User Security

The Region Settings pane allows the system administrator to define which regions the user can access. A region is a group of properties that have something in common, such as geographical proximity or similarity in function (for example, the Asia-Pacific region or the Midwest Retail Outlets region). Granting access to a region grants access to each property within the region.

To grant the user access to a region:

1. Click SELECT REGION.

2. Search for and select the region you want to grant access to.

   The selected region opens in the Current Regions pane.

3. In the Tab Order field, enter a numeric value.

   The Tab Order indicates the position, in menus, where this value will be listed. Lower numbered values are displayed toward the top of the list. Values will the same tab order will be sorted alphabetically.

4. Select either All Requests or Restricted from the menu.

   Selecting All Requests grants the user access to all requests created on any property in the region. Selecting Restricted restricts the user to accessing only those requests created by or assigned to that user.

   Note:

   If rights are assigned to both regions and properties within a region, Restricted region rights override any rights set at the property level.

5. Click UPDATE.

If you want to delete a region from the list of regions this user can access, click the DELETE button to the right of the region name.

You can only delete a user's access to a region that you also have access to. If a user was granted access to a region that you do not have, no DELETE button will be displayed.

The Property Settings pane allows the system administrator to define which properties a user can access and which property is the user's default property.

To grant the user access to a property:

1. Click SELECT PROPERTY.

2. Search for and select the property you want to grant access to.

   The selected property is displayed in the Current Properties pane.

3. If you want to designate the property as the user's default property, click the Set as Default link.

   The default property is the one that is selected for this user, by default, on certain pages where a property can be selected, for example, Create Request or Create Schedule.

4. In the first field, select the user's default space within this property.

   The default space is the one that is selected for this user, by default, on certain pages where a space can be selected, for example, Create Request or Create Schedule.

5. If the full space hierarchy is enabled, a second menu is available to select the user's default subspace.

6. Select either All Requests or Restricted from the second menu.

   Selecting All Requests grants the user access to all requests created on any property in the region. Selecting Restricted restricts the user to accessing only those requests created by or assigned to that user.

   Note:

   If rights are assigned to both regions and properties within a region, Restricted region rights override any rights set at the property level.

7. Click UPDATE.

If you want to delete a property from the list of properties this user can access, click the DELETE button to the right of the property name.

Departments Settings pane allows the system administrator to define which departments a user is affiliated with. Since spaces can be allocated to a department (either through Space Categorization or Complex Allocations), granting access to a department grants the user security right to all spaces allocated to that department.

To search a user’s associated departments:

1. In theSearch Associated Departmentsfield, type a search value.

2. ClickFind.

The page displays the matching results and hides all other department associations.

If a user has more than fifty department associations, departments are listed on multiple pages. To use the pagination feature, click the page number you want to view or clickNextto navigate to the next page of department associations.

To affiliate a user with a department:

1. Click SELECT DEPARTMENTS.

   The Add Departments dialog box opens allowing you to search for and select departments.

2. Enter search criteria (department number or description) and click FIND.

   A list of the departments that match your criteria appears. If a department is preceded by a small triangle, it is a parent department with one or more child departments. Click the triangle to expand the list.

   Note:

   If your installation has parent-child department hierarchies defined, associating a parent department with a user automatically associates all child departments with that user as well. If you do not want to associate one or more child departments, you must expand the parent department in the Add Department dialog box and explicitly deselect the unwanted child departments.

3. Select the check box to the right of each department you want to associate with the user.

   If you select a parent department, all child departments are also selected, by default.

4. If you want to designate the department as the user's default department, click the Set as Default link.

   The selected department is set as the user's default department and is moved to the top of the list. Designating a department as a user’s default department is used informational purposes. If a user is granted security rights to several departments, the default department can be used to indicate the actual department the user is a member of.

5. Click SAVE.

   The selected departments are added to the list of current departments.

If you want to delete a department association from the list, click the DELETE button to the right of the department name. If you delete an association with a parent department, only that department association is deleted. Any associations with child departments remain in the list.

Activity Groups are used to group and organize request types and control user access to them. The Activity Groups pane allows the system administrator to define which activity groups a user can access.

Administrators that have not been granted the Associate Users to Activity Groups security right in Additional Administrator Rights security rights pane can view a user's activity group settings but cannot modify them.

Granting access to an activity group allows a user to create requests, perform searches, and run reports on the request types included in that group. It also controls the types of requests that can be assigned to a user, if the Allow Assignment option is enabled.

To grant the user access to an activity group:

1. In the Add Activity Group field, select the activity group you want to grant access to.

2. Click ADD.

   The selected activity group is displayed in the Current Activity Groups pane.

