Glip Admin: Provide, or restrict access to specific features.

  • 1
  • 12
  • Idea
  • Updated 4 weeks ago
  • Planned
  • (Edited)
Glip is a great collaborative platform that we all can benefit from by making company wide communication transparent and encourage other staff members to contribute to the formulation of ideas. It is already proving useful and although there is a very similar program out there (Slack) the integration with RingCentral and working features makes it a clear winner in functionality (albeit a little rougher around the edges).

That being said, as administrator of our RingCentral solution the administrator privileges are sorely lacking. Including an "Owner" user level that can fully control messages in the Teams areas would help keep the team areas healthy. eg. moving/deleting posts that are not your own, editing team profiles (not passwords), removing  users from teams, channel master notification settings etc.

If you want to take a look at the user-friendliness of Slack (it's free) and see if you can replicate certain controls, that would be amazing!
Photo of Adrian

Adrian

  • 368 Points 250 badge 2x thumb

Posted 3 years ago

  • 1
  • 12
Photo of Stewart Ross

Stewart Ross

  • 532 Points 500 badge 2x thumb
This reply was created from a merged topic originally titled Can you cut down access in Glip?.

I am looking to rollout Glip in the business however I only want users to have access to the IM modules of it - Not sharing of files etc.  

Is it possible to customise to only show the IM element?

Thanks

Stewart
Photo of Stewart Ross

Stewart Ross

  • 532 Points 500 badge 2x thumb
Hello,

Has there been any thought to my comment/request to have options in GLIP to only allow the IM Element rather than all the features?

Stewart
Photo of Mike

Mike, Official Rep

  • 91,884 Points 50k badge 2x thumb
It's currently not possible to restrict users to just the messaging portion. But, thanks for posting here.  Our Product Team is reviewing all options and working to make it more customization. I can't make any promises on this specific feature but they are looking at various restrictions/roles & permissions, etc. 
Photo of Cecile Glassy

Cecile Glassy, Champion

  • 17,386 Points 10k badge 2x thumb
This reply was created from a merged topic originally titled Add Admin controls in Glip to restrict user capabilities.

05/05/2017  2000+ Users  U.S. based account - we have just discovered there is no visible way to shut off account-wide broadcast access in Glip. Any user is automatically granted the ability to send a message with attachments to all other users - un-moderated.  This can be problematical in a large organization where that ability is otherwise fully restricted. Virus infected files can be attached, inappropriate content, disgruntled employees can use it.  Has anyone figured out how to block access to Glip without disabling the phone account it is attached to? I do not want to be the one explaining this to our upper management and Board of Directors. Any helpful suggestions would be really appreciated.
Photo of Cecile Glassy

Cecile Glassy, Champion

  • 17,386 Points 10k badge 2x thumb
05/09/2017 Further developments - if you have an account that permits Custom Rolls in the Users tab, you can un-check Glip access there. We had RingCentral's Tier 3 support disable Glip yesterday for all users who are not SuperAdmins while they work out some granularity for Glip's permissions controls.  I will alert the involved support people to this thread and they will see your additional request that "IM feature only"  as another consideration.  I had a meeting with them this morning and they are working with our permissions requirements for use in Enterprise sized organizations to see what they can enable to allow us to adopt Glip as our Google Chat replacement when Google EOL's that service June 26th 2017 permanently.  Again - RingCentral's Engineering and Support teams have been really responsive and we really appreciate it.
Photo of JimFred

JimFred

  • 160 Points 100 badge 2x thumb
I am quite happy with Glip as a team collaboration tool.  I just get frustrated that admins are so limited in what they are able to control.  I would expect admins to be able to delete any inappropriate content anywhere, set files to read-only, etc.  (There are simply too many times you DON'T want users modifying files, even in a collaborative environment.)
Any hope for such stronger admin privileges?  How about logs to see who viewed and/or edited files?

thanks. 
Photo of JimFred

JimFred

  • 160 Points 100 badge 2x thumb
Also, even guests can do things like import gifs, etc?  this sort of thing should be something admins can disallow...
Photo of Cecile Glassy

Cecile Glassy, Champion

  • 15,082 Points 10k badge 2x thumb
07-13-2017 U.S. based account 2060 users: Lack of Administrator controls, Ability to Moderate messages, Ability to Restrict Attachments are main reasons we cannot use Glip in our environment. In an Education organization Admins need ability to lockdown or control users ability to "send to all users"... and what files could be shared. No virus scanner embedded, or connector to virus scanners already in place on a network. Glip is a great tool but too wide open for use in a mixed environment where students could send inappropriate content to all users.
(Edited)
Photo of Mike

Mike, Official Rep

  • 92,044 Points 50k badge 2x thumb
Just letting you all know that there are some Glip Admin features coming.  There's a good chance I'll have more information very soon, probably within a few days.  I can't promise specifics or an exact release date but watch for permissions such as ability to control teams (add/remove users, posting, deleting the team, etc.) which would be reserved to just admins.
Photo of Cecile Glassy

Cecile Glassy, Champion

  • 17,334 Points 10k badge 2x thumb
10-31-2017  2287 Users, 3800 DID lines USA-based account.

