Suggested User Groups and Task Permission Assignments

The following groups and task permission assignments can be used as a guideline when setting up your Milan groups and users.

Common User Groups

Group Name	Description
End Users	Users who work exclusively with the desktop client
Risk Management Team	Users responsible for matter security policies
Tier One Help Desk	First level help/service desk users
Tier Two Help Desk	Second level (escalated) help/service desk users
Administrators	WorkSite/System administrators responsible for implementing, configuring, and maintaining Milan and WorkSite systems

Suggested Permissions

Task Permission	End Users	Risk Management Team	Tier 1 Help Desk	Tier 2 Help Desk	Administrators
Administration: Admin
Administration: Allow users to add themselves to security and group membership
Administration: Allow users to configure Restricted Client/Matter
Administration: Analytics Center
Administration: Background Services
Administration: Configure Milan Nrtadmin account
Administration: Delete groups
Administration: Delete metadata
Administration: Delete roles
Administration: Delete users
Administration: Edit configuration files
Administration: Edit folder templates
Administration: Edit groups
Administration: Edit metadata
Administration: Edit Milan configuration
Administration: Edit Nrtadmin group
Administration: Edit roles
Administration: Edit users
Administration: Import Center
Administration: Legal Hold
Administration: Reports Center
Administration: Security Center
Administration: Self-service
Administration: Service Center
Administration: View groups
Administration: View metadata
Administration: View roles
Administration: View users
Administration: WS Admin
Analytics: Advanced Analytics
Analytics: Apply Template
Analytics: Create query
Analytics: Edit query
Analytics: Execute query
Analytics: Preview document
Client Series: Create Workspace
Client Series: Manage
Documents: Add to Recycle Bin
Documents: Allow searching by name
Documents: Download
Documents: Download via client
Documents: Edit profile
Documents: Edit security
Documents: Edit security client
Documents: Import
Documents: Move
Documents: Move (old)
Documents: Permanently delete
Documents: Remote check-in
Documents: Search
Documents: Send link
Documents: Super user add to recycle bin
Documents: Undeclare
Documents: Unlock
Documents: View history
Documents: View private name
Documents: View profile
Documents: View public name
Documents: View security
Documents: View supervised document
Folders: Add folders to recycle bin
Folders: Create
Folders: Create simple
Folders: Edit Folder
Folders: Edit security client
Folders: ManageFoldersClient
Folders: Move
Folders: Permanently delete
Folders: Super Folder Creation
Folders: View private name
Folders: View public name
General: Login
Legal Hold: Edit
Legal Hold: View
Policy (Refile) Service: Edit refile rules
Policy Center: View acknowledgments
Security Center: Edit confidentiality
Security Center: Edit exclusions
Security Center: Edit inclusions
Security Center: View exclusions
Security Center: View inclusions
Service Center: Edit service center
Workspace: Allow Umbria Metadata
Workspace: Reassign Template
Workspaces: Allow users to submit workspace request for approval of an administrator
Workspaces: Approve Workspace Request
Workspaces: Create
Workspaces: Edit profile
Workspaces: Edit security
Workspaces: Edit security client
Workspaces: Move
Workspaces: Organize My Matters
Workspaces: Organize Others' Matters
Workspaces: Permanently delete
Workspaces: Refile via SQL
Workspaces: Search
Workspaces: View private name
Workspaces: View profile
Workspaces: View public name
Workspaces: View security
Workspaces: Workspace Configuration dialog