# Permissions Tab

**Permissions** is a critical feature that allows administrators to manage and control access to various **Thinfinity® Workspace** functionalities. By enabling or disabling permissions for specific users or groups, organizations can tailor user experiences based on roles, ensuring that only authorized personnel have access to sensitive features like audit logs, administrative controls, or reporting services.

<div data-with-frame="true"><figure><img src="https://3742065333-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FX0lzJZltf6hN8YNESjYa%2Fuploads%2FErRpgptuhtCkCaEL6uGs%2F8.5_Config%20Manager_Permissions%20tab_1.png?alt=media&#x26;token=8e9e6859-66f4-4915-90d9-702df5292815" alt="" width="563"><figcaption></figcaption></figure></div>

### General Permissions Section

<table><thead><tr><th width="187">Option</th><th>Description</th></tr></thead><tbody><tr><td>Users and Groups</td><td>List of the users and groups to whom permissions can be granted or revoked.</td></tr><tr><td>Add/Remove</td><td>Adds or removes a user and/or group to the Users and groups list. See <a href="#find-users-and-groups-dialog-window">Find Users and Groups</a> below for details.</td></tr><tr><td>Analytics</td><td>Select a user from the list and check this option to grant them access to the <a href="../../thinfinity-workspace-web-manager/add-ons/analytics">Analytics</a> feature.</td></tr><tr><td>Configure Analytics</td><td>Allows the configuration of a database for the Analytics feature. For details, see <a href="#configure-analytics-database-button">Configure Analytics (Database) Button</a> below. </td></tr><tr><td>Can play saved sessions</td><td>Enables the Session recording feature for the selected user and/or group allowing them to access recordings of user interactions with remote resources. <a href="../../thinfinity-workspace-web-manager/add-ons/recordings">Recordings</a> add-on will become available in the <strong>Web Manager</strong>. For more details, see <a href="../../../monitoring-analytics-and-logging-modules/session-recording">Session Recording</a>.</td></tr><tr><td>Own/Any</td><td>Only available if the <strong>User can play saved sessions</strong> option is checked, choose to allow the user to see any recorded sessions or only those recorded by themselves.</td></tr><tr><td>Saved sessions cleanup</td><td>Click to open the <strong>Saved sessions cleanup settings</strong> dialog window and configure the clean-up parameters.</td></tr><tr><td>Access Profiles Manager</td><td>Enables Access Profiles creation for the selected user/group. If this option is selected, an <strong>Add</strong> button becomes available in the <strong>Access Profiles</strong> tab of the <strong>Settings</strong> menu from the <strong>Web Manager</strong>. For details, see <a href="../../thinfinity-workspace-web-manager/settings/configuration/access-profiles">Access Profiles</a>.</td></tr><tr><td>Configuration Manager</td><td>Grants access to the <strong>Configuration Manager</strong> to the selected user/group.</td></tr><tr><td>Cloud Manager</td><td>Enables the <strong>Cloud Manager</strong> feature for managing VMs and virtual desktops. Select a user from the list and check this option to grant them access to the <a href="https://app.gitbook.com/s/MMKgWql0v1gm63dX96Ov/">Cloud Manager</a> feature.</td></tr><tr><td>Cloud Manager Rights</td><td>This button becomes available when <strong>Cloud Manager</strong> option is selected and clicking it displays the available permissions. For details, see <a href="#cloud-manager-rights">Cloud Manager Rights</a> below.</td></tr><tr><td>Audit Logs</td><td>Enables monitoring and tracking of user logins, sessions, and connections. Select a user from the list and check this option to grant them access to the <a href="../../thinfinity-workspace-web-manager/add-ons/audit-log">Audit Log</a> feature.</td></tr><tr><td>Monitoring</td><td>Grants the selected user access to the <a href="../../thinfinity-workspace-web-manager/add-ons/monitoring">Monitoring</a> add-on. </td></tr><tr><td>Administer Users and Groups</td><td>In the context of <a href="../../../user-and-access-management/user-management/directory-services-connector/thinfinity-idp">Local Thinfinity IdP</a>, grants the selected user the right to manage users and groups. For details, see also <a href="https://kb.cybelesoft.com/portal/en/kb/articles/thinfinity-workspace-utilizing-it-as-an-identity-provider">Thinfinity IdP Configuration</a>.</td></tr><tr><td>Enable persistent login</td><td>Selecting this option will allow the browser to "remember" the users and their credentials and log them in automatically for the interval set in the associated <strong>Days</strong> field.</td></tr></tbody></table>

