Permission manager (cloud)

To manage permissions, you use the Permission manager. It is located under Global actions > Management > Permission manager. This links to the page Special:PermissionManager.

Permission types

An administrator can select between three permission settings. By default, the wiki is set to be private.

Permission manager settings

Permission type	Description
Protected wiki	The wiki is visible to anyone. Only logged-in users can edit the wiki. All users have edit rights by default. To approve a page (if the approval mechanism is activated in a namespace), the groups "editor" and "reviewer" must be assigned to a user. To manage the wiki (administrative tasks), the group "sysop" must be assigned to a user.
Private wiki	Only logged-in users can view and edit the wiki. To edit a page, users must be assigned to the "editor" group. To approve a page (if the approval mechanism is activated in a namespace), the groups "editor" and "reviewer" must be assigned to a user. To manage the wiki (administrative tasks), the group "sysop" must be assigned to a user
Custom setup	Roles and groups are assigned by an administrator. This is necessary if different namespaces need to have different user rights. See the next section for more info.

Note: In BlueSpice pro Cloud, it is not possible to assign edit, comment, or upload rights to anonymous users.

Custom setup

Important! If you want to manually manage the permissions in your wiki, you need to be familiar with the concept of groups and roles in the wiki. Please check the necessary info about the BlueSpice Permission manager before assigning roles to groups.

The following table lists a typical basic custom setup (you do not need to change any settings for other listed default groups):

User group	Initially assigned roles	Purpose of this group	Suggested role
anonymous users (*)	-	Determines if anonymous users can read wiki pages.	(no role assignment) or reader
user	reader, editor	Determines the rights authenticated users have if they don't belong to any other groups. All groups except for anonymous users initially inherit permissions from this group.	reader or reader, editor
bureaucrat	(inherited from user), accountmanager	Group members can add user groups and assign groups to users without needing full sysop permissions.	accountmanager
editor	(inherited from user)	Group members can edit the wiki.	editor
interface-admin	(inherited from user)	Group members can execute maintance tasks such as style changes or global text replacements, but do not have permissions related to other sysop tasks, such as user or namespace management.	structuremanager
reviewer	(inherited from user), reviewer	Group members can approve page revisions if the approval feature is activated.	reviewer
sysop	(inherited from user), admin	Grants administrator rights to the wiki. Included in roles: admin, maintenanceadmin	admin