Hi @Orly Guzy​ 

This might help for a start: https://docs.sharefile.com/en-us/sharefile/people_settings/user_roles

Hello Nichol,

Thank you, is there a process we can create automation to designate a depository, (account owner - shared folder) place holder for the termed users, when they have data they own?

This will be required, so we can automate with API the user delete, and release their licnese.

I look forward to hearing from you soon.

Thanks,

Orly

Hi again, Orly!

Hmm, that's not my area of expertise. Let me tag my colleague @Craig Chapman​ to see if he might know more.

Craig, do you have any thoughts?

Hi Orly,

Thank you for your questions!

Regarding the automation of user offboarding, ShareFile supports reassigning ownership during the user deletion process via the API. When deleting an employee user, any content and group ownership associated with that user must be reassigned to another user account.

This can be accomplished in a single API call using:

• DELETE /sf/v3/Users({id})?completely=true&itemsReassignTo={id}&groupsReassignTo={id}

Where:

• itemsReassignTo specifies the user who will become the owner of content owned by the departing user.
• groupsReassignTo specifies the user who will become the owner of any groups managed by the departing user.

Many organizations use an account owner, administrator account, or dedicated service account as the reassignment target. Once ownership has been transferred, the content can subsequently be moved to a centralized shared folder or repository if desired. This allows user offboarding, ownership transfer, and license reclamation to be automated as part of a single workflow.

Regarding the role definitions you requested, please see below:

Employee (Employee user): Standard employee user account.

SuperUser (Not displayed in Web App): Legacy role. User must be a member of Super User Group.

CanChangePassword (Not displayed in Web App): Can change own user account password.

CanManageMySettings (Not displayed in Web App): Can manage personal user settings.

CanUseFileBox (Use personal File Box): Can use personal File Box.

CanManageUsers (Manage clients and client contacts): Can manage clients and client contacts.

CanCreateFolders (Create root-level folders in "Shared Folders"): Can create root-level shared folders.

CanSelectFolderZone (Select storage zone for root level folder): Can choose storage zone for root-level folders.

CreateNetworkShareConnectors (Create Network Share Connectors): Can create Network Share connectors.

CreateSharePointConnectors (Create SharePoint Connectors): Can create SharePoint connectors.

CanSendDocumentsForSignature (Send documents for e-signature): Can send documents for e-signature.

CanViewSignatureDocuments (View all e-signature documents): Can view all e-signature documents.

CanManageSignatureTemplates (Manage e-signature templates): Can manage e-signature templates.

AdminAccountPolicies (Access company account permissions): Can manage company account permissions.

AdminBilling (View/edit billing information): Can view and manage billing information.

AdminBranding (Edit account appearance): Can modify account branding and appearance.

AdminChangePlan (Request plan changes): Can request subscription plan changes.

AdminFileBoxAccess (Can access other users' File Box and Sent Items): Can access other users' File Boxes and Sent Items.

AdminManageEmployees (Manage employees): Can manage employee user accounts.

AdminRemoteUploadForms (Manage remote upload forms): Can manage remote upload forms.

AdminReporting (Access Reporting): Can access administrative reports.

AdminSharedDistGroups (Edit other users' shared distribution groups): Can manage shared distribution groups.

AdminSharedAddressBook (Edit Shared Address Book): Can manage shared address book.

AdminViewReceipts (View receipts and billing notifications): Can view receipts and billing notices.

AdminDelegate (Delegate admin privileges to other employee users): Can delegate administrative privileges.

AdminManageDropBox (Manage file drops): Can manage File Drop settings.

AdminManageFolderTemplates (Manage folder templates): Can manage folder templates.

AdminEmailMessages (View notification history): Can view account notification history.

AdminSSO (Configure single sign-on settings): Can manage SSO configuration.

AdminSuperGroup (Manage Super User Group): Can manage Super User Group membership.

AdminZones (Create and manage storage zones): Can create and manage Storage Zones.

AdminCreateSharedGroups (Share distribution groups): Can create shared distribution groups.

AdminConnectors (Create and manage connectors): Can create and manage connector configurations.

Hopefully that helps and please let us know if you have any additional questions!