In this article:
Restrictive Sharing
Restrictive Sharing allows assessment owners to share only parts of an assessment with another user. The restrictive sharing option is available on the Domain/Function, Objective/Category, and Practices/Subcategories levels.
The example shows the share button placements on a NIST CSF v2.0 assessment. The button location is the same for all model types, and the tooltip changes to reflect the model nomenclature, for example, objective vs. category. In the procedures below, we indicate dynamic UI elements based on the assessment model type in tooltips or modal titles with an x.
Axio recommends separating sharing strategies. Either share the full assessment or share on a restrictive basis only. If users are only supposed to edit or read parts of an assessment, do not share the full assessment via the dashboard sharing option with those users.
Sharing
- To use Restrictive Sharing in an assessment, click the Share x button.
-
On the Assign x to Users and Groups modal, use the text field to type the name(s) of the user(s) to share that specific assessment part.
- After adding users, click Invite.
- To exit the modal, click Done.
Changing Permissions and Unsharing
By default, users have edit permissions on shared assessment parts. To change the permissions from Can edit to Can read or Unshare, follow the steps below.
- To change permissions or unshare any previously shared parts of an assessment, click the Share x button.
-
On the Assign x to Users and Groups modal, next to the user name is a Change sharing options button. Click Change sharing options.
-
Select your option for the user.
If you selected
- to change the permission, click Save.
- to unshare, the user disappears from the list of users on the modal.
- To exit the modal, click Done.
There is a known issue with the visual sharing indicator. The UI defaults back to the Can edit selector after a user was assigned Can read access. This only affects the visualization and not the actual access permission.