Paperless

Resources

Setup

When visiting Paperless for the first time, create the local administrator account:

• Username: local-admin
• Email: local-admin@example.invalid
• enter password and sign up

Single Sign-On

If other users should join the instance, configure matching groups:

• In Quollix:
  • Create a group, for example users.
  • Add users who should have access to Paperless.
  • On the Installed Apps page, adjust the Paperless access policy so users can open the app.
• In Paperless:
  • Go to “Users & Groups”.
  • Create a group with the same name, for example users.
  • Assign the desired permissions to this group. See group sample configuration below.

Group sample configuration

• Documents + metadata: Broad permissions allow normal collaborative document management.
• Delete (*): Optional. Enable it if members are trusted to delete shared documents and metadata.
• UI Settings: View is required for normal use of the Paperless UI. Change allows users to persist their settings.
• User + Group: View is useful for object-permission management. Administrative permissions should remain restricted.
• Workflow: View-only. Workflows can automate permissions and document changes, so modification should remain administrative.
• Mail Account / Rule: Admin-only because these control document ingestion and external credentials.
• App Config: Admin-only.
• Global Statistics: Can be exposed if members are allowed to see organization-wide archive statistics.
• Object permissions: Separate from the global permissions above. For a shared archive, grant the Paperless/OIDC group View + Edit permissions on shared documents.

Miscellaneous

When a Quollix user signs in to Paperless with single sign-on, Paperless reads the user’s Quollix groups and maps them to Paperless groups with the same names. The user then receives the permissions assigned to those Paperless groups, such as permission to view and edit documents. Paperless does not create missing groups automatically. The matching group must already exist in Paperless before the user signs in. If groups are not configured as described above, users can sign in but may see permission errors like this:

Error loading settings

Details
  URL: https://paperless.test.quollix.org/api/ui_settings/
  Status: 403
  Error: You do not have permission to perform this action.