Applied Users Forums

General Topics => Helpline => Topic started by: Alice on September 21, 2010, 11:09:26 PM

Title: Security Manager Question
Post by: Alice on September 21, 2010, 11:09:26 PM
I need to create a new group to accommodate a new position in the service area. This person is to have basic csr access with additional rights to certain areas. Do I need to go through and select everything the csr group has then add what's needed, or can I create the group, put someone in there and give the "same as" rights and expect the group to automatically update? Guess I'm looking for a shortcut to save some time and a miracle maybe.
Has anyone done this or do I really need to start from scratch?
Title: Re: Security Manager Question
Post by: Andrew Carrick on September 22, 2010, 03:21:53 AM
You can "grant same as" for a Group. Try it, you can always delete the test group.
Title: Re: Security Manager Question
Post by: DebAmstutz on September 22, 2010, 09:14:16 AM
You can make the person a member of the CSR group AND the new group you created.  I have created various groups with specific rights and some people here may be members of the CSR group and the Reports group and so on.  That works for me.
Title: Re: Security Manager Question
Post by: Jan Regnier on September 22, 2010, 10:15:19 AM
Alice

I attached is link to a KB doc I printed out yesterday regarding Security Manager FAQs.  I thought it was a pretty good source of info.  It might be helpful.


https://www.appliedsystems.com/apps/Knowledgebase/Article.aspx?kb=32315 (https://www.appliedsystems.com/apps/Knowledgebase/Article.aspx?kb=32315)
Title: Re: Security Manager Question
Post by: Judy Means on September 22, 2010, 11:22:57 AM
I'm searching through security to let the CSR's print a deletion report.  They don't have the rights. 

Anyone know where that is?



Judy
Title: Re: Security Manager Question
Post by: Alice on September 22, 2010, 11:28:14 AM
Thanks everyone! Made my life a lot easier
gotta love this place
Title: Re: Security Manager Question
Post by: Andrew Carrick on September 22, 2010, 11:28:52 AM
It's under Customer.
Title: Re: Security Manager Question
Post by: Lance Bateman on September 22, 2010, 01:11:00 PM
Quote from: Judy Means on September 22, 2010, 11:22:57 AM
I'm searching through security to let the CSR's print a deletion report.  They don't have the rights. 

Anyone know where that is?



Judy

That may require some rights to reports.  That part gets a bit sticky.
Title: Re: Security Manager Question
Post by: Judy Means on September 22, 2010, 05:15:24 PM
Well, after some digging, I found it.  You click on Customer, and one of the options there is to Print the deletion report.  I was looking under cancellation and forms. 

All is well again.


Judy
Title: Re: Security Manager Question
Post by: Alice on September 27, 2010, 10:05:47 AM
Quote from: DebAmstutz on September 22, 2010, 09:14:16 AM
You can make the person a member of the CSR group AND the new group you created.  I have created various groups with specific rights and some people here may be members of the CSR group and the Reports group and so on.  That works for me.

Deb - does this work only if you use Inherited and not Deny? I'm thinking if anything in the CSR group is denied, then granted in another group, it would still be denied, no?
Thanks!
Title: Re: Security Manager Question
Post by: Lance Bateman on September 27, 2010, 12:59:30 PM
Quote from: Alice on September 27, 2010, 10:05:47 AM
Quote from: DebAmstutz on September 22, 2010, 09:14:16 AM
You can make the person a member of the CSR group AND the new group you created.  I have created various groups with specific rights and some people here may be members of the CSR group and the Reports group and so on.  That works for me.

Deb - does this work only if you use Inherited and not Deny? I'm thinking if anything in the CSR group is denied, then granted in another group, it would still be denied, no?
Thanks!

If memory serves, by applying the "okay" in the Groups, avoiding "inherited" when setting up the Groups, and not "granting or denying" anything in individual profiles, you avoid the problems.  For instance, everyone in Accounting had certain access, but only those doing "Close Day" had other access.
Title: Re: Security Manager Question
Post by: Alice on September 28, 2010, 04:52:50 PM
thanks Lance.  Finally had some time to think about this and now it makes sense what everyone is saying.
Onward...