# 4. Setup

<div align="right">

![logo](https://docs.tic.gal/uploads/images/gallery/2026-08/bfrj56m27L9UvfhL-embedded-image-q9sczv4y.png)

</div>

*Part of the **Access Transparency** manual — see also [1. Introduction](https://docs.tic.gal/books/access-transparency/page/1-introduction), [2. What's New](https://docs.tic.gal/books/access-transparency/page/2-whats-new), [3. Scope](https://docs.tic.gal/books/access-transparency/page/3-scope), [5. Usage](https://docs.tic.gal/books/access-transparency/page/5-usage), [6. Troubleshooting](https://docs.tic.gal/books/access-transparency/page/6-troubleshooting).*

## 4.1 Installation

## 4.2 Configuration

### 4.2.1 Automatic actions

**Purge old interaction logs** (Setup → Automatic actions) automatically deletes old document-open records once they're older than the retention period configured on the "Access Transparency" configuration page (Setup → General → "Access Transparency" → "Log retention"):

- **Keep all** — nothing is ever deleted.
- **Delete all** — every document-open record is removed each time the task runs.
- **A number of months** — only records older than that cutoff are removed; recent ones stay.

---

## 4.3 Permissions

Seeing the "Access Transparency" tab on a User or Document page requires the **Historical** permission on the logged-in user's profile (Administration → Profiles → *profile* → "Access Transparency" tab). It's Read-only — there's nothing to grant beyond "can see it or can't." CSV export uses the same permission: if you can see the tab, you can export it, and only for Users/Documents you're otherwise allowed to view.

## 4.4 Configuring Access Transparency

Access Transparency adds one configuration page (log retention and excluded logins) and one permission (granted per profile) that controls who can see the "Access Transparency" tabs.

### 4.4.1 Log in to GLPI

Open GLPI and log in with an administrator account.

### 4.4.2 Open the Access Transparency configuration page

Go to **Setup → General**, then open the **Access Transparency** tab.

### 4.4.3 Set log retention and excluded logins

**Log retention** controls how long document-open records are kept: **Keep all** never deletes them, **Delete all** removes them immediately on the next scheduled purge, or pick a number of months to delete anything older than that. **Excluded logins** is a comma-separated list of accounts (e.g. service/cron accounts like `inventory` or `ocsinventory`) whose document views are never tracked. Save to apply either setting.

![The Access Transparency configuration page: log retention and excluded logins.](https://docs.tic.gal/uploads/images/gallery/2026-08/Lc4xvOyc6ysjeujB-embedded-image-tan73jee.png)

*The Access Transparency configuration page: log retention and excluded logins.*

### 4.4.4 Open a profile's Access Transparency tab

Go to **Administration → Profiles**, open a profile, then click its **Access Transparency** tab to grant or revoke the permission for that profile.

### 4.4.5 Grant or revoke the Historical permission

The tab shows a single **Historical** row with a **Read** checkbox. Check it to let this profile see the "Access Transparency" tabs on User and Document pages (and export their CSV); uncheck it to hide them. Click **Save** to apply the change.

![Granting the Historical permission on a profile.](https://docs.tic.gal/uploads/images/gallery/2026-08/yU54lMYWRLya9xGb-embedded-image-epj1jblf.png)

*Granting the Historical permission on a profile.*

> Generated for **Access Transparency 1.2.0-beta3** on GLPI 11.0.8 — 2026-08-24.