Important: SUpal uses Single Sign-On (SSO) to log in to the system. Do not use the "Add User" button on the People page. New users must first log into the website to automatically create their account.
SUpal Permissions
Working with Permissions
Access within SUpal is managed through user roles. To modify user permissions or grant or remove access to a user, complete the following steps:
- Navigate to People: Log in to SUpal as a site administrator and click People in the administrative toolbar. Only Site Administrators can manage permissions.
- Verify initial login: Confirm that the user has logged into the website at least once.
- Assign role: Locate the user, click Edit, and select the appropriate Role (e.g., Content Editor or Site Builder).
- Single role policy: Assign only one role per person.
- Least privilege: Grant only the minimum permissions required. Limit Site Administrator access to a small number of users; most users should be assigned Site Builder or Content Editor roles.
- Save changes: Click Save at the bottom of the page to apply the update.
Overview of Permissions
| Role | Access Level | Primary Responsibilities & Permissions |
|---|---|---|
| Limited Access Admin Roles | ||
| Administrator | Full System | Complete control over the entire site, including security settings, module installation and all configuration. |
| Super Content | Advanced Content | A hybrid role that can manage all content, including administrative control over workflows and some configuration related to how content is displayed. |
| Website Management Roles | ||
| Site Administrator | High | Manages the operational aspects of the site. Can manage users, menus, and most configuration entities but may be restricted from core system updates. Note: There are a maximum of two Site Administrators per website. |
| Site Builder | Technical | Focuses on the structure of the site. Has permissions to create blocks, views and manage layouts and content types. |
| Content Editor | Moderate | Responsible for reviewing and publishing content. Can edit content created by others and usually has permission to move items through various workflow states (Draft to Published). |
| Content Contributor | Standard | Focused on content creation. Typically allowed to create and edit their own content but usually requires an "Editor" to publish or manage site-wide settings. |
| Additional Add-on Permissions | ||
| Webform Viewer | Niche/Data | A specialized add-on role restricted to accessing and viewing submissions from web forms—minimal access to other site content or configuration. |
| Webform Content | Niche/Data | A specialized add-on role restricted to editing and approving submissions from web forms—minimal access to other site content or configuration. |
| Roles with no editing or admin permissions | ||
| Authenticated User | Basic | Any user logged into the system. Permissions are usually limited to viewing restricted content, managing their own profile or posting comments. |
| Anonymous User | Public | Unregistered visitors. Restricted to viewing public-facing content only; generally has no administrative or editing capabilities. |