As it's title suggests, the "super admin" role is mostly reserved for those who need total access to the system. Only a select few should be made super admins.
A super admin is the only one who can access the "Application Configuration" tab, make other super admins, and edit passwords. The super admin and admin roles are assigned to a user in addition to a credential.
A super admin will also be able to see all collections in the LUNA Library without having to add those collections to their credential. This allows the super admin to login to the LUNA Library or Collection Manager and immediately get a sense of how many collections have been built and by whom. While the super admin can see all collections in the LUNA Library and Collection Manager, in order to see them in the LUNA Viewer the collections need to be added to their credential.
The LUNA Viewer includes a "Register" feature. This is the simplest way for users to register an account. If registering this way, the user will be assigned the "Anonymous User" credential. Typically this credential will only include access to collections in the LUNA Viewer.
Since your audience accessing the LUNA Viewer could be very large you don't want to have to add these users yourself, so let them register for an account and the "Anonymous User" credential will automatically apply to them.
For granting access to the other LUNA tools you'll most likely want to be a Super Admin and register users via the LUNA Administrator. This process involves credentials and access permissions as explained below.
The first step in granting access to a user is to create that user in the Users tab.
The second step is to assign a credential to that user. Once a credential is assigned to the user, they should have the right permissions and access levels to collections and the Independent Media Items. If they are missing access to something, chances are there's a setting that needs to be fixed in the credential or the access permissions.
A credential is assigned to a user. The settings in a credential determine:
You can create as many credentials as needed, and assign them to your users. You will always have an "Anonymous User" credential. This credential is automatically assigned to any user that registers an account with the LUNA Viewer. Typically this credential is for users who are mainly accessing the LUNA Viewer.
Access permissions are added to a credential. As described above the credential grants permission to certain LUNA tools and features, while an access permission pertains only to a specific collection and what a user can do with that collection.
Without an access permission a user cannot gain access to a collection in order to create, edit, or view it.
When a collection is made 5 default access permissions are created. You can think of these as representing different roles, from admin to restricted. So all you have to do is pick one of the 5 access permissions for a collection and add it to the credential. The settings for these 5 default access permissions are:
Dimensions for LUNA sizes 0-8:
up to 96 pixels on long side
|Size 1||up to 192 pixels on long side|
|Size 2||up to 384 pixels on long side|
|Size 3||up to 768 pixels on long side|
|Size 4||up to 1536 pixels on long side|
|Size 5||up to 3072 pixels on long side|
|Size 6||up to 6144 pixels on long side|
|Size 7||up to 12288 pixels on long side|
|Size 8||up to 24576 pixels on long side|
Editing Access Permissions
There are 2 ways to edit an access permission.
Tip: Since you can't edit the name of an access permission, simply create a new one if you need a name different than the default name created.
Note: Authorities are the only feature that are not automatically assigned to an access permission. By default a collection creator will have permission to read, add, edit, delete authorities. For all other users you'll need to manually assign the permission to the access permission for the collection.
The list of users is found in the Users tab. This list will display both active and non active users. Each user is assigned a User ID. You can quickly see which credential is assigned to that user, as well as their name, email address and the authentication method they are using. Use the search box to search for a specific user. Click on a user to select them, you can then edit the user's settings. You can also easily select or deselect all.
If you select more than one user, the only settings you can edit will be what credential they are assigned to and whether or not they are active. Simply click on "Create new user" to add a new user.
Note: Only a Super Admin can create or edit passwords for a user. However, if you are not a Super Admin but still need to add a user account with a username and password there are 2 options:
If you're using a 3rd party authentication system like LDAP you don't have to worry about the account creation.
Example 1: "Anonymous User" credential.
As explained above, you will always have an "Anonymous User". This is the default credential and is the one automatically assigned to users who register an account via the LUNA Viewer. Typically this credential is used only to grant access to specific collections in the LUNA Viewer.
In this credential the anonymous user will be able to:
Example 2: Collection Administrator credential
In this credential the user will be able to:
*General and Admin are profiles defined in the Access Permissions section above