User Groups permission

[javed25]

Hi, 
I have two groups rccl-royal-authors and rccl-cel-authors. And if a user is part of the rccl-royal-authors then he should have read/write/publish access to /content/experience-fragments/rcg-fragments/rci-fragments as shown below

If user is a part of rccl-cel-authors then he should have read/write/publish access to /content/experience-fragments/rcg-fragments/cel-fragments as shown below

And if a user is part of both groups then he should have access to both /content/experience-fragments/rcg-fragments/rci-fragments & /content/experience-fragments/rcg-fragments/cel-fragments. But this scenario is not working correctly, If a user is part of both groups then nothing comes in rcg-fragments

Here are the permissions i am using for both groups
rccl-cel-authors:

rccl-royal authors

[ShivamKumar · Accepted solution]

Hi @javed25 ,

This is happening because you have written conflicting deny permissions, you have to remove them.

To resolve the issue of conflicting permissions when a user is part of both rccl-royal-authors and rccl-cel-authors, do the following:

1. Remove Deny Permissions: Ensure there are no deny permissions set on /rci-fragments and /cel-fragments for both groups.
2. Explicitly Set Allow Permissions: Grant read/write/publish permissions for both groups on their respective paths (/rci-fragments for rccl-royal-authors, /cel-fragments for rccl-cel-authors).
3. Enable Permission Inheritance: Ensure that permissions are inherited from the parent folder /content/experience-fragments/rcg-fragments/.
4. Use the Permission Debugger to check if any deny permissions are still affecting access.
5. Test Access for users in both groups to ensure they can access both /rci-fragments and /cel-fragments.

This should fix the conflicting permissions issue.

[Preetpal_Bindra]

hi @javed25 

Another way to achieve this could be to create a parent group that has the common generic permissions for the entire hierarchy and 2 specific groups that inherit from this parent group.

Associate the parent group to the top most level of the experience fragments folder and,

associate specific groups to the subfolders where restricted access control is necessary.

Add users to the specific groups only. Do not add them to the parent group.

[arunpatidar]

Hi @javed25 

Please check https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/user-with-two-groups/m-p/7... 

[Supriya_Savre]

Hi @javed25,

Did you find the above answers helpful? If yes, kindly consider marking the most suitable response as ‘correct’.

If you’re still facing any challenges, please feel free to continue the conversation here. We’re happy to support further.