Review Adding and Managing Users in the System if adding users to the system.

Security in the System works in a number of ways, mostly controlled by Roles and Secure Features List and their impacts.

Users who log in to the system are usually given an Employee record. This Employee record can be given Roles. A Role can have a BPM Role and Secure Features.

Most actions are restricted or allowed depending on whether the logged in user has a Role that has a Secure Feature but it can also be controlled by:

• The Qualifier for the Secure Feature for the Role
• Whether the user has a Role that has a BPM Role
• Whether the user is an Administrator, i.e. has the 'Is Admin?' check box ticked on the Employee form
• Whether the user is logged into the 'back office' (primary login), via a web portal (alternate login) or via a website (anonymous)

BPM Role

A BPM (Business Process Map) Role primarily controls what menus are available to the user, however it can also be used directly to restrict or allow an action.

See /wiki/spaces/SI/pages/33054890 for more information.

How To:

Display the Roles an Employee has

Display a Role

From an Employee

General Admin menu, Relationships, Employee > select an employee

To add a new role - clear the role form - provide a name and fill in the details.

From the Administration menu

Administration > Config > Roles

Display a Secure Feature, who has it, which roles have it.

Add a new Role

1. Administration menu, Control, Security
2. Enter a new Role Name
3. Select a BPM Role from the list if this role is to enable menus
4. Enter a Description
5. Add Secure Features as required, as shown above
6. Click 'Save F4'

Add a new Secure Feature

A new Secure Feature is only useful if the system code has restrictions based on the feature. This has to be done by System staff. Discuss your requirements with us.