DRS User Guide/Grouper

From Digital Scholarship Group
Jump to navigation Jump to search

This page is no longer being updated.

The content of this page was saved elsewhere on August 22, 2018. This page can be removed.

Access and Rights Management



Restricting DRS Materials

When DRS users create collections or deposit material in the DRS they have the option of making the collection or file public or restricting access to only certain users and dictating who can discover, view, or download (in the case of files). Most files and collections are “public” and are therefore discoverable through searching and browsing, and files can be viewed any downloaded by anyone. Some DRS collections and files are “private” and are viewable only by the individual who created the collection or uploaded the file to the DRS. Others are “private”, but specific people and groups have been granted access to discover, view, and download.

Public vs. Private

Public collections and files:
  • can be found in DRS search and browse sessions
  • will be indexed by Google
  • can be shared with anyone
Private collections and files:
  • will not be indexed by Google
  • will be hidden from users who are not authorized to view and download the files. Authorized users must sign in to the DRS before accessing the file.

Read vs. Edit Permissions

The DRS maintains two different access states, read and edit.

Users who have Read access for a community, collection, or file can:

  • find a file through keyword searches
  • find a file through by browsing
  • view the full metadata for a file
  • download the file

Users who have Edit access can:

  • find a file through keyword searches
  • find a file through by browsing
  • view the full metadata for a file
  • download the file
  • edit the file's metadata

Managing Private Files Using Groups

The Northeastern University community changes regularly as new members join and leave, which requires the DRS to be as flexible as possible when managing access rights. To accommodate our fluid community, the DRS assigns read and access permissions for files to designated groups, rather than to individuals. This ensures access to files is not dependent on any one Northeastern community member, and it also minimizes the number of changes made to the file that manages access rights.

About Grouper

Grouper is a team management tool supported by Information Technology Services that allows users to easily create and manage lists of people, and the DRS uses this tool to manage groups with access to DRS collections and files. Once a group is created in Grouper it can be used in the DRS to set viewing and metadata editing privileges for collections and for files. The advantage to using Grouper to define your group is that it only needs to be managed in Grouper, and as an administrator of your group, you, not DRS staff, have control over who can access your, or your community’s, files or collections.

Accessing Grouper

To start curating groups in Grouper, visit https://neuidmsso.neu.edu/grouper and sign in with your MyNEU credentials. Although all NU staff have access to Grouper, you must be granted specific access to the DRS group. Please contact DRS staff for access to the DRS Grouper group.

Grouper Elements

Grouper groups are organized into folders, groups, and entities:

Error creating thumbnail: File missing
Folders
A container used to organize groups and other folders.
Error creating thumbnail: File missing
Groups
A collection of entities, which are considered members of the group.
Error creating thumbnail: File missing
Entities
A member of a group. Entities can be individuals and groups.

Navigating Groups

Error creating thumbnail: File missing
Left Navigation

The left navigation column contains two sections, "Quick Links" and "Browse Folders". Users may use the Quick Links section to navigate directly to the groups and folders they have access to.


Users may also use the Browse Folders section to browse Northeastern's full Grouper folder and group structure. To find the DRS folder, click the "+" to the left of the "Root" folder (the primary Northeastern folder), then click the "+" to the left of the "drs" folder. This will expand the "drs" folder and display all of the available DRS folders.


The DRS folders are loosely structured according to the Northeastern University community structure, with some exceptions for DRS administrative groups and a few older, migrated groups.

Creating Groups

DRS Grouper groups are created and managed by DRS administrative staff. Once a DRS staff member has added you to an existing group as an administrator, you can start managing that group.

Adding Users

Grouper is connected to the Northeastern University authentication system, which means only users that exists in the central authentication system can be added to a Grouper group. If you would like to add someone from outside the Northeastern community to a group, you will need to sponsor an account for that user.

