Hi @sketchi,
This can turn really complex and painful if you want more than the base permissions and if you want to play with resource groups. If you just want to do it with base plain permissions, this should be easy.
It is possible to have users that can only access to Fred without Manager access, and also have access to the manager, limiting the user to a set of menus or options, but this requires a lot of work and testing (customization).
You can achieve this by using Access Control lists.
Steps for a simple example:
- You will need to create a new user group where you will add those new users, and then, edit it (right click over it);
- then you need to ensure on your Conext Access that you link “Web” with Fred Editor role in order to allow them to edit in the frontend. If you want that same user group to be able to access manager for content editing, assign the “mgr” contect and assign “Content Editor”.
This way you will be able to have a specific group for fred editing and manager access for content editing.
If you need more, privileges than those that I suggested, you can assign a different access policy option or duplicate the one that you want as base template and edit it as per your needs (this can be done on the Access Control Lists, under “Access Policies” menu).
Cheers