### Connection Settings

<table><thead><tr><th width="194">Option</th><th>Description</th></tr></thead><tbody><tr><td>Expand toolbar on Start</td><td>Use this option to determine whether the connection toolbar should start expanded or closed for the selected user on the list.</td></tr><tr><td>Show File Transfer (if available)</td><td>This option is selected by default and grants the selected user access to the <strong>File Transfer</strong> feature. For details, see <a href="https://kb.cybelesoft.com/portal/en/kb/articles/how-to-transfer-files-drag-and-drop-and-direct-file-transfer">How to transfer files using Drag and Drop</a> in our online Knowledge Base.</td></tr><tr><td>Share Sessions</td><td>This option is selected by default, and it enables the Session sharing feature for the selected user. For details, see <a href="https://kb.cybelesoft.com/portal/en/kb/articles/session-sharing">Session Sharing</a> in our online Knowledge Base.</td></tr><tr><td>Enable Send Keys</td><td>This option is selected by default. Uncheck to remove the <strong>Send Keys</strong> option from the <strong>Thinfinity Workspace</strong> toolbar.</td></tr></tbody></table>

### Find Users and Groups Dialog Window

Clicking **Add** from the Users and Groups area displays the following dialog window.

<div data-with-frame="true"><figure><img src="https://3742065333-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FX0lzJZltf6hN8YNESjYa%2Fuploads%2FEgU9qCfQlhK8Fbz4QrzS%2F8.5_%5BPDT-782%5D_Config%20Manager%20Find%20Users%20and%20Groups.png?alt=media&#x26;token=17f823d8-9deb-4880-b280-598852661dae" alt="" width="462"><figcaption></figcaption></figure></div>

The following parameters are available.

<table><thead><tr><th width="152.55560302734375">Option</th><th>Description</th></tr></thead><tbody><tr><td>Username or group</td><td>Enter the name of the user or group you want to locate. </td></tr><tr><td>Location</td><td>This area presents the scope of the search: the list of Directory Services used in the current <strong>Thinfinity Workspace</strong> installation. By default, the search is performed in all of them, deselect the ones you want to exclude from the scope of the search.</td></tr><tr><td>User/Group</td><td>This area shows the results of the search. </td></tr></tbody></table>

### Configure (Analytics Database) Button

The **Configure** button offers access to the Analytics database options.

<div data-with-frame="true"><figure><img src="https://3742065333-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FX0lzJZltf6hN8YNESjYa%2Fuploads%2Fgit-blob-d6a2687c8c2853cc7e80408c17c50f86ea08578f%2Fimage%20(169).png?alt=media" alt="" width="375"><figcaption></figcaption></figure></div>

The following parameters are available:

<table><thead><tr><th width="205">Option</th><th>Description</th></tr></thead><tbody><tr><td>Microsoft SQL Server</td><td>Select this option to activate the database connection parameters.</td></tr><tr><td>Provider</td><td>Use the default option. Alternatively, click the arrow button and select the desired option.</td></tr><tr><td>Server/Instance</td><td>Enter the name of the server and the database instance.</td></tr><tr><td>Database name</td><td>Use the default database name.</td></tr><tr><td>Use Windows NT integrated security/Use MSSQL credentials</td><td>Select one of the available security options.</td></tr><tr><td>Test connection</td><td>Use this button to test the connection to the newly created database.</td></tr></tbody></table>

### (Remote Desktop Session Recordings) Settings Button

Grants access to the parameters associated to the session recording feature.

<div data-with-frame="true"><figure><img src="https://3742065333-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FX0lzJZltf6hN8YNESjYa%2Fuploads%2Fgit-blob-a3e25c67b55af095b16dc052b3cccc6d0d505c2f%2Fimage%20(170).png?alt=media" alt="" width="375"><figcaption></figcaption></figure></div>

The following parameters are available:

<table><thead><tr><th width="203.3333740234375">Option</th><th>Description</th></tr></thead><tbody><tr><td>Auto clean saved sessions</td><td>Select this option to activate the automatic cleanup of the saved sessions recordings database.</td></tr><tr><td>Start clean-up every day at</td><td>Set a start time for the clean-up process.</td></tr><tr><td>Preserve saved sessions from last ...days</td><td>Set the number of days for which saved session recordings will be preserved.</td></tr></tbody></table>

### Cloud Manager Rights button

Allows granting specific rights for the different areas of the **Cloud Manager** add-on. Clicking this button displays the following dialog window.

<div data-with-frame="true"><figure><img src="https://3742065333-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FX0lzJZltf6hN8YNESjYa%2Fuploads%2FDZZY4u4jyOkZxRLkNRH0%2F8.5_Config%20Manager_Cloud%20Manager%20Rights.png?alt=media&#x26;token=8da34f84-b494-4fa7-a1ca-61b9430c5407" alt=""><figcaption></figcaption></figure></div>

By default, the selected user has full rights to all the **Cloud Manager** areas. Use the drop-down field to select the different areas of the **Cloud Manager** and then customize the permissions.