When it comes to permissions in Mura CMS, the most important thing to keep in mind is that all permissions are "group-based." So, instead of thinking about individual users, it's better to think in terms of groups. This concept applies whether we are talking about restricting access to a specific section of your site, or we are talking about "editing" privileges for various groups throughout your website. As you'll see, you can always create a group with only one individual assigned to it, if you really need to only allow one person access to something in particular.
That said, Mura CMS has included some very powerful features to assist you in setting up your desired permissions for various sections of the administration area, including the rights and privileges each group has when it comes to creating and managing content, or even accessing different areas of the front-end, public-facing side of your site.
All permissions in Mura are group-based. As such, it's important to take time to think about the structure of your site, and how you wish to enable and/or restrict access throughout it. Also, as discussed in the "Author vs. Editor Roles" section, you should consider these roles/privileges when creating your groups.
There are two main "pools" of groups within Mura: System Groups, and Member Groups. The key difference between these pools of groups is System Groups have access to the back-end administration area of Mura, and Member Groups do not. This doesn't mean Member Groups cannot edit content, it simply means users of Member Groups cannot log in to the back-end administration area, unless they are also a member of a System Group.
This may sound somewhat confusing if you're new to managing groups and users. However, be patient, read through this entire section, and you will find Mura can accommodate some of the most complicated scenarios you can think of with ease.
How to Access Users & Groups
- From the back-end administration area of Mura, click Users from the primary navigation to reveal an additional set of menu items.
- To manage users, select Users.
- To manage groups, select Groups.
- You can also select Add User to add a new user, or Add Group, to add a new group.
- To delete a group, from the Users & Groups screen, select the three-dot menu on the row of the group you wish to delete, and click Delete.
- You should be prompted with an Alert dialog box. To confirm, select OK. To cancel, click Cancel.
All System Groups have access to the back-end administration area of Mura. So, if you need to allow a user access to the back-end administration area, they must be a member of a System Group.
How to Access System Groups
- From the back-end administration area of Mura, select Users from the main navigation, then Groups, and click the System Groups tab.
- By default, there is a single System Group labeled Admin. This group is required and cannot be deleted.
The Admin System Group is created when Mura is first installed. You can't change the name, or delete it. Any users who are members of this group will automatically be granted the ability to:
- Create and Manage System Groups and Member Groups
- Create and Manage Users
- Manage Permissions
- Write and Publish Content
- Access most areas of the administrator within the site
- And more!
So, as you can see, members of the Admin System Group have quite a bit of access and privileges. Only users who have been granted "Super Admin User" privileges have more power than members of the Admin System Group. We'll discuss "Super Admin Users" in another section.
You will most likely want to create a number of System Groups to accommodate your organization's desires for enabling and/or restricting access to specific sections of your site. Before creating any groups, it is a good idea of to have a clear picture of the sections and/or pages each group will be responsible for, and the permissions and roles you wish to grant them. Try not to think of the individual users themselves. Instead, think in terms of the group, even if the group may only contain one user.
Follow the steps below to create/manage a System Group.
- From the back-end administration area of Mura, select Users from the main navigation, then click Add Group.
- Complete the information on the Group Maintenance Form:
- Group Type
- Select System Group
- Group Name
- Enter a name for the group. For example, "Marketing".
- Group Email
- If your organization has an email address that includes all users of the group, you may enter it here. For example, "firstname.lastname@example.org".
- Content UI Assignments
- You may optionally restrict which tab(s) the group has access to when editing content. To select more than one tab assignment, <CTRL> + Click on a PC, or <Command> + Click on a Mac.
- Group Type
- Click the Add or Update button when finished to save your changes.
- Your new/updated group should be visible in the listing of System Groups.
- Repeat these steps for each System Group you wish to add.