topic Re: Vault Basic make vault readonly in Vault Forum

Vault Basic make vault readonly

sijcooke — Thu, 24 Feb 2022 08:21:43 GMT

Hi,

Using Vault Basic, i have two vaults on the same server. I want users of Vault 1 to have full read write access. On Vault 2 i want it to be Read Only.

I have created the two Vaults. In the server Software (DMSC) i have added the users. It looks like you can not set a different Role for each vault. Therefore i thought in the user settings, i will not set a role. I created two groups, one for each vault, and added the user to these groups. The group for the readwrite vault has role set to Document Consumer, the group for the readonly vault has role set to Document Consumer (level2).

This doesnt seem to work - any suggestions would be appreciated. I know Vault Professional etc can do this, but i dont want to go down that route... i think Basic should be able to do it.

Thanks, Simon

Re: Vault Basic make vault readonly

ihayesjr — Thu, 24 Feb 2022 12:34:28 GMT

You cannot do this with Vault Basic. The only way to do this in Vault Professional is to have different security settings in each Vault. Roles apply across all Vaults in the server.

Re: Vault Basic make vault readonly

GunnarNilsson — Thu, 24 Feb 2022 12:35:04 GMT

Seems it can't be done with group memberships and group roles. If a user has Document Editor (level2) rights through being member of one group and Document Consumer rights through another membership the better rights outnumbers the lesser rights. This is true on Vault Pro as well.

Re: Vault Basic make vault readonly

sijcooke — Thu, 24 Feb 2022 13:34:09 GMT

Thanks for the replies. I guess it could be done if each person logging in has 2 usernames... one for each vault? Each username has roles set as required.

Re: Vault Basic make vault readonly

GunnarNilsson — Thu, 24 Feb 2022 13:36:04 GMT

Yes, with two different users you're ok.

Re: Vault Basic make vault readonly

mfrenchLHFH6 — Thu, 24 Feb 2022 13:41:25 GMT

2 user names can be hard to keep straight and nothing prevents logging into the read only Vault with the wrong user id. As the admin you could check out everything in the read only Vault. That may give you the security you need.

Re: Vault Basic make vault readonly

ihayesjr — Thu, 24 Feb 2022 13:44:34 GMT

I agree that keeping track of two accounts for every user may be complicated. However, each user account can be configured to access only one Vault. Therefore, the user has to switch accounts to get into the other Vault.

Re: Vault Basic make vault readonly

sijcooke — Thu, 24 Feb 2022 13:45:58 GMT

Thanks for the replies.. yes the user will just switch to the other vault, and use the login username/credentials for that vault. Thanks for your help.