1. Users that are selected in Logbook page / Assignments tab
   • with roles from Admin / Users / Edit dialog
2. Members of User Groups that are selected in Logbook page / Assignments tab
   • with roles from Add Assignment dialog - if Consider Roles option of User Group is enabled
   • with roles from Admin / Users / Edit dialog - if Consider Roles option of User Group is disabled

Company Defaults

Applicable to: NON-CONFIDENTIAL Logbooks

Access granted to:

1. Users that are selected in Admin / User Groups / Default User Groups page / Default Logbook Assignments section
   • with roles from Admin / Users / Edit dialog
2. Members of User Groups that are selected in Admin / User Groups / Default User Groups page / Default Logbook Assignments section
   • with roles from Add Assignment dialog - if Consider Roles option of User Group is enabled
   • with roles from Admin / Users / Edit dialog - if Consider Roles option of User Group is disabled

Inherited from Org Unit/Entity Pair

Applicable to: NON-CONFIDENTIAL Logbooks

Access granted to:

1. Users that are given access to Logbook's Org Unit / Entity pair
   • with roles from Admin / Users / Edit Assignments page
2. Members of User Groups that are given access to Logbook's Org Unit / Entity pair
   • with roles from Admin / User Groups / Edit Assignments page - if Consider Roles option of User Group is enabled
   • with roles from Admin / Users / Edit dialog - if Consider Roles option of User Group is disabled

Confidential

Applicable to: CONFIDENTIAL Logbooks

Access granted to:

1. Users that are given access to Logbook's Org Unit / Entity pair
   • with roles from Admin / Users / Edit Assignments page that meet Role-Requirements
2. Members of User Groups that are given access to Logbook's Org Unit / Entity pair
   • with roles from Admin / User Groups / Edit Assignments page that meet Role-Requirements - if Consider Roles option of User Group is enabled
   • with roles from Admin / Users / Edit dialog that meet Role-Requirements - if Consider Roles option of User Group is disabled

Role-Requirements:

• Role must have option Can View Confidential Logbook enabled

Note: If User or User Group is assigned to Logbook's Org Unit / Entity pair, but Role-Requirements are not met - user does not have access to the Logbook

Owner

Applicable to: all Logbooks (including CONFIDENTIAL Logbooks)

Access granted to:

1. User that created the Logbook
   • with roles that user has against Logbook's Org Unit / Entity pair (including assignments of User Groups the user is member of)

Note: If User is not assigned to Logbook's Org Unit / Entity pair - user does not have access to the Logbook