3. Scope

Part of the Access Transparency manual — see also 1. Introduction, 2. What's New, 4. Setup, 5. Usage, 6. Troubleshooting.

Reference only — see 4. Setup for how to configure each of these.

3.1 Assets, management & administration items

New itemtypes

• Document opens — every time a user opens or previews a document through GLPI's normal UI, that event is recorded so it can show up on the document's and the user's "Access Transparency" tabs.

Modified itemtypes

• User — a new "Access Transparency" tab (requires the plugin_accesstransparency_view READ right to see)
• Document — a new "Access Transparency" tab showing which users opened that document (same right required)
• Profile — a new "Access Transparency" tab for granting/revoking the view right
• Config — a new "Access Transparency" tab for configuring log retention and excluded logins

Permissions

• Historical — a single Read-only permission that controls whether a profile can see the "Access Transparency" tabs on User and Document pages. Grant or revoke it under Administration → Profiles → profile → "Access Transparency" tab. There's no separate right for exporting: anyone who can see the tab can also export it as CSV, for the same items they're already allowed to view.

Automatic Actions

• Purge old interaction logs — a scheduled task (Setup → Automatic actions) that automatically removes old document-open records once they pass the retention period you choose on the "Access Transparency" configuration page (Setup → General → "Access Transparency" → "Log retention"). It runs on its own; no action needed unless you want to change how long records are kept, or want to trigger a purge immediately by running the task by hand.

3.2 Automatic actions

Purge old interaction logs (Setup → Automatic actions) automatically deletes old document-open records once they're older than the retention period configured on the "Access Transparency" configuration page (Setup → General → "Access Transparency" → "Log retention"):

• Keep all — nothing is ever deleted.
• Delete all — every document-open record is removed each time the task runs.
• A number of months — only records older than that cutoff are removed; recent ones stay.

See 4.2 Configuration.

3.3 Notifications

None.

3.4 Rules

None.

3.5 Permissions

Seeing the "Access Transparency" tab on a User or Document page requires the Historical permission on the logged-in user's profile (Administration → Profiles → profile → "Access Transparency" tab). It's Read-only — there's nothing to grant beyond "can see it or can't." CSV export uses the same permission: if you can see the tab, you can export it, and only for Users/Documents you're otherwise allowed to view.

See 4.3 Permissions.

Generated for Access Transparency 1.2.0-beta3 on GLPI 11.0.8 — 2026-08-24.