Review Adding and Managing Users in the System if adding users to the system.

Roles

Role Level is used to manage reporting relationships in the system

Usage Preferences - persons that may be assigned the role

• Primary - employees can be assigned this role
• Alternative - people linked to debtors or creditors can be assigned this role in the context of that link
• Guest - people may have a direct guest link to get access to limited information - eg on websites
• Any - any of the above

Type - types are used to determine which persons on a customer or supplier are contacted by system generated emails (eg people with an Accounts type role will get statements, remittance advices etc from the system) - see Adding and Managing Users in the System

Roles provide users with Secure Features - see Secure Features.

Most actions are restricted or allowed depending on whether the logged in user has a Role that has a Secure Feature but it can also be controlled by:

• The Qualifier for the Secure Feature for the Role
• Whether the user has a Role that has a BPM Role
• Whether the user is an Administrator, i.e. has the 'Is Admin?' check box ticked on the Employee form (this can only be ticked by an employee that already has it ticked)
• Whether the user is logged into as
  • Registered Employee - normal users
  • Member/Business Associate - customers or suppliers, agents, or other external party
  • Guest - Anonymous style - perhaps a website

BPM Role

A BPM (Business Process Map) Role primarily controls what menus are available to the user, however it can also be used directly to restrict or allow an action.

See /wiki/spaces/SI/pages/33054890 for more information.

How To:

Display the Roles an Employee has

Display a Role definition

From an Employee

General Admin menu, Relationships, Employee > select an employee

To add a new role - clear the role form - provide a name and fill in the details.

From the Administration menu

Administration > Config > Roles

Display a Secure Feature, who has it, which roles have it.

Add a new Role

1. Administration menu, Control, Security
2. Enter a new Role Name
3. Select a BPM Role from the list if this role is to enable menus
4. Enter a Description
5. Add Secure Features as required, as shown above
6. Click 'Save F4'

Add a new Secure Feature

A new Secure Feature is only useful if the system code has restrictions based on the feature. This has to be done by System staff. Discuss your requirements with us.

Terminate a Role

To keep history of the roles in the system - roles are not deleted - they are terminated.

Status > Terminate this role

A terminated role can be re-instated