Users and content access

Administrators manage accounts in Users and editorial permissions in Content Access.

Create or maintain an account

1. Open Users and select New user.
2. Enter the requested account details and choose a role.
3. Save and arrange email verification and secure credential delivery.
4. Configure content access before asking the user to work on entries.

Use Edit user to change account details or role. Password actions include Reset password and Send password reset email. Manage sessions lists sessions; Revoke sessions removes active sessions. Ban prevents sign-in and Unban permits it again. Review selection carefully before bulk actions or deleting accounts.

Choose a role

Role	Intended responsibility
Administrator	System configuration, user/access management, and emergency workflow actions
Content creator	Author content and submit drafts for review
Approver	Review and approve others' content
Publisher	Publish, withdraw, and schedule content
Managing editor	Review and publish without administrator configuration privileges

Strict workflow still prevents self-approval. A role change can invalidate pending schedules. See review and publication.

Grant content access

1. Open Content Access.
2. Select the user, group, or content-type view appropriate to your change.
3. Set type permissions to No access, View, or Edit; use Inherit to remove a direct user setting.
4. Maintain group membership and any required entry exceptions.
5. Save and check the displayed Effective access and its source.

Permission resolution for non-administrators follows this order:

1. A direct entry setting, including an explicit denial.
2. A direct user setting for the content type.
3. The combined grants of the user's groups.
4. No access when nothing grants it.

Edit includes viewing. A direct No access can override group access; Inherit allows fallback. An entry exception can make one entry visible even without broad type access. Administrators have system-level access independent of these editorial grants.

For an Articles team, create a group, add the intended editors, and grant Edit on Articles. Use direct exceptions only when necessary, then verify access with a representative non-administrator account.

The system group Existing Content Access preserves access during initialization for existing installations. Inspect its memberships and grants rather than assuming new accounts or new types automatically inherit them.