Differences

This shows you the differences between two versions of the page.

--- admin:managing_users [2025/08/11 06:57] – [Login rights tab] Mark Glover
+++ admin:managing_users [2025/11/04 05:14] (current) – [Sync user across all login stores] Mark Glover
@@ Line 238: / Line 238: @@
 === Sync user across all login stores ===
-The **Sync user across all login stores** checkbox is only displayed if the currently logged in user is designated as a "special user" and they are logged into the primary server in a synchronisation system.  If this checkbox is checked, when the **OK** button is clicked the user's details are synchronised to all the stores they are allowed to login to, whichever sites those stores are Active on.  In this way, an administrator in a synchronisation system is able to edit user permissions and settings and have them automatically synchronised to all relevant sites.
+The **Sync user across all login stores** checkbox is only displayed if the currently logged in user is designated as a '**special user**' and they are logged into the primary server in a synchronisation system.  If this checkbox is checked, when the **OK** button is clicked the user's details are synchronised to all the stores that the user is allowed to login to, whichever sites those stores are Active on.  In this way, an administrator in a synchronisation system is able to edit user permissions and settings and have them automatically synchronised to all relevant sites, rather than having to log in remotely to those sites and configure permissions locally.  <WRAP center round tip 60%>
+As you can imagine, **Sync user across all login stores** is a powerful feature, and can have unintended consequences.  Therefore as of 2025-11-04, there are restrictions on who can be configured as a '**special user**'.  Contact [[support@msupply.foundation]] for assistance.
+</WRAP>
+<WRAP center round important 60%>
+**Sync user across all login stores** will propagate:
+  * Group permissions
+  * User group membership (which group the user is a member of)
+  * User permissions, if the user is not a member of a group
+  * User store login permissions
+**Sync user across all login stores** will <wrap em>NOT</wrap> propagate:
+  * User deletion
+  * Group deletion
+Deleting the user or group on remote sites must be carried out by either of:
+  * Manually logging in to those sites and editing users, or
+  * Development and execution of custom 'footrunner' code on the Central server that will propagate these changes.  Contact [[support@msupply.foundation]] for assistance.
+</WRAP>
 ==== Details tab ====
 {{ :admin:details_tab.png?600 }}