I'm just getting into Access security and created a workgroup that I would
like to use for multiple databases. I read that it's a good idea to do this.
Can someone point me to information on the best practices for doing this if
there is such a thing. Thanks in advance.

Ann wrote:
> I'm just getting into Access security and created a workgroup that I
> would like to use for multiple databases. I read that it's a good
> idea to do this. Can someone point me to information on the best
> practices for doing this if there is such a thing. Thanks in advance.

Every file you create while joined to your secured workgroup file is
automatically secured by that workgroup file because it will have an owner
that is not the default user 'Admin'.

You still have to assign permissions in each MDB you create, but
establishing a non-default owner that is instead a custom account in your
secured workgroup file is really what ties the MDB to the workgroup.

--
Rick Brandt, Microsoft Access MVP
Email (as appropriate) to...
RBrandt at Hunter dot com

What I'm not sure of how to handle is when I have, as an example, three
users. Two of those users have the same permissions in two different
databases. I can put them into the same workgroup. But one user has
Read-only for one database and Full Data for another. How can I do this in
the same workgroup?

"Rick Brandt" wrote:

> Ann wrote:
> > I'm just getting into Access security and created a workgroup that I
> > would like to use for multiple databases. I read that it's a good
> > idea to do this. Can someone point me to information on the best
> > practices for doing this if there is such a thing. Thanks in advance.
>
> Every file you create while joined to your secured workgroup file is
> automatically secured by that workgroup file because it will have an owner
> that is not the default user 'Admin'.
>
> You still have to assign permissions in each MDB you create, but
> establishing a non-default owner that is instead a custom account in your
> secured workgroup file is really what ties the MDB to the workgroup.
>
> --
> Rick Brandt, Microsoft Access MVP
> Email (as appropriate) to...
> RBrandt at Hunter dot com
>
>
>

Ann wrote:
> What I'm not sure of how to handle is when I have, as an example,
> three users. Two of those users have the same permissions in two
> different databases. I can put them into the same workgroup. But
> one user has Read-only for one database and Full Data for another.
> How can I do this in the same workgroup?

You create different groups in your workgroup file and (per database file)
you give those groups different permissions. Then as you add users you just
make them members of whichever group has the permissions you want them to
have.

Permissions are NOT in the workgroup. They are in each MDB file.

--
Rick Brandt, Microsoft Access MVP
Email (as appropriate) to...
RBrandt at Hunter dot com

Thanks Rick, someone else told me I had that confused too about the
workgroup. So if I now understand I can make three groups (group1, 2 and 3)
in the workgroup. The two people that are identical can go in group1 in both
databases and the third person would be in group2 and group3 but, group2 in
one databases and group3 in the other?

"Rick Brandt" wrote:

> Ann wrote:
> > What I'm not sure of how to handle is when I have, as an example,
> > three users. Two of those users have the same permissions in two
> > different databases. I can put them into the same workgroup. But
> > one user has Read-only for one database and Full Data for another.
> > How can I do this in the same workgroup?
>
> You create different groups in your workgroup file and (per database file)
> you give those groups different permissions. Then as you add users you just
> make them members of whichever group has the permissions you want them to
> have.
>
> Permissions are NOT in the workgroup. They are in each MDB file.
>
> --
> Rick Brandt, Microsoft Access MVP
> Email (as appropriate) to...
> RBrandt at Hunter dot com
>
>
>

Ann wrote:
> Thanks Rick, someone else told me I had that confused too about the
> workgroup. So if I now understand I can make three groups (group1, 2
> and 3) in the workgroup. The two people that are identical can go in
> group1 in both databases and the third person would be in group2 and
> group3 but, group2 in one databases and group3 in the other?

Correct.

--
Rick Brandt, Microsoft Access MVP
Email (as appropriate) to...
RBrandt at Hunter dot com