Manual:Extension/BlueSpicePermissionManager/Cloud

To manage permissions, you use the Permission manager. It is located under Global actions > Management > Permission manager. This links to the page Special:PermissionManager.

Permission types

An administrator can select between three permission settings. By default, the wiki is set to be private.

Permission manager settings

Permission type	Description
Protected wiki	The wiki is visible to anyone. Only logged-in users can edit the wiki. To edit a page, users must be assigned to the "editor" group. All users have edit rights by default. To approve a page (if the approval mechanism is activated in a namespace), the groups "editor" and "reviewer" must be assigned to a user. To manage the wiki (administrative tasks), the group "sysop" must be assigned to a user.
Private wiki	Only logged-in users can view and edit the wiki. To edit a page, users must be assigned to the "editor" group. To approve a page (if the approval mechanism is activated in a namespace), the groups "editor" and "reviewer" must be assigned to a user. To manage the wiki (administrative tasks), the group "sysop" must be assigned to a user
Custom setup	Roles and groups are assigned by an administrator. This is necessary if different namespaces need to have different user rights.

Note: In BlueSpice pro Cloud, it is not possible to assign

the rights

edit, comment, or upload rights to anonymous users.

Custom setup

Important! If you want to manually manage the permissions in your wiki, you need to be familiar with the concept of groups and roles in the wiki. Please check the necessary info about the BlueSpice Permission manager before assigning roles to groups.

Note: In BlueSpice pro Cloud, it is not possible to assign edit, comment, or upload rights to anonymous users.

The following user groups and roles are assigned by default when saving the custom setupThe following table lists a typical basic custom setup (you do not need to change any settings for other listed default groups):

User group	Initially assigned roles	Purpose of this group	Suggested role
anonymous users (*)	reader	Determines if anonymous users Group members can read wiki content.	(no role assignment) or reader
user	reader, editor	Determines the rights authenticated users have if they don't belong to any other groups. All groups besides anonymous users initially inherit permissions from this group.	reader or reader, editor
autoreview bureaucrat	(inherited from user)	For users whose page revisions are automatically accepted without further approval.	maintenanceadmin (Note: This role has even more rights than the admin role and should be applied carefully.)
bot	(inherited from user)	(System group) Used for automated tasks in the wiki.	bot
bureaucrat	(inherited from user). accountmanager	(System group)	. accountmanager	Group members can add user groups and assign groups to users without needing full sysop permissions.	accountmanager
editor	(inherited from user)	Grants Group members can edit rights to the wiki.	editor
interface-admin	(inherited from user)	Group members can execute maintance tasks such as style changes or global text replacements, but do not have permissions related to other sysop tasks, such as user or namespace management.	structuremanager
reviewer	(inherited from user), reviewer	Grants rights to Group members can approve page revisions if the approval feature is activated.	reviewer
smwadministrator	(inherited from user)	Automatically created by Semantic MediaWiki extension.	-
smwcurator	(inherited from user)	Automatically created by Semantic MediaWiki extension.	-
smweditor	(inherited from user)	Automatically created by Semantic MediaWiki extension.	-
sysop	(inherited from user), admin	Grants administrator rights to the wiki. Included in roles: admin, maintenanceadmin	admin
widgeteditor	(inherited from user)	Allows editing pages in the Widget: namespace. Included in roles: admin, maintenanceadmin or structuremanager	admin or structuremanager