Security Node

The Modules node lists the three main components of Umbria: Umbria (user-facing interface), Administration (the Admin Panel), and Litigator (Umbria File Manager). Select a module and click the Security button at the top of the list to set Allow Rules and Deny Rules for particular users or user groups. These rules simply grant or deny initial access to the modules; access to different areas and functions within the three modules is managed at the individual role level.

This node lists all security roles that are read at the firm level rather than pertaining to a particular matter or client. Select a role to view the permissions granted in the Role Permissions list on the right. Alternatively, to see what roles are granted a particular permission, you can change the drop-down selection at the top of the screen from By Role to By Permission, which allows you to select a permission in the list on the left and see roles that are granted that permission in the list on the right.

If viewing By Role, you can add new roles, or double-click a role to edit it. On the Edit Role pop-up, you can do the following:

• Enter a Name and a Code for the role. You can modify the Name of an existing role, but the Code cannot be modified after the role is created.
• For the Mode, select one of the following:
  • Optimistic- If a user is granted a permission via this role but has other roles that do not grant that permission, the user will be granted the permission.
  • Pessimistic- If a user is granted a permission via this role but has other roles that do not grant that permission, the user will be denied the permission.
• Use the Add button to move selected permissions from the Available Permissions to the Assigned Permissions list.

If viewing By Permission, you can click the Edit button to change what roles are granted the selected permission. Use the Add button to move roles from the Available Roles to the Assigned Roles list.

Users are typically imported from Active Directory, so it would not be necessary to make changes in this node. Each user's department is also imported and often matches a group set up in Umbria, allowing the user to automatically be granted the appropriate permissions.

Here you can select a user on the left side of the screen to view all groups to which the user belongs on the right. You can also perform the following actions:

• Reset Password- Select the user and click the Reset Password button. In the pop-up window that displays, enter and confirm the new password, then click Confirm.

• View System Permissions- Select the user and click the System Permissions button to open a pop-up window showing the groups the user is a member of and the user's role in each, as well as the modules the user can access and the user's permission for each module.
• Modify Email Settings- Select the user and click User Settings → Email Settings.
  • Select Pending Tasks to determine whether the user receives an email when an assigned task is approaching its deadline.
  • Select Subscribed Budgets to change the days and time of day emails are sent regarding the budget status of matters this user is subscribed to.
• Update Localization Settings- Select the user and click User Settings → Localization Settings. Click the Edit button in the upper right corner of the screen to change any of the following:
  • Formatting Culture- Determines the regional formatting rules applied to data such as calendar dates and numbers (e.g., MM/DD/YY vs. DD/MM/YY, commas vs. periods as decimal separators).
  • Resource Culture- Determines the country/language tag for the code that is pulled into the Umbria UI, where applicable.
  • Preferred Currency- Determines the currency in which monetary values display by default throughout Umbria.
• Enable Exchange Sync- Select the user and click User Settings → Exchange Settings to enable contact sync with the user's Microsoft Exchange account.
• Enable LinkedIn Sync- Select the user and click User Settings → LinkedIn Settings to enable contact sync with the user's LinkedIn account. You will need to log in to LinkedIn.
• Set Budget Defaults- Select the user and click User Settings → Matter Planning Reference to determine how certain fields and available templates default when using the Create Budget or Request Matter Plan wizard. More information on these options is available in the User Settings section.
• Manage Bookmarks- Select the user and click User Settings → Manage Bookmarks to modify the display names of matters that display in the user's Subscriptions list on the Quick Actions screen. You can also remove one or more bookmarked matters by selecting them and clicking Options → Remove Selected.
• View Roles and Permissions- Select the user and click User Settings → Roles and Permissions. A list of roles and groups to which the user belongs displays. You can click a role or group to view all associated permissions, then click Back to return to the role/group list.
• Impersonate- Click User Settings → Impersonate to start or stop impersonating another user. See Impersonation for more information.
• Merge Users- Select this option to merge user information, in case you rename a user. This will help avoid any duplicate user details for the same person. On selecting this option two fields are displayed. From the Merge drop-down field, select the user to be merged, and in the Into Primary User, select the primary user. All the metadata associated to the user will be merged with the primary user and the earlier user will be marked as deleted in the system.

The Groups node shows all user groups that are used to categorize users for the purpose of granting security permissions. There are multiple ways of categorizing users (e.g., by department, or by personnel who work on particular types of matters), and the groups are listed by category. Available categories include Departments, Matters, People, Security, Users, Litigator, and Other.

You can view the number of users included in each group in the far right column of the list, and you can select a group to view or add users in the Members list on the right.

You can also select a group and click the External Accounts button to view and modify mappings between this group and a group in a source system such as Active Directory, Elite, or WorkSite.

Here you can modify access to different confidentiality levels of matters, clients, and documents. For example, you might allow all users to access documents with the lowest confidentiality level of Public, but each increasing level of confidentiality would be available to fewer users.

From the Select Object Type drop-down at the top of the screen, choose Client, Matter, or Document. A list of different confidentiality levels for the selected object displays.

To view all rules currently set up for a confidentiality level, select the confidentiality level and click the Grant and Deny tabs in the rule list on the right side of the screen.

This page is used when giving a user access when they are not billing to a matter. For example, a Practice Manager for a specific department may not bill time to matters but they may have can see everything associated with the matters by being assigned a role that allows them to see everything in that department.

This node displays a parent-child relationship of Groups and Members, each Group can have multiple Members. You are provided with options to add, edit, and remove multiple Group and Member entities, as well as filter Group entities and assign each group multiple members. You can also add and view Accounts from an external system for multiple groups.

Here you can see all security roles set up in the system and which permissions are granted to each.

After selecting a role, select a permission group to view all permissions included in that group. The Global permission group, for example, includes roles related to viewing and accessing certain areas of Umbria, while the People and Matters groups include roles related to performing actions on clients and matters/budgets, respectively.

In the Role Permissions list, each permission with the checkbox selected is granted to the selected role.

To add a new role, click the Add button at the top of the list.

• Enter a Name and a Code for the role. You can modify the Name of an existing role, but the Code cannot be modified after the role is created.
• For the Mode, select one of the following:
  • Optimistic- If a user is granted a permission via this role but has other roles that do not grant that permission, the user will be granted the permission.
  • Pessimistic- If a user is granted a permission via this role but has other roles that do not grant that permission, the user will be denied the permission.
• For the Module, select Umbria (Umbria interface), Administration (Admin Panel), or Litigator (also known as Umbria File Manager).

Here you can manage permission groups and the permissions included in each. After selecting a permission group, you can select an individual permission to view the roles granted this permission in the list on the right.

When adding a permission group, you must specify a Name as well as a Module of Umbria (Umbria interface), Administration (Admin Panel), or Litigator (also known as Umbria File Manager).

You can also add and edit permissions within each group.