AEM6.1 Minimum Permissions for allowing a new user to access and user AEM Assets - Minimum permissions for DAM User | Community
Skip to main content
Level 2
March 10, 2016

AEM6.1 Minimum Permissions for allowing a new user to access and user AEM Assets - Minimum permissions for DAM User

  • March 10, 2016
  • 1 reply
  • 3492 views

Hello Friends,

I am trying to create a set of users that will be only using AEM Assets in 6.1.

To test and try this out, I create a new group 'dam-test-group'. Then created a user 'dam-test-user'. Added 'dam-test-user' to 'dam-test-group'.

Then I logged out from Admin account and tried to login using dam-test-user with user-id and pw i had created.

But login isnt successful. 

Then I realized, that it is a correct behavior, as I hadnt given any permissions to the 'dam-test-group'. To see what permissions I should give, i logged in as admin again and had a look at the 'dam-users' user-group. Now this group has a lot of boxes checked.

I was wondering if someone could point me to what is the minimum set of permissions I should provide this user-group for allowing access to DAM/Assets.

Here is what I thought I could do:

A) Given a minimum set of permissions to user-group. But not sure whats the minimum it would need. 

B) Just add my 'dam-test-group' to the OOTB 'dam-users' group. But my concern is, would this OOTB 'dam-users' group be available if AEM is setup with nosamplecontent?

 

Thanks in advance for your help and guidance.

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.

1 reply

edubey
Level 10
March 10, 2016

Answer to B: Yes it would be present as nosamplecontent will only remove default projects

Before answering to A, just to wanted to know wht all those dam user should be able to do?...example. only read files, or read and modify...etc..

Level 2
March 10, 2016

Hi @edubey,

Thanks for your response. 

A) Lets say any dam operation. Be it Read, Modify, Create, Delete & Replicate. 

B) If the OOTB dam-users group stays even when AEM is installed with nosamplecontent, then that means AEM keeps it there for a purpose. Do you think it is a standard practice in your project experience, to create new users and just add them to OOTB user-groups like dam-users, authors etc?

Thanks

RS

edubey
Level 10
March 10, 2016

1) make sure all these are checked for you group in which you are adding users

2) If there exists a group with same permission you need, then you should existing one. else create new one. 

Give permission to group not users