There are two aspects to consider when assigning permissions, the first is access to view the environment itself, and the second is access to view the items within the environment. If a user has access to items within an environment, but has not been granted access to the environment itself, access to the items will only be possible via the APIs. The following table describes the different combinations of access levels:
Environment group permission | Result |
---|---|
Access to environment Access to items within the environment |
Members of the environment group will be able to access the environment and all items within the environment through both the user interface and the APIs. |
Access to environment No access to items within the environment |
Members of the environment group will be able to access the environment, but will not have access to the items within the environment. |
No access to the environment Access to items within the environment |
Members of the environment group will be able to access items within the environment via the APIs, but will not have access via the user interface. |
No access to the environment No access to items within the environment |
Members of the environment group will not be able to access the environment, or the items within the environment. |
Note: After an environment group is assigned to an environment, the environment group must be given a role or set of roles. An environment group's roles determine which elements of the user interface within a given environment the environment group can see. If no role is assigned to an environment group, users in that environment group will only see the home screen.