You use this program to selectively assign the program access levels you require for a specific operator role.
These settings are applied to the operators assigned to the role, so you can restrict operator access to specific programs.
These access restrictions can be assigned using operator groups when not using roles (see Operator Group Maintenance).
Field | Description |
---|---|
Configuration | |
Copy From Another Configuration | Select this to copy the Program access settings from another role or from an operator group to the currently displayed role (see Copy Selected Configuration). |
Role | Indicate the role for which you want to maintain program access settings. |
Organogram | Select this to use the Organogram program to view and manipulate the hierarchy of roles (organorgam) for your organization. |
This screen is displayed when you select the Copy From Another Configuration option from the Configuration menu.
This enables you to copy the Program access settings from another operator group or from another operator role to the currently displayed role.
If you selected the option: Access control by company within role (Role Management - Global Configuration), then you can copy the Program access settings from a role in a different SYSPRO company.
Field | Description |
---|---|
Copy Configuration | Select this to copy the Program
access settings for the operator role or group
currently highlighted in the listview to the currently
displayed role. When you select this option, you are prompted to confirm the copy. When you confirm the copy, the current Program access settings for the role are replaced by the Program access settings for the role/group you highlighted in this listview. |
Close | Select this to return to the previous screen. |
Type | Program access can be defined by operator group (Operator Group Maintenance) or by operator role (Role Program Access Maintenance). This indicates whether the code displayed in the listview is an operator group or an operator role. |
Code | This indicates the code of the operator group or operator role. |
Company | This indicates the code of the SYSPRO company in
which the role exists. This is only displayed if you selected the option: Program access by company within role (Role Management - Global Configuration). Where this column is blank, it indicates that the role is defined in the current company. |
Name | This indicates the description defined against the operator group or the operator role. |
You use this listview to selectively assign program access levels for operators assigned to the role. Details of SYSPRO modules and programs are displayed in this editable listview.
This pane is disabled if you have indicated that the operator is a System administrator. The reason is that System administrators have unrestricted access to the system.
When new SYSPRO programs are added to SYSPRO, the default security level is set to Denied for non-browse programs and to Browse only for browse programs.
Field | Description |
---|---|
Allow Access to all | Select this to grant the role access to all programs. |
Deny Access to all | Select this to deny the role access to all programs.
This is useful if you want to grant the role access to only a few programs in the listview. Once access is denied to all programs, you can select the individual programs to which you want to grant the role access. |
Program | This indicates the program code. |
Access allowed | Indicate the access level to the corresponding program for the role. Select this to indicate that the role has full access to the program. This includes access to the maintenance functions on browse programs.When you allow access to a program, the Job logging required option is automatically selected if the option: Job logging required (Company Maintenance) is selected. If this option is not selected, it indicates that the role has no access to the program. The operators in the role are unable to run the program. However, if the program is a Browse type program, you can still give operators Browse only access. |
Browse |
The word 'Yes' in this column indicates that the program is a Browse program. Browse programs are typically the setup programs which enable you to view information for key fields such as suppliers, customers, ledger codes, banks, currencies, stock codes, etc. From the setup type browse programs, you can also select to maintain the information. The word 'No' in this column indicates that the program is a non-browse program. Non-browse programs typically enable you to process transactions, set options and perform functions such as paying a supplier, invoicing a customer, performing a stock take, etc. |
Module | This indicates the module in which the program resides. |
Description | This indicates the description of the program. |
Browse only access | Select this to indicate that the role has access to viewing information in the browse program only. Access to the maintenance functions (e.g. Add, Change, Delete) is disabled. This option is available for browse programs only and is therefore only enabled if the word "Yes" is displayed in the Browse column. |
Job logging required |
This column indicates whether job logging is enabled for the role for that program. Job logging can only be enabled if you selected the setup option: Job logging required (Company Maintenance) and you selected Access allowed against the program. |
Security access can be configured selectively by program (see Set security selectively by program) and selectively by module (see Set security selectively by module).
These options are displayed when you right click on one or more highlighted lines in the Program Access listview. You can use the Ctrl and Shift keys together with your mouse pointer to individually highlight lines.
Field | Description |
---|---|
Allow Access | Select this to allow access to all programs currently highlighted in the listview and, if you selected the setup option: Job logging required (Company Maintenance), set job logging on for all those programs. |
Allow Access To Module | Select this to allow access to all programs in the currently highlighted module. In addition, if you selected the setup option: Job logging required (Company Maintenance), then job logging is set on for all programs in the currently highlighted module. |
Deny Access | Select this to deny access to all programs currently highlighted in the listview. |
Deny Access To Module | Select this to deny access to all non-browse programs in the currently highlighted module and set all browse programs to browse only. |
Set Job Logging On for All |
Select this to set job logging on for all programs in the currently highlighted module. This only applies if you selected the option: Job logging can only be enabled if you selected the setup option: Job logging required (Company Maintenance) and you selected Access allowed against the program. |
Set Job Logging Off for All | Select this to set job logging off for all programs in the currently highlighted module. |
Copy To Other Roles | Select this to use the Role Management Global Changes program to copy the Program Access settings currently highlighted in the listview to other roles. |
If the activity: BOM Access to Structure & Routings (Operator Maintenance - Security tab) is denied, then the role cannot access the Structures and Routings program, irrespective of your settings against the Structures and Routings program here.
Operators assigned to a System administrator group (Operator Group Maintenance) have unrestricted access to the entire SYSPRO system and are therefore not restricted by any role program access.
If you deny access to a program that appears in more than one module, then access to the program is denied in all modules.
Where the Browse programs (listviews) and Maintenance programs are split into two programs, each have their own security access settings. You need to consider this when setting the security for the Maintenance program, as you could have a situation where the security is set up to disallow access to the Browse program but access to the Maintenance program can be gained by from the SYSPRO Desktop (Browse only, and access to the Maintenance program to Denied.
-> ). Therefore, to deny access to the Maintenance program, you need to set access to the Browse program toSet security selectively by program
This task describes how you can apply security to a group of programs.
Hold down the Ctrl key and use your mouse pointer to select the individual programs in the Program Access listview to which you want to apply security.
Alternatively, use the Shift key to select a consecutive number of programs.
Typically use your right mouse button to select the access level required for the programs you highlighted as follows:
If you select the Allow access to module or Deny access to module options, then that option is applied to all programs in the module(s) currently highlighted and not only to the programs that are highlighted. |
Save your settings.
Set security selectively by module
This task describes how you can apply security to all programs within a module.
Typically right-click your mouse pointer on a module in the Program Access listview and select the option(s) you want to apply to all the programs for the currently highlighted module.
These options include:
Save your settings.