{"id":9489,"date":"2023-11-15T09:42:16","date_gmt":"2023-11-15T08:42:16","guid":{"rendered":"https:\/\/churchtools.academy\/?post_type=docs&#038;p=9489"},"modified":"2026-02-10T12:50:23","modified_gmt":"2026-02-10T11:50:23","password":"","slug":"21-useful-permissions-management-from-high-level-to-subtle-details","status":"publish","type":"docs","link":"https:\/\/churchtools.academy\/en\/help\/permissions-management\/basics-understanding-permissions\/21-useful-permissions-management-from-high-level-to-subtle-details\/","title":{"rendered":"Useful permissions management &#8211; from high-level to subtle details"},"content":{"rendered":"\n<p>Since ChurchTools works with an <a href=\"https:\/\/churchtools.academy\/en\/help\/permissions-management\/permissions\/21-explanation-of-the-permission-system-in-churchtools\/\" data-type=\"docs\" data-id=\"9465\">additive permissions management<\/a>, you can only give users additional permissions and not take them away.<\/p>\n\n\n\n<aside class=\"wp-block-group ct-box ct-box-blue has-background is-vertical is-layout-flex wp-container-core-group-is-layout-002f1c27 wp-block-group-is-layout-flex\" style=\"border-radius:8px;border-left-color:#3e70ce;border-left-width:0.5rem;background-color:#f3f5f7;margin-top:var(--wp--preset--spacing--60);margin-bottom:var(--wp--preset--spacing--60)\">\n<p style=\"margin-top:0.5rem;margin-right:0.5rem;margin-bottom:0rem;margin-left:0.5rem\"><strong>Example<\/strong><\/p>\n\n\n\n<p style=\"margin-top:0rem;margin-right:0.5rem;margin-bottom:0.5rem;margin-left:0.5rem\">If a user has the status &#8220;member&#8221; and is a member of the technical team, he or she can receive permissions via the group &#8220;technical team&#8221; that go beyond the permissions associated with the status &#8220;member&#8221;. Permissions that he has already received through the status of &#8220;member&#8221; cannot, however, be restricted by his membership of the group &#8220;technical team&#8221;.<\/p>\n<\/aside>\n\n\n\n<p>When assigning permissions, you should therefore proceed from the most applicable property to the most specific property.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>That is, from the <strong>status<\/strong> that applies to many,<\/li>\n\n\n\n<li>through the <strong>group types<\/strong> and <strong>groups<\/strong> whose permissions apply to a more limited group of users,<\/li>\n\n\n\n<li>to the individual <strong>user<\/strong>. (You should only assign permissions directly to a user in exceptional cases, as this can quickly lead to a confusing permissions structure that is difficult to maintain.)<\/li>\n<\/ul>\n\n\n\n<p>If you assign permissions to a group type, then these permissions apply to the group members of <strong>all groups of this type<\/strong>. It&#8217;s like assigning a permission to each group individually with little effort.<\/p>\n\n\n\n<aside class=\"wp-block-group ct-box ct-box-blue has-text-color has-background has-link-color wp-elements-80af7bfe1f2cac9aad48f56ff78dd877 is-vertical is-layout-flex wp-container-core-group-is-layout-002f1c27 wp-block-group-is-layout-flex\" style=\"border-radius:8px;border-left-color:#e7c000;border-left-width:0.5rem;color:#3f3400;background-color:#ffe5644d;margin-top:var(--wp--preset--spacing--60);margin-bottom:var(--wp--preset--spacing--60)\">\n<p style=\"margin-top:0.5rem;margin-right:0.5rem;margin-bottom:0rem;margin-left:0.5rem\"><strong>Important<\/strong><\/p>\n\n\n\n<p style=\"margin-top:0rem;margin-right:0.5rem;margin-bottom:0.5rem;margin-left:0.5rem\">The basic rule is: <strong>As many permissions as necessary, as few as possible!<\/strong><\/p>\n<\/aside>\n\n\n\n<h2 class=\"wp-block-heading\">1. Give permissions to the status<\/h2>\n\n\n\n<p>You start with the <strong>status<\/strong>: Here you can, for example, give all members permissions for the calendar and for booking resources. Go through all global permissions one by one and ask yourself whether the permission would be useful <strong>and<\/strong> necessary for all members.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">2. Authorise users who are part of a certain group type<\/h2>\n\n\n\n<p>Then go on to the <strong>group types<\/strong>: Here you set the permissions for the roles that users in groups of a certain type should have. Go through all roles of all group types and define the permissions.<\/p>\n\n\n\n<aside class=\"wp-block-group ct-box ct-box-blue has-background is-vertical is-layout-flex wp-container-core-group-is-layout-002f1c27 wp-block-group-is-layout-flex\" style=\"border-radius:8px;border-left-color:#22c55e;border-left-width:0.5rem;background-color:#dcfce7;margin-top:var(--wp--preset--spacing--60);margin-bottom:var(--wp--preset--spacing--60)\">\n<p style=\"margin-top:0.5rem;margin-right:0.5rem;margin-bottom:0rem;margin-left:0.5rem\"><strong>Ask yourself the following questions about each group type role:<\/strong><\/p>\n\n\n\n<p style=\"margin-top:0rem;margin-right:0.5rem;margin-bottom:0.5rem;margin-left:0.5rem\"><em>What should a leader of a group of the type &#8220;Service&#8221; be able to see and do?<\/em><br>Here are some suggestions from us: See persons and groups, see the security level of persons and groups up to level 2, book resources in any case and see events<br><br><em>What is a participant of a group of the type &#8220;ministry&#8221; allowed to do?<\/em><br>For example, it would make sense that a participant of a ministry is allowed to see the modules People and<em> Groups<\/em> and in them the people of his own group.<br><br><em>What is a leader of a group of the type &#8220;small group&#8221; generally allowed to do?<\/em><br>He may be allowed to see <em>module Groups<\/em> and add persons to his small group.<br><br><em>What is a participant in a &#8220;small group&#8221; type group allowed to do?<\/em><br>He may not have to see anyone at all at first, as long as he does not have a ministry.<\/p>\n<\/aside>\n\n\n\n<h2 class=\"wp-block-heading\">3. Authorise users who are part of a certain group<\/h2>\n\n\n\n<p>Now you can authorise specific <strong>groups<\/strong>. For example, you could give the roles of a group &#8220;church leadership&#8221; far-reaching permissions that they need to do their work.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">4. Authorise individual users<\/h2>\n\n\n\n<p>Finally, you go through the <strong>individual users<\/strong> and ask yourself whether a user needs further permissions. <\/p>\n\n\n\n<aside class=\"wp-block-group ct-box ct-box-blue has-text-color has-background has-link-color wp-elements-80af7bfe1f2cac9aad48f56ff78dd877 is-vertical is-layout-flex wp-container-core-group-is-layout-002f1c27 wp-block-group-is-layout-flex\" style=\"border-radius:8px;border-left-color:#e7c000;border-left-width:0.5rem;color:#3f3400;background-color:#ffe5644d;margin-top:var(--wp--preset--spacing--60);margin-bottom:var(--wp--preset--spacing--60)\">\n<p style=\"margin-top:0.5rem;margin-right:0.5rem;margin-bottom:0rem;margin-left:0.5rem\"><strong>Important<\/strong><\/p>\n\n\n\n<p style=\"margin-top:0rem;margin-right:0.5rem;margin-bottom:0.5rem;margin-left:0.5rem\">For the sake of clarity, however, you should only give a user direct permissions in exceptional cases.<\/p>\n<\/aside>\n\n\n\n<aside class=\"wp-block-group ct-artikel-zum-weiterlesen has-background is-layout-constrained wp-container-core-group-is-layout-89fd719a wp-block-group-is-layout-constrained\" style=\"border-radius:8px;background-color:#f9fafb;margin-top:24px;margin-bottom:24px;padding-top:32px;padding-right:24px;padding-bottom:32px;padding-left:24px\">\n<h4 class=\"wp-block-heading has-medium-font-size\">Read more<\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/churchtools.academy\/en\/help\/permissions-management\/basics-understanding-permissions\/21-open-or-restricted-permissions-management-what-suits-us\/\" data-type=\"docs\" data-id=\"9480\">Open or restricted permissions management &#8211; what suits us?<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/churchtools.academy\/en\/help\/permissions-management\/permissions\/explanation-of-the-permission-system-in-churchtools\/\" data-type=\"docs\" data-id=\"9465\">Explanation of the permission system in ChurchTools<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/churchtools.academy\/en\/help\/permissions-management\/permissions\/how-do-users-receive-permissions\/\" data-type=\"docs\" data-id=\"9467\">How do users receive permissions?<\/a><\/li>\n<\/ul>\n<\/aside>\n","protected":false},"excerpt":{"rendered":"<p>Since ChurchTools works with an additive permissions management, you can only give users additional permissions and not take them away. When assigning permissions, you should therefore proceed from the most applicable property to the most specific property. If you assign permissions to a group type, then these permissions apply to the group members of all [&hellip;]<\/p>\n","protected":false},"author":7,"featured_media":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"doc_category":[577],"doc_tag":[],"knowledge_base":[424],"class_list":["post-9489","docs","type-docs","status-publish","hentry","doc_category-basics-understanding-permissions","knowledge_base-permissions-management"],"pp_statuses_selecting_workflow":false,"pp_workflow_action":"current","pp_status_selection":"publish","acf":[],"year_month":"2026-04","word_count":300,"total_views":"2351","reactions":{"happy":"0","normal":"0","sad":"0"},"author_info":{"name":"Victoria Weidemann","author_nicename":"vweidemann","author_url":"https:\/\/churchtools.academy\/en\/author\/vweidemann\/"},"doc_category_info":[{"term_name":"Basics","term_url":"https:\/\/churchtools.academy\/en\/help\/permissions-management\/basics-understanding-permissions\/"}],"doc_tag_info":[],"knowledge_base_info":[{"term_name":"Permissions Management","term_url":"https:\/\/churchtools.academy\/en\/help\/permissions-management\/","term_slug":"permissions-management"}],"knowledge_base_slug":["permissions-management"],"_links":{"self":[{"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/docs\/9489","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/comments?post=9489"}],"version-history":[{"count":7,"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/docs\/9489\/revisions"}],"predecessor-version":[{"id":48155,"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/docs\/9489\/revisions\/48155"}],"wp:attachment":[{"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/media?parent=9489"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/doc_category?post=9489"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/doc_tag?post=9489"},{"taxonomy":"knowledge_base","embeddable":true,"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/knowledge_base?post=9489"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}