You can propagate security configurations from one environment to another by exporting them from their original environment and importing them to a new one. For example, you can configure and test permissions in a staging environment and then propagate those settings to a production environment in a quick, reliable way.
You can export the following aspects of a security configuration:
- Project groups and their members, both user members and subgroup members (for project exports only)
- Role assignments to individual users and groups (for folder and project exports)
Importing Groups and Members
When groups and their members are imported, they are created or updated according to the following rules:
- Groups and their members are created and updated only when importing into a project (not a folder).
- If a group exists with the same name in the target project its membership is completely replaced by the members listed in the archive.
- Members are added to groups only if they exist in the target system. Users listed as group members must already exist as users in the target server (matching by email address). Member subgroups must be included in the archive or already exist on the target (matching by group name).
Importing Role Assignments
When role assignments are imported, they are created according to the following rules:
- Role assignments are created when importing to projects and folders.
- Role assignments are created only if the role and the assignee (user or group) both exist on the target system. A role might not be available in the target if the module that defines it isn't installed or isn't enabled in the target folder.
When the import process encounters users or groups that can't be found in the target system it will continue importing, but it will log warnings to alert administrators.
Export Folder Permissions
To export the configuration for a given folder:
- Navigate to the folder you wish to export.
- Select Admin > Folder > Management.
- Click the Export tab.
- Place a checkmark next to Role assignments for users and groups.
- Review the other exportable options for your folder -- for details on the options see Export / Import a Folder.
- Click Export.
Export Project Permissions
To export the configuration for a given project:
- Navigate to the folder you wish to export.
- Select Admin > Folder > Management.
- Click the Export tab.
- Select one or both of the options below:
- Project-level groups and members (This will export your project-level groups, the user memberships in those groups, and the group to group membership relationships).
- Role assignments for users and groups
- Review the other exportable options for your folder -- for details on the options see Export / Import a Folder.
- Click Export.
Related Topics
