User Preferences Permissions

Bemerkung

📁 Permissions are namespaced, which is sort of like having files inside of folders.

The permissions listed on this page all belong to the user_preferences namespace. You can select them individually, or you can just select user_preferences to enable the whole bunch.

User preferences permissions in the New Role dialog

User preferences permissions are shown at the bottom of the New Role dialog…

User profile page

…and give users access to the pages of their User Profile.

user_preferences.access_token

Generate API tokens to control Zammad via the REST API

Bemerkung

💡 Security Tip

Generated tokens will never have more permissions than the user that generated them.

user_preferences.avatar

Override the default Gravatar with a custom avatar

user_preferences.calendar

Configure the calendar feed

user_preferences.device

Manage device login sessions

Bemerkung

💡 Security Tip

Revoking this permission disables “Login detected from a new location” notification emails.

To learn more, see System Notifications.

user_preferences.language

Configure the UI locale/language

user_preferences.linked_accounts

Manually link accounts after signing in with third-party authentication

Bemerkung

If automatic account linking fails, this is the only way your users can utilize third-party logins.

user_preferences.notifications

Configure ticket notification settings

Bemerkung

Agents only receive ticket notifications for groups they have “full” access to.

Customers can’t receive ticket notifications at all.

user_preferences.out_of_office

Designate a substitute for out-of-office hours

Bemerkung

💡 Security Tip

Designating a substitute does not grant that person the permissions / group access levels of the agent they’re replacing.

user_preferences.password

Change account password

Warnung

🔑 Third-party authentication / LDAP users:

Be sure to revoke this permission for all your users. When using a third-party identity server (like LDAP), the whole point is to let it take care of authentication so that passwords never have to live in Zammad’s database.