Set User Privileges

Configure DCD group privileges to control which IONOS CLOUD users can provision and modify Nextcloud Workspaces. Specifically, assigning the Access and manage Nextcloud Workspace privilege grants members the permissions required to create, modify, and delete the workspaces themselves. This infrastructure-level privilege governs administrative access at the IONOS CLOUD level only and it does not affect user, group, or permission management within your Nextcloud Workspace instance.

The following table illustrates the difference between these two management levels:

Management Level	What it controls	Example Action
DCD group privilege (Infrastructure)	The Nextcloud Workspace environment.	Provisioning a new workspace, scaling resources, or deleting the environment entirely.
Nextcloud management (application)	The files and users within the application.	Adding [e-mail] to the workspace, resetting a password, or sharing a folder.

Prerequisite: Make sure you have one or more Groups in the User Manager. To create one, see Create a group.

To set user privileges, follow these steps:

1. In the DCD, go to Menu > Management > Users & Groups.

2. Select the Groups tab in the User Manager window.

3. Select the appropriate group to which you want to assign privileges from the list of groups.

4. In the Privileges tab, select Access and manage Nextcloud Workspace.

Privileges panel showing the Access and manage Nextcloud Workspace option selected

Result: The privilege to manage Nextcloud Workspace resources is granted to all the users in the selected group.

Revoke user privileges

To revoke user privileges, follow these steps:

1. In the DCD, go to Menu > Management > Users & Groups.

2. Choose one of the following options:

Option 1: Remove the User from all the Groups in which the Privilege is Enabled

1. Select the user from the Users tab in the User Manager window.

2. Go to the Groups tab, select the group name enabling the privilege, and click Remove from Group.

3. Repeat step 2 for all the groups where the privilege to be revoked is applied.

Remove the user from the Group

Option 2: Remove the Privilege from all the Groups the User Belongs To

1. Select the Groups tab in the User Manager window.

2. Select the Group Name in which the privilege to be revoked is applied and the user belongs to this group.

3. Clear the checkbox against the privilege name.

4. Repeat steps 2 and 3 for all the groups where the privilege to be revoked is applied.

Remove the privilege from all Groups user belongs to

Warning: This option removes the privilege for all the members in the groups from which the privilege is revoked.

Note: To revoke this privilege from a contract administrator, turn off the administrator option on the user account. After performing this action, the contract administrator will become a contract user, and the privileges set up for the user before becoming an administrator will be in effect.

Result: The privilege is successfully revoked.