Security Configuration - FAQ

1 Is the MYSQL database in SSL?
2 What addresses are correct and what addresses need to be whitelisted?
3 How can I set/update the default security setting for iManage workspaces in CAM?
4 How does CAM determine the default security for workspaces in iManage?
5 Can I add user restrictions to edit the External System Configuration?
6 How to add users to the Access Control List (ACL)?
7 How to set temporary access for users/ groups on workspaces and matters?
8 How can I create a Dynamic Group?
9 How to add users to the Dynamic Group?
10 How to remove users from the Dynamic Group?
11 How to view matters associated with users/ group?
12 How do I remove users/groups from the Matter ACL?
13 How to update user roles and permissions?

Is the MYSQL database in SSL?

Yes, the Mysql Databases are always encrypted with SSL.

What addresses are correct and what addresses need to be whitelisted?

The addresses provided in the documentation above are strictly for the API and what is required for CAM to connect to external systems. The Web UI of CAM uses both AWS Cognito for authentication and AWS Cloudfront as a content delivery network. We (Litera) have no control over those addresses and they would need to whitelist the entirety of the AWS IP blocks for those services if the client is looking to lock down traffic. Those IP blocks would include all AWS-hosted products/sites, not just CAM.

How can I set/update the default security setting for iManage workspaces in CAM?

The default security for iManage workspaces can be set/updated in the External System Configuration>iManage Server setup. In the drop-down for Default Security select the required option. Read here for detailed instructions to add/update the server configuration.

How does CAM determine the default security for workspaces in iManage?

If the default security is not specified when configuring the iManage Server in CAM, then the workspace security by default is set as Private.
If the default security is specified when configuring the iManage Server in CAM, this will override the iManage default security for workspaces.
If the default security is specified when configuring the iManage Server in CAM but updated via the Data Uploader SQL or CSV file, in such a case the security set in the SQL/CSV file will override the security set when adding the iManage Server in CAM.

Can I add user restrictions to edit the External System Configuration?

Yes. User permissions to edit server configurations can be set in User Management>Roles. Read here for a complete list of available permissions and instructions to allow/deny CAM permissions to the user/group.

How to add users to the Access Control List (ACL)?

You can use the CSV file to add/edit/delete users from the ACL. Read here for more details on the allowed CSV parameters to add/ remove security from workspaces.

How to set temporary access for users/ groups on workspaces and matters?

CAM allows you set to an access expiration date for users and groups on the Workspace Wizard, and the Matter team. Read here for detailed instructions to restrict user access on the Workspace wizard. Read here for detailed instructions to restrict user access to the Matter Team and Security.

How can I create a Dynamic Group?

Option 1: In the External System Configuration when adding a new server configuration in the field for Dynamic Group set the radio button option to Yes. This will create a Dynamic Group and the users will be added to that group.

Option 2: You can create a dynamic group via the CSV file. Set the ImanageDynamicGroupCreation/NetdocumentsDynamicGroupCreation parameter value as True. Read here for more details on the allowed CSV parameters.

Note: The dynamic group creation option specified in the CSV file will override the option set in the External System Configuration. For e.g. If the option for Dynamic Group is set as Yes in the external system configuration however in the CSV file if the value for dynamic group creation parameter is set as False, the dynamic group will not be created for the workspace.

How to add users to the Dynamic Group?

Once the dynamic group is created you can add users via

Option 1: Members can be added to the Dynamic Group from the Users & Groups tab in CAM. Read here for detailed instructions to add users to the dynamic group.

Option 2: Add users via the CSV file. Read here for more details on the allowed CSV parameters to add users.

How to remove users from the Dynamic Group?

Option 1: Members can be removed from the Dynamic Group from the Users & Groups tab in CAM. Read here for detailed instructions to remove users from the dynamic group.

Option 2: Remove users via the CSV file. Read here for more details on the allowed CSV parameters to remove security.

How to view matters associated with users/ group?

In the Users & Groups tab, select the tab for Users/Groups and in the Matters column click Show. All the matters associated with the users/groups are displayed in the dialog window. Read here for more details.

How do I remove users/groups from the Matter ACL?

Option 1: In the Users & Groups tab, select the tab for Users/Groups and in the Matters column click Show. All the matters associated with the users/groups are displayed in the dialog window. Click the x next to the user name to remove the user access from the matter. Read here for more details.

Option 2: Remove users via the CSV file. Read here for more details on the allowed CSV parameters to remove users/groups from the matter ACL.

How to update user roles and permissions?

Click the App Switcher button located at the top right corner of the screen next to your login name and switch to the User Management view. User roles and permissions can be updated in the Roles tab. Read here for detailed instructions to update the user roles & permissions.