Read only access for select classes

Hello,

I have an external user than will be auditing vendor bills. Vendor bills are stored in four classes (which are tied 1:1 to four separate workflows). We want to offer this person access to the web version of M-files online ver 24.10.x .

I have created him as an external user. Trying to figure the best way to allow access to these four classes as read only. (Without having to explicitly add the user's read only rights to a gazillion individual documents). This is intended to be a short term project.

Sorry in advance if the question is not specific enough.

  • If you have company in metadata and have company as an object, you can do that.

    You can add a multi select property that selects from users to the company metadata card. You can select this user in the related company record and add "company.user"class permission set with read permission.

    An example how it would look;

    company metadata card

    • company name
    • address
    • telephone
    • .....
    • company User (Multi select)(Users)

    vendor bill metadata card

    • bill name
    • grand total
    • ....
    • related company

    permissions set

    • related company.company user (Read rights)
  • One approach could be to set up a separate audit vault where you would replicate the relevant content and provide access to the auditor to that vault. Perhaps too much work for one-off short-term project but if there's a possibility of having similar needs in the future then this could be considered.