Security roles are maintained at a system level. Navigate to the Security Roles screen, to edit an existing security role by clicking on the pencil icon or to add a new security role , by clicking on the + icon.
A security role can be created from scratch or by copying an existing security role.
Populate the available fields:
Inactive: this is unticked by default and will appear in the drop down list on the User Maintenance screen. Tick the checkbox to make the security role in active.
Name: Name of the security role.
Description: Description of the role.
Security Role to Copy From: Select a value from the drop down list to create a new role by copying an existing one.
Click [Save] for the Screen Rights and Screen Section Rights sections to appear on the Security Role Maintenance screen. By default, all screen and screen rights will be displayed.
To change what is displayed on the screen, type into the Screen Search Search box and press the magnify glass or the Enter key. The search will search on all the screen names, screen section rights and what is displayed in the description.
For example searching on "Email" will return screen names and section names containing the search term.
The search also searches the contents of the tooltip. The content of the tooltip is displayed when the user hovers over the tooltip icon
. The contents includes a description and also the part of the URL that follows the site name e.g. /Utilities/ExchangeRate/Exchangerate.aspx
The screen can also be changed by selecting a value from the Screen Category drop down list to change what is displayed in the Screen Rights and Screen Section Rights grids.
Security rights are defined for screens in the Screen Rights section and for screen sections in the Screen Section Rights section. There are 6 types of security rights which are represented by the checkboxes. To grant a role full access to a screen or screen section, tick all the checkboxes. The available security rights are: View, Add, Edit, Delete, Execute, Lock and Unlock. Note that Execute, Lock ad Unlock are only relevant to certain screens based on how the screen was built.
A role must have at least "View" rights to access the screen otherwise the Access Denied message is shown on screen.
It is possible to grant a role a combination of rights such as "View" and "Execute" rights for the System User Report screen. This allows users with the role to run reports and change parameters when prompted, but they will be unable to add, edit or delete reports.
A combination of "View", "Add" and "Edit" rights for the Children and Other Dependents Details screen allows users to view the screen to add new records and make updates to existing ones but does allow users to delete records.
For screens that have a [Lock] button such as the Cost Estimate screen, users with lock rights can prevent some users from editing a few areas of the system. For example, when a user locks down a cost estimate, it is only locked at the assignment level and will be only for that template. The lock can be reversed only if the role is granted unlock rights.
To assist with ticking and unticking multiple checkboxes, there a few shortcuts:
The [Grant] and [Deny] buttons are a quick way to set a particular security right for ALL screens and ALL screen sections. The [Grant] and [Deny] buttons do not require the user to click
for the changes to take effect. For example, clicking the [Deny] button in the All View column will remove view rights for every screen and every screen section as soon as the button is clicked.
Further security role restrictions can be configured on the Advanced Data Restriction tab. These include setting up: