Key Features

• Flag specific groups as restricted to limit access to authorized users only.
• Prevent admin from adding or removing users to restricted groups unless he/she is already a member in the group.

Scenario

• Some users have access to administrative roles in order to create and manage groups yet there is a need to limit those admin users from accessing sensitive data like payroll and accounting for example.

Prerequisite

• Enable Debug Mode.

How it works

• Select "Settings" -> "Users & Companies" -> “Groups".
  
  
• In order to restrict a group, select a group to be restricted, e.g., Payroll, and check the "Restricted Group" checkbox. This will prevent any other administrator from assigning themselves to that group.
  
• Log in with any other user with "Access right" group and try to edit or assign in this restricted group. An error message will show up: "You should be a member of the restricted group to change it."