Granting rights in GPOAdmin requires you to first allow users to login to GPOAdmin and then you assign the rights those users should have to the version control system.
To permit a user to login to GPOAdmin:
- Open the GPOAdmin console as an account that has Administrator rights in GPOAdmin (by default, only the service account and the Enterprise Administrators group has this right when GPOAdmin is first installed)
- Right click the domain name and select Properties
- Select the Access tab
- Click the + next to Administrators or Users depending on what access you want to give the user to GPOAdmin. Administrators can make changes to the GPOAdmin configuration. Users can login to the console and are governed by the rights you assign them to the version control system
The rights users have to the version control system is determined by roles. There are 3 predefined roles:
- System Administrator
- Moderator
- User
The list of rights contained in each predefined role can be found in the GPOAdmin User guide under the section, Configuring role-based delegation. You can create new roles to provide as much granularity as needed. To create a new role:
- Open the GPOAdmin console as an account that has Administrator rights in GPOAdmin
- Right click the domain name and select Properties
- Select the Roles tab
- Click Add New Role
- Provide a name and click Next
- Select the rights the role should have and click Finish
To assign rights to the version control system:
- Open the GPOAdmin console as an account that has Administrator rights in GPOAdmin
- Right click the Version Control Root, Container or object and select Properties
- Select the Security tab
- Click Add
- Locate the user or group and click OK
- Select the role the user or group should have and click OK
Note: Permissions assigned to container in the Version Control Root are inherited by all objects in that container. If more granular permissions are needed, assign rights to only the specific objects needed.