Please update the Admin Controls status for us on this Mike.

I spoke to one of the top Glip Engineering folks at the RingCentral ConnectCentral conference and was told that controlling the users access to, and use of Glip is not where they are going. 

I am not sure he understood what I was asking for info about, but if that was accurate we will not be able to adopt Glip for our organization.   

Our highest priority list:
1. Ability for SuperAdmin to restrict any user's ability to send a Glip message to ALL USERS in the entire organization without moderation or Admin approval,
2. Ability for SuperAdmin to force any User-attachments to go through Enterprise Endpoint Protection/Virus Scan prior to delivery 
3. Ability for SuperAdmin to control who can and cannot create Teams with being approved by SuperAdmin
Photo of Mike

Mike, Official Rep

  • 92,044 Points 50k badge 2x thumb
Hi Cecile,  I'll do some checking and see if I can get an update on these things. 

Mike 
Photo of Cecile Glassy

Cecile Glassy, Champion

  • 17,334 Points 10k badge 2x thumb
Thanks Mike!
Photo of Cecile Glassy

Cecile Glassy, Champion

  • 17,386 Points 10k badge 2x thumb
Thanks Mike - this is super important to us and we cannot use GLIP in our organization until those controls are available. Thanks for updating us on the status!
Photo of Chris Duquette

Chris Duquette, Champion

  • 14,524 Points 10k badge 2x thumb
Making Glip a little more admin friendly as far as being to restrict access and things like that would be great.
Photo of Jan Ferguson, Channel Partner

Jan Ferguson, Channel Partner, Champion

  • 31,796 Points 20k badge 2x thumb
Restrict access how? Can you give a more solid description or set of circumstances you need to see, as did Cecile? What are "...things like that..."?

The developers, if they are inclined to provide requested functionality from these forums, need a might more to go on than to "restrict access and things like that...".

Help them to help you. If someone else has already described what you would like to see in functionality, simply vote for it.
(Edited)
Photo of Star Buck

Star Buck

  • 60 Points
Hi, would it be possible or is there a way to block the creation of teams by normal users?
Photo of Saadet - Community Support

Saadet - Community Support, Official Rep

  • 35,356 Points 20k badge 2x thumb
Hi Star Buck,

What do you mean by a "normal user"?
Photo of Cecile Glassy

Cecile Glassy, Champion

  • 17,386 Points 10k badge 2x thumb
USA-based account with 2887 users 3800 DID lines and 28 Sites

I am locked out of using GLIP again - and the thread below suggests that RingCentral's GLIP team cannot resolve this to an Enterprise Ready state. 

I am the main SuperAdmin on the account, among several others, though none of our SuperAdmin Team ever use the "101" Extension as suggested as a resolution - because that is a security risk.

What will it take to get to the correct person or Team at RingCentral to resolve this unbelieveable condition?

During the RingCentral Connect conference, I was locked out of using or accessing GLIP via any of their login methods. i opened a case at that time. 

It was temporarily resolved a month later., allowing me and the other SuperAdmins on my team to use GLIP even though we have all other users locked out by request - because GLIP does not provide enough security controls for use in our organization by all other users. 

Now I have not been able to use GLIP again, - no way to login ---  for weeks. 

This is the case resolution they sent me today (below)


It is not a resolution.   It is not acceptable.   

THIS INDICATES THAT GLIP  IS NOT READY FOR ENTERPRISE DEPLOYMENT.




===========================================================
Hi Cecile,

There is a global account setting on the account that will enable Glip for Admins only or all users. The current bug will only allow the main Super Admin (Extension 101) to use Glip if the Admin Only setting is enabled. It is possible for other users to have the Super Admin role, but there is only one mailbox (Extension 101) that is the main Super Admin extension. The workaround is to switch this global setting to allow all users access to use Glip.

Roscoe Bryant | Tier 3 Support
Phone | Fax | Text 
===========================================================
From: Cecile Glassy
Sent: Wednesday, December 27, 2017 11:02 AM
To: Roscoe Bryant
Subject: Re: RingCentral case 06569441: Cannot login to Glip [ ref:_00D80aRUX._50034101PIs:ref ]

THIS KEEPS HAPPENING TO MY ACCOUNT EVER SINCE THE CONFERENCE

============================================================
On Wed, Dec 27, 2017 at 10:12 AM, Roscoe Bryant wrote:

Hi Cecile Glassy, 
Our Engineers have identified this as an issue currently in the RingCentral system. Only the Super Admin will be able to use Glip if the "Admin Only" setting is enabled. The only workaround at this time is to allow RingCentral Glip for all users. 
At this time, the Support Team has not been given a date of repair as this issue is still under investigation. I will tag your case to the internal repair ticket RC-56935. You’ll be notified by email when the fix has been installed on the RingCentral system. 

