...
Review Adding and Managing Users in the System if adding users to the system.
| Gliffy | ||||
|---|---|---|---|---|
|
Security in the System works in a number of ways, mostly controlled by Roles and Secure Features List and their impacts.
...
Roles
Role Level is used to manage reporting relationships in the system
Usage Preferences - persons that may be assigned the role
- Primary - employees can be assigned this role
- Alternative - people linked to debtors or creditors can be assigned this role in the context of that link
- Guest - people may have a direct guest link to get access to limited information - eg on websites
- Any - any of the above
Type - types are used to determine which persons on a customer or supplier are contacted by system generated emails (eg people with an Accounts type role will get statements, remittance advices etc from the system) - see Adding and Managing Users in the System
Roles provide users with Secure Features - see Secure Features.
Most actions are restricted or allowed depending on whether the logged in user has a Role that has a Secure Feature but it can also be controlled by:
- The Qualifier for the Secure Feature for the Role
- Whether the user has a Role that has a BPM Role
- Whether the user is an Administrator, i.e. has the 'Is Admin?' check box ticked on the Employee formthe Employee form (this can only be ticked by an employee that already has it ticked)
- Whether the user is logged into the 'back office' (primary login), via a web portal (alternate login) or via a website (anonymous)as
- Registered Employee - normal users
- Member/Business Associate - customers or suppliers, agents, or other external party
- Guest - Anonymous style - perhaps a website
BPM Role
A BPM (Business Process Map) Role primarily controls what menus are available to the user, however it can also be used directly to restrict or allow an action.
See /wiki/spaces/SI/pages/33054890 for more information.
How To:
Display the Roles an Employee has
Display a Role definition
From an Employee
General Admin menu, Relationships, Employee > select an employee
...
To add a new role - clear the role form - provide a name and fill in the details.
From the Administration menu
Administration > Config > Roles
Display a Secure Feature, who has it, which roles have it.
Add a new Role
- Administration menu, Control, Security
- Enter a new Role Name
- Select a BPM Role from the list if this role is to enable menus
- Enter a Description
- Add Secure Features as required, as shown above
- Click 'Save F4'
Add a new Secure Feature
A new Secure Feature is only useful if the system code has restrictions based on the feature. This has to be done by System staff. Discuss your requirements with us.
Terminate a Role
To keep history of the roles in the system - roles are not deleted - they are terminated.
Status > Terminate this role
A terminated role can be re-instated