How to define a new security role
To define a new security role:
1. In SysManager > Preferences > Security, click New.
2. The Edit a Role screen is displayed.
Note: When adding a new role, all security settings are unassigned and listed on the left, and no settings are listed on the right.
Each line in the box on the left labeled Unassigned settings is a setting for a particular feature in the software. Unassigned means that for this role, they are not defined as granting access. If a setting is not defined in any roles assigned to an operator, the system looks to how the setting is defined in the Global Defaults Role and use that as its guide.
Note: The settings that are granted in the Global Default Role are also green in the Unassigned settings box. Those that are denied in the Global Default Role also show with a red X here.
There are three dropdown lists across the top of the screen that allow you to filter the displayed assigned security settings by product (Groups), applications (Modules) and categories of functionality (Categories). This allows you to wade through fewer settings when you are working on setting up a role.
3. Enter a Role Description for this role.
4. To assign a particular setting to a role, highlight it in the box on the left (Unassigned settings for this role) and click the right-facing arrow, and the setting moves to the right and is automatically turned on, or grants access to this setting for this role.
5. If you want to specifically deny access to this feature for this role
Note: this is rare and is only done to turn off a particular right for a certain role when that same right is allowed for all operators via the global defaults.
Once it is moved to the right box, hit the Space Bar on your keyboard and the green ball (on) turns to a red x (off). However, even if a setting is turned off for one role assigned to an operator, if it is turned on in another role for that operator, that operator has access to this feature. If the setting is turned on only in the Global Defaults Role, undefined in all other roles, and turned off in a single role assigned to an operator, access is still denied to this operator.
6. To assign all settings to a role, simply click the right-facing double-arrow key and all roles move from the Unassigned box to the Assigned box and are turned on. They can then be edited one by one, to turn them on, or to return them to the Unassigned box.
7. When you are finished, click Save to save your changes.