Control who can access your content.
Configure the roles, groups and audience access that fit your Pickit setup. Help the intended people reach the material they need while keeping administration and content access clearly defined.
Clear responsibilities. Relevant access.
Separate administration from everyday use.
Give people the responsibility their work requires. Administrators maintain the setup, while ordinary users find and use the content made available to them.
Users, groups and roles
Administrators manage the account, library and access. Regular users find and use content shared with them. Groups let administrators assign a content audience to several people together.
Focused contribution access
Selected users can be given permission to upload to a collection without becoming account administrators. When approval is required, only administrators can see the asset until it is approved.
Make access relevant to the audience.
Choose who needs each collection or destination, then review the actual recipient experience. A folder rule or an attractive frontpage is not itself an access decision.
Choose the intended recipients
Set content access for individual users, groups or administrators. These permissions determine who can reach an asset; its license separately describes how it may be used.
Test with a real account
Check the library, shared content and intended application as an employee or partner. Repeat the check when responsibilities, audiences or the distribution route change.
Reuse sign-in settings across accounts.
A child account can use its parent account’s authentication settings, including Microsoft Entra or Google sign-in.
Choose the sign-in connections
Choose which of the parent account’s sign-in connections and restrictions the child account uses.
Let eligible users sign in
With auto-invite enabled, users who meet the selected rules can gain access to the child account.
Connect sign-in with the rollout.
Let people sign in through the identity connection configured for your organization. Keep authentication, account eligibility and content permissions clear when introducing Pickit.
Organizational sign-in
Microsoft Entra, Google Workspace and SAML connections have their own configuration requirements. Identity establishes who is signing in; Pickit roles and sharing determine their content access.
Admit users through your sign-in rules
Auto-invite can give users access when they meet the account’s sign-in rules. Administrators still manage account restrictions, roles and content audiences.
ICA Gruppen
ICA Gruppen’s published story connects Microsoft identity and directory groups with access to brand content in employees’ everyday tools.
Read the customer storyA few useful answers.
Does every employee need administrator access?
No. Regular users can work with content shared with them. Administrators maintain the library and manage access; collection contributor settings can support a more focused upload responsibility.
Does Microsoft sign-in replace content permissions?
No. Sign-in identifies the user. Configure Pickit roles and content audiences to determine the relevant access.
How should we plan external access?
Decide whether recipients need an ongoing destination or a focused share. Configure that mode for the audience and test it as a recipient before distributing the link or invitation.
Does auto-invite manage the full user lifecycle?
Auto-invite grants account access under the chosen rules. It does not establish full SCIM provisioning or deprovisioning; plan user removal and ongoing account administration separately.
Make access part of the content plan.
Explore the roles, audiences and sign-in experience that fit your organization.