Permissions and user access FAQs

Parmvir Singh
Parmvir Singh
  • Updated

One of the best parts of having a Monotype Fonts subscription is having complete control over font permissions. Here’s how you can see who has access to Monotype Fonts, set up roles and permissions, and assign permissions to users.

How can I set up permissions?

The Roles tab under the Manage section allows your administrators to create customized permission-sets for users and teams in your company. Your Monotype Fonts account has 2 non-editable roles pre-built—Admin and Full Access. You can create up to 5 additional custom roles according to your teams’ needs.

 

Roles.png

To create custom roles, click on the “+” button next to the Roles title:

Adding_Roles.png

You can configure the following capabilities for your custom roles:

Font syncing.

  • Install any font or family: Allows users to sync any font or family from the inventory using the Monotype App.
  • Install any font or family from a shared font list only: Allows users to sync fonts and families contained only in font lists shared with them using the Monotype App.

Font downloads.

  • Download font files: Allows users to download any of the fonts or families from the inventory.
  • Download font files from shared font list only: Allows users to download fonts and families contained only in font lists shared with them.

Web fonts.

  • Download web font projects SHKs: Allows users to download SHKs or self-hosting kit(s) for web fonts.
  • Access to web project embed code: Allows users to generate Javascript and CSS embed codes for web fonts

Organize & share.

  • Create font lists: Allows users to create font lists.

How do I set up teams?

Click on the “+” button next to the Teams title.

Create_a_team.png

In the New Team dialog, enter a Name for your team. You can add a description if needed.

Name_your_team.png

Click “Done” to finish creating your team.

Finish_creating_your_team.png

To add users to a team, click on the team you wish to add users to. In the team dialog, type the users’ email address, and click the “Add” button.

Adding_users.png

Click “Done” to finish adding users to your team.

Finish_adding_users.png

To remove users from a team, just click the bin icon in the team dialog. To delete the team, click on the “Delete team” button in the top-right corner.

Delete_a_team.png

Where can I get an overview of users’ roles?

For a detailed overview of users’ roles, click on the Users tab under the Manage section. This tab gives you a tabular view of all Monotype Fonts users in your company, their roles, team assignments, as well as other information such as the number of active and inactive users. You’ll also get access to several configuration options. 

User_overview.png

The search bar at the top of the Users list allows you to run a quick search for a particular user(s) in your company.

Searching_for_users.png

The “Add filters” button next to the user search bar allows you to filter the User list based on Roles and Teams.

Filter_roles.png

Can I map roles to an existing active directory?

Yes. Monotype Fonts’ SSO mapping feature allows you to map Teams in Monotype Fonts with your company’s existing active directory (AD) groups. 

Once set up, this integration automates and ensures that users in your AD groups, when logging into Monotype Fonts via SSO, are provisioned into the right Teams with their respective user Roles and have immediate access to font assets—folders, font lists, web projects and more—aligned with their creative projects.

To implement this feature, ensure that your SSO set up is configured to pass Group information in its SAML assertion. Please get in touch with our Customer Support team to ensure proper setup.

How do I create a new mapping?

Click the “Create new” button in the SSO tab under the Manage section.

Create_new_SSO.pngIn the “Create SSO Mapping” dialog, enter your SSO group name in the “Tell us your SSO group” field.

SSO_group.png

Make sure you’ve checked your spelling as this is the name Monotype Fonts will match against the group name received from your active directory system.

Then, select the “Roles” and “Teams” for users contained in this group from the drop-down menus.

SSO_roles_and_teams.png

You can add users within a group to multiple Teams by clicking on the + icon beside the drop-down menu(s).

Adding_users_to_groups.png

Once set up, click on the “Create SSO Mapping” button to finish.

Create_SSO_mapping.png

Your SSO mapping should now appear in the SSO mapping table.

SSO_mapping_table.png

How do I modify existing mappings?

To modify existing mappings, click on the group name. This will open the “Edit SSO Mapping” dialog. 

Edit_SSO_mapping.png

In the Edit SSO Mapping dialog, use the User Role or Teams drop-down menus to make changes to the existing mapping.

SSO_roles_and_teams.png

You can add users within a group to multiple Teams by clicking on the “+” icon beside the drop-down menu(s).

Adding_users_to_groups.png

How do I create mappings for unmapped groups?

Click an unmapped group’s name. This will open the Create SSO Mapping dialog.

Create_mapping.png

 

In the Create SSO Mapping dialog, use the User Role or Teams drop-down menus to create the new mapping.

SSO_roles_and_teams.png

You can add users within a group to multiple Teams by clicking on the “+” icon beside the drop-down menu(s).

Adding_users_to_groups.png

What happens if a match is not found between the AD and the SSO mapping?

In case a match is not found:

  • For new users, user-configuration is mapped to a pre-existing mapping named “default”. Additionally, you may choose to set one of your existing mappings as a default.
  • For existing users, no configuration changes are made.
  • In both cases, unrecognized groups are listed under Unmapped Groups and mappings can be modified using the steps outlined in the sections above.

What if there are multiple matches?

In the case of multiple matches, the first match takes effect.

Changes in the directory group are not reflected, what’s happening?

In case a particular group’s mapping in Monotype Fonts or a user’s active directory group has been modified, their user-configuration is updated accordingly at the next login. Sessions time-out after 8 hours, thereby re-checking and updating user-configuration, if necessary, upon each successive login.

Can I modify the Roles and Teams for SSO users?

Company Admins cannot modify Roles or Teams for users logging in via SSO and mapped to existing active directory groups. To remove users from a group, please contact your IT/Systems Administrator.

Was this article helpful?

0 out of 0 found this helpful