How to create a Plone 4 group who's sole purpo

Question

I'm trying to set up a Plone group (Plone 4.0.7) that will be responsible purely for creating and amending users. I don't want them to have full admin access to the site, purely to the Users and Groups functionality.

I have created a role in my.package/profiles/default/rolemap.xml like so:

<role name="Maintain Users" /> 

and then added a permission thus:

<permission name="Manage users" acquire="false">
    <role name="Maintain Users" />
    <role name="Manager" />
</permission>

In my.package/setuphandlers.py I have added a new group that uses the role:

groups = {
    ....
    'Service Desk': ['Maintain Users', 'Member'],
    ....
}

I am able to add users to my newly created Service Desk group, so I'm confident that works, but what I'm not getting is the ability for users in that group to be able to Maintain Users.

I naively expected there to be an option on the menu (similar to 'Site Setup') once they had logged in, this is not the case.

What additional steps do I need to take to be able to achieve this?

Answer 1

You have to grant these 2 permissions to your custom role:

• Plone Site Setup: Overview (for the menu entry and the access to the control panel)
• Plone Site Setup: Users and Groups (for the permission to manage users and groups)