Roscoe Bryant 
RingCentral Tier 3 Support 
roscoeb@ringcentral.com

============================================================
--------------- Original Message ---------------
From: Roscoe Bryant [roscoeb@ringcentral.com]
Sent: 12/20/2017 2:12 PM
Subject: RingCentral case 06569441: Cannot login to Glip [ ]
Hi Cecile Glassy, 
Your case has been received by the Tier 3 Department and is under review. I made a few changes to your extension in the backend, but it seems the Glip login issue still exists. I'll be escalating your case up to the Engineering Team for a deeper investigation. It seems the extension mailbox may be corrupt in the database and will need to be repaired by Engineering. I'll provide another update when I hear back from them. If you have any questions, please let me know.

Regards, 
Roscoe Bryant 
RingCentral Tier 3 Support 
roscoeb@ringcentral.com

ref:_00D80aRUX._50034101PIs:ref

 
(Edited)
Photo of Saadet - Community Support

Saadet - Community Support, Official Rep

  • 43,480 Points 20k badge 2x thumb
Hi Cecile,

I'm really sorry for the frustration. I have gathered this information and escalated your case. Someone will be contacting you as soon as they've reviewed all the details.
Photo of Cecile Glassy

Cecile Glassy, Champion

  • 17,386 Points 10k badge 2x thumb
Thanks Saadet
Photo of Will Simon

Will Simon

  • 936 Points 500 badge 2x thumb
We just found out that users can change their name in Glip! What?!?!

This is a massive security concern, compliance issue, etc. Any user can impersonate another user, executive, I.T. member, etc.

Is this expected behavior, or (pleaseee) is there some simple little checkbox to turn this off that no one on my team can find?
Photo of Will Simon

Will Simon

  • 936 Points 500 badge 2x thumb
To clarify, my post is regarding our users, not guests that were invited into our Glip chat.
Photo of Cecile Glassy

Cecile Glassy, Champion

  • 17,386 Points 10k badge 2x thumb
USA-based acct | 2287 Users | 3800 DID lines | 28 sites | all Polycom VVX500 phone handsets 

2018-05-10  Yes it is a huge security issue here too, we still don't have the requested security controls from earlier in this message thread. 

Basic users should not be able to edit and/or change their name as set by the SuperAdmin when the account was provisioned.

Name changes for RingCentral Users - across ALL RingCentral products should be by SuperAdmin only. 

If RingCentral is dedicating a lot of resources to get Glip adoption - they really need to look at the security problems embedded in the product. 

They need to make the product actually usable for Enterprise Clients who have global security policies that must work with the use of Glip.  
(Edited)
Photo of Will Simon

Will Simon

  • 936 Points 500 badge 2x thumb
Agreed...definitely some enterprise-level requirements/restrictions/controls missing.

Our users are big fans of Glip (myself included), but we have some big concerns including:
- Users can change their name at-will
- Users can create company-wide teams
- File sharing is an all-or-nothing setting (BIG for us...granular controls would allow us to use this in secure-environments)
Photo of Cecile Glassy

Cecile Glassy, Champion

  • 17,386 Points 10k badge 2x thumb
File sharing - one of the issues I have repeatedly raised -- the ability for all users to send to all other users, an inappropriate or offensive photo, jokes, file with virus macro embedded - takes out the whole Enterprise in short order.   

This is still not addressed. 

Use case::: thousands of users hit because one trusted user, accidentally sent an attachment to all staff --- calculate the labor overhead to clean that per incident.

Glip operates inside your network, needs to be compliant with Endpoint Virus and Malware scanning products.   
Photo of Robert Czymoch

Robert Czymoch

  • 202 Points 100 badge 2x thumb
So as per this thread the basic administration settings are not on par with Slack and Microsoft Teams. In addition a default team is created with all users in it. There is no way to set a team channel to read only with certain users being allowed to post to it. I see that file sharing is also an issue and it would for us as well. We will have to continue using MS Teams until such time that GLIP is even moderately ready for anything past 10 users. This also takes away from the value of the office plans. It will be an issue that I am raising with our account rep.
Photo of Cecile Glassy

Cecile Glassy, Champion

  • 17,386 Points 10k badge 2x thumb
We are tracking these Glip Admin issues here  http://ringcentraladminusersgroup.org/faq/glipsec.html