To add a single user

   
  • Navigate to the desired group
  • Click the "+ Add members" button to the right of the group name
  • Search for the person you would like to add using the first part of his or her Northeastern email address (i.e. sj.sweeney or j.flanders)
  • Select the person you would like to add
  • Use the radio button to select "Default privileges" or "Custom privileges"
    • "Default privileges" will only allow the person to view the list of group names. Selecting "Default privilege" grants viewing privileges for the Grouper group, not DRS materials.
    • Use the "Custom privileges" option to add other "Update" users to the group. Update users may add and remove users from the Group. Selecting "Custom privileges" grants administrative privileges for the Grouper group, not DRS materials.
  • Click the "Add" button
Error creating thumbnail: File missing


To add multiple users

  • Navigate to the desired group
  • Click the "+ Add members" button to the right of the group name
  • Click "import a list of members" to the right of the "Add" button
  • Select the desired method to add multiple members:


Copy/paste a list of member IDs
   
  • Paste in the box a list of member IDs (the first part of the user's Northeastern email address)
  • Click "Validate entities"
  • If you would like to replace all members in a group with this list, check the "Replace existing members?" box
  • Click "Add Members"
  • View the "import results" report to confirm your additions were successful
Error creating thumbnail: File missing


Import A File
   
  • Create a new text file with the text "entityIdOrIdentifier" in the first line
  • Enter each new member's ID ((the first part of the user's Northeastern email address)) on their own line in the text file
  • Use the "Select a file to import" "Choose File" option to upload your file
  • If you would like to replace all members in a group with this file, check the "Replace existing members?" box
  • Click "Add Members"
  • View the "import results" report to confirm your additions were successful
Error creating thumbnail: File missing

Removing Users

   
  • Navigate to the desired group
  • Open the "Members" tab (this tab is often the default tab)
  • Check the box to the left of the name you would like to remove from the group
  • Click the "Remove selected members" button
Error creating thumbnail: File missing

Grouper in the DRS

Once a group a user has been added as member of a Grouper Group, that information becomes part of the record passed from the University's authentication system to the DRS. When a user signs in, the DRS reads the list of Grouper groups that user belongs to and determines what DRS materials he or she can read or edit.

Grouper Names and Paths

Grouper groups are identified by their "ID path", which is that group's unique string of folder and group names. This path is formatted as a series of names separated by colons, and in the DRS they will always begin with "northeastern:drs" :

College of Engineering's BSPIRAL Research Group
northeastern:drs:college_of_engineering:electrical_and_computer_engineering:bspiral
Northeastern University Libraries Digital Scholarship Group
northeastern:drs:library:dsg

To view the ID path, group description, or other information about the group or folder, click "More" beneath the tile and description in Grouper:

Error creating thumbnail: File missing

Giving Permissions to Groups in the DRS

In the DRS, users can assign read or edit access to a particular group for a file or collection in the DRS by selecting the Grouper ID path from the Permissions section on the bottom right of the Upload or Edit page for files or Add or Manage page for Collections:

Error creating thumbnail: File missing

(Improving the readability of the ID path display is planned for future DRS development)

Group permissions are itemized in a list, with the particular permission assignment listed below the group. For example, the permission statement below indicates that Northeastern University Staff (northeastern:drs:staff) are allowed to discover, view, and download the file, and Northeastern University Marketing and Communications Staff (northeastern:drs:marketing_and_communications:staff) are allowed to edit the file's metadata:

Error creating thumbnail: File missing

To add permissions for another Grouper group, navigate to the empty field at the bottom of the list of groups and select the appropriate group from the list, then select either "Read" or "Edit" from the second list below:

Error creating thumbnail: File missing

To add another permission, click "Add Permission."

It is important to know that you can only assign privileges to the groups you are a member of yourself. If you need to assign privileges to a group you do not belong to, please contact DRS staff.



DRS     https://repository.library.northeastern.edu/
Resources     http://dsg.neu.edu/resources/drs
Contact     Library-Repository-Team[@]neu.edu