Skip to main content

Creating relations is blocked due to lack of delegation-rules/groups.

Symptoms

Creating a new relation (as system user/administrator) is blocked due to the lack of delegation-rules/groups. When trying to save the relalation, the following error comes up:

🇬🇧 English 🇳🇱 Dutch

image.png

image.png

It's not possible to create a group/user for this relation because no rights could be passed. Make sure you (as admin-user) has any delegation-rules/groups to pass through to this new user.

Het was niet mogelijk om deze relatie een groep/gebruiker aan te maken, omdat uzelf (als beheerder) niet beschikt over delegatie-regels/groepen en/of toegangs-regels/groepen om door te geven aan deze nieuwe gebruiker.

Related symptoms

-

Details

When creating a relation, a usergroup and/or useraccount will be create automatically. The newly created usergroup and/or useraccount will be used to link data into the system onto eachother. Also, if logging in is permitted for a relation, the created useraccount will be activated so login is possible.

By default, when a relation creates a new relation (and with that, a new usergroup and/or useraccount), they inherit the permissions of the current user. However, when logged in as a system user/administrator (not part of a relation) with all permissions, it's not desirable for the new user to also be granted all permissions as well.

To prevent limiting the rights of the current user in order to restrict the new useraccount/usergroup, delegations must be used instead. With delegations, it's possible for a system user/administrator to specify which permissions may be passed through, while creating a new usergroup/useraccount.

Cause

This issue is caused when creating new relation as system user/administrator (not part of a relation)

Solution / Resolution / How To

Describe how to fix it, how to validate an observation or describe how to configure a specific case. Only use one title, solution, resolution or HowTo

References

Describe where to find external answers or extra information's