Info |
---|
Roles are configured in Setup / Users & Accounts / Users / Roles |
...
In the event role groups assigned to a role have opposing settings (one role group grants read rights to a screen and another does not grant read rights to the screen) the role group that enables the permission will take precedence.
As of version 10.5.0 the system is configured with four roles (Read Only Core, Admin, API Admin and API ReadOnly). These roles use core role groups to define their permissions. These default core roles cannot be modified or deleted.
Prerequisites
Role groups must be setup in order to assign permissions to roles.
Roles Panel
The Roles panel on the left of this screen allows you to select existing roles to view and edit on the Edit Role panel to the right. Actions are also available in this panel which are shown as icons above the Filter text box. The available actions are described below.
Actions
Icon | Description |
---|---|
Deletes the role if not in use | |
Adds a new role |
Edit Role Panel
The information in this panel reflects the currently selected role. From here you can change role details (fields will display a red left border if a value is required and purple text if the field is read-only and cannot be modified).
...
Name: a descriptive name for the role (administrator, account manager, etc.)
Type: indicates if the role provides permissions to access the Application UI (AdminPortal) or provides API permissions. A role can only be setup with either Application or API role groups, a role cannot be configured with both types of role groups
Role Groups tab
On this tab you can view, add and delete role groups which define the permissions granted to the role. You can only select role groups that match the role type (e.g. if the role Type is set to ‘API’ then only role groups configured with the Type ‘API’ will appear in the Role Groups drop down field).
References tab
This section indicates where the selected role is in use within the system. A Filter References field is present which allows you to filter down to the see references that you wish to seerelated to a particular system entity.
...
Adding Roles
Under the Roles heading on the left click the icon
Under the Add Role heading on the right specify the role name
On the Role Groups tab select
...
one or more role groups that you wish to assign to the role and click + Add
Click Save
...
Editing Roles
Under the Role heading on the left click the role you wish to edit
Under the Edit Role heading on the right modify the role
...
Name if desired
On the Role Groups tab add or remove the desired role groups to modify the permissions granted to the role
Click Save when you have finished making changes
...
Deleting Roles
Info |
---|
Note: The core roles that come with the application (Read Only Core, Admin, API Admin and API ReadOnly) cannot be deleted. |
Under the Roles heading on the left select the role you wish to delete
Under the same Roles heading click the icon
On the confirmation dialog that appears select Yes