suiteCRM____Admin

1. Individual users只能set up自己的个人账号，admin可以从User Management为其他用户set up个人账号（右上角下拉菜单中选Admin）

2. Securitly Groups：define groups of users with particular access rights defined by the roles attached to the group

Roles: define access rights

3. setting up groups步骤

a) create group + add users to the group

b) create a role to each group (set access level) from Role Management ==>Create Role

c) add the group to record (Mass Assign)

4. 在create role的过程中，chilck on column heading可以编辑一整列的权限，其中:

Access可选择 enabled与disabled

Delete/Edit/Export/Import/List/Mass Update/View可选择group、owner与none

group: access to all records assigned to member of the same group

owner: access only to their own records

none: not have access

5. Security Suite Settings

additive rights与strict rights个人理解为对具有多重身份的用户的处理，前者选取不同身份中所获得的最高权限，后者的权限由最近assign的group决定（If a user is a member of several groups only the respective rights from the group assigned to the current record are used）

User Role Precedence: If any role is assigned directly to a user that role should take precedence over any group roles.

Filter User List: Non-admin users can only assign records to users who are in the same group(s).