---
type: concept
title: Groupware Access Control Lists (ACLs)
tags: [permissions, security, groupware]
related: [groupware]
created: 2026-07-01
updated: 2026-07-01
sources: ["output/rz_uni_greifswald_de_support_faq_groupware.md"]
---
# Groupware Access Control Lists (ACLs)

Access Control Lists (ACLs) in the [[groupware]] are used to manage permissions for various modules and elements, such as personal calendars and directories within the personal file storage. ACLs allow users to grant specific levels of access to other individual users or groups.

## Permission Levels

The URZ defines five progressive levels of authority:

| Level | Description |
|---|---|
| **Read** (Lesen) | The element (e.g., calendar) can only be viewed. |
| **Read and Create** (Lesen und Anlegen) | The element can be viewed, and new entries can be created, but existing entries cannot be modified. |
| **Write** (Schreiben) | Includes all previous rights; existing entries can be modified. |
| **Write and Delete** (Schreiben und Löschen) | Includes all previous rights; existing entries can be deleted. |
| **Manage** (Verwalten) | Allows modification of the element's properties, including the ability to change the ACL permissions themselves. |

## Security Recommendation
The URZ advises against granting **Manage** rights unless absolutely necessary. For most collaborative tasks, such as adding or deleting entries in a task list, the **Write** permission is sufficient.