Custom properties – read-only access to all resources

You create a custom property to be able to use your own values in the security rules. You define one or more values for the custom property, and use these in the security rule for a resource.

For example, you may want to set up read-only access to all resources for some users, who will only be reviewing work. To do this, you create a custom property with one value, apply it to a security rule, and apply the rule to users who need it.

Creating custom properties

Do the following:

1. Open the QMC: https://<QPS server name>/qmc

2. Open Custom properties.

3. Click Create new.

4. Name the customer property AccessAllResources.

5. Optional. Add a description.

6. Under Resource types, select Users.

7. Under Values, click Create new and name the value ReaderOnly.

8. Click Apply.

You have now created a custom property with one value that can be used to give users read access to all resources. You can easily create additional values according to your needs, for example, a value that gives users rights to create, update, and publish.

Creating security rules

Do the following:

1. In the QMC, open Security rules.

2. Click Create new.

3. Name the security rule ReaderAccess.

4. Add a description: This rule grants ReaderOnly members of the custom properties group AccessAllResources read access to all resources.

   Information noteBy default, the Resource filter field has an asterisk, indicating that all resources are selected. Click next to the text box to view the resources.

5. Under Basic, ensure that the action Read is selected.

6. In the rule creation box, click the name list and select @AccessAllResources.

7. Click the empty text box next to value and select ReaderOnly.

8. The Conditions box in the Advanced section should now contain the following string:

   ((user.@AccessAllResources="ReaderOnly"))

   Information noteIn the Context list, you can select if the rule is to be applicable in the hub, QMC, or both.

9. Click Apply.

Applying custom properties to users

Do the following:

1. In the QMC, open Users.

2. Select one or more users.

   Tip noteUse Ctrl+Click to select multiple users.

3. Click Edit.

4. On the Edit user page, ensure that the Custom properties section is displayed.
5. Click the text box for the custom property AccessAllResources and select ReaderOnly.

6. Click Apply.

The selected users now have read access to all the resources in the QMC and can view apps, streams, content libraries, and so on.