3. In the Tab Order field, enter a numeric value.

   The Tab Order indicates the position, in menus, where this value will be listed. Lower numbered values are displayed toward the top of the list. Values will the same tab order will be sorted alphabetically.

4. In the Allow Assignment field, select Yes to indicate that this user can be assigned requests of the types in this group.

   If you select No, this user can create requests of the selected types, but cannot can be assigned requests of the selected types.

5. Select either All Requests or Restricted from the second menu.

   Selecting All Requests grants the user access to all requests of the types included in that activity group in any property or region that the user has access to. This allows the user to view the requests on the My Requests page or search for these requests on the Find Request page. Selecting Restricted restricts the user to being able to create requests of the type in this activity group only.

6. Click UPDATE.

If you want to delete an activity group from the list of activity groups this user can access, click the DELETE button to the right of the activity group name.

The Asset Groups pane allows the system administrator to define which asset groups the user can access. Asset Groups contain one or more asset classes and are used to organize and control user access to them.

Granting access to an asset group allows users to create, find, or run reports on assets that belong to a class contained in the group.

To grant the user access to an asset group:

1. In the Add Asset Group field, select the asset group you want to grant access to.

2. Click ADD.

   The selected asset group is displayed in the Current Activity Groups pane.

If you want to delete an asset group from the list of asset groups this user can access, click the DELETE button to the right of the asset group name.

Module security rights establish which application modules a user has permission to access, and further define which functions within a module the user can perform. Module security rights can be granted using a security profile or by selecting individual rights for a particular user.

Security Profile

Using a security profile grants an established set of rights to a user. A security profile establishes the module security rights only; it does not change the regions, properties, or other entities that the user has access to.

Using a security profile provides the following advantages:

• You can ensure that all users at a particular level or job function have the same set of rights.

• If you add or delete rights from a security profile, those changes are propagated to all users that use that security profile.

• You do not have to select or clear dozens of check boxes on the User Security page individually to establish a user's security rights.

Note:

You can create a security profile based on the rights established in any user account by selecting Yes in the Security Profile field on the Edit User page. For more information, see Edit a User.

To use a security profile:

1. In the Security Profile field, select the name of the security profile you want to apply to this user.

2. Click USE SECURITY PROFILE .

   All of the module security right check boxes are updated to correspond to the rights associated with this profile.

   Note:

   If you save this security profile to this user's account by clicking UPDATE, any previous security rights established for this user will be discarded. If you exit the User Security page without updating, the previous security rights will be restored.

3. Click UPDATE.

Logbook Security Rights

• Access Logbook – Allows the user to access the Logbook module.

• My Requests – Allows the user to access the My Requests tab. If this security right is not granted, the user cannot search for work requests by request ID.

• Find Requests – Allows the user access to the Find Requests tab to search for requests using the specified criteria. Unnamed guests can search by request ID only.

• Update Requests – Allows a full user to add general comments and reassign requests.

  Note:

  To update closed work requests, users must also be granted the Close Requests security right.
  

• Close Requests – Allows a full user to change the request status to Closed or to update a closed work request.

  If External Vendor Control functionality is enabled, the Close Requests security right is replaced with the following security right options:

  • Close Requests (All) – Allows a user to close any work order.

  • Close Requests (Non-Integrated Only) – Restricts a user from closing any work order that is flagged as external, but allows the user to close non-external work orders. This restriction is only applied to requests where the request type has the Push WOs to External System flag set to Yes.

• Run Reports – Allows a full user to run Logbook Request reports.

• Performance Reports – Allows a full user to run Logbook Performance reports. These reports allow users to analyze work request completion efficiency.

• Knowledge Base – Allows a full user read-only access to the Knowledge Base.

• Internal Comments – Allows a full user to enter and view internal comments.

• Find Procedures – Allows a full user to access the Find Procedures tab in the Knowledge module to search for and print procedures.

• Attachments – Allows a full or guest user to attach files to a request.

• Future Requests – Allows a full user to schedule or reschedule requests for a future date. When this right is granted, the Schedule For field on the Create Request page and Re-schedule For field on the Request Details page are displayed.

• Restrict History/SOW – Restricts a user from seeing the Request History for a work order request. If this restriction is selected, the user will see the original comment and statement of work only.

• Help Desk User – Allows a full user to reclassify work orders by Property, Space, Type, Sub-Type, and Priority. In addition, this right allows users to filter work order requests by Region.

• User Groups – Allows a full user to view the My Requests, Find Requests, and Run Reports pages in Logbook based on the user group.

• Create Requests – Allows full or guest users to access the Create Request page to create work orders.

• Notify Assigned To On/Off – Controls this user's default setting for request update notifications to the Assigned To user. If selected, the Notify Assigned To check box will be selected, by default, when the user opens the Request Details or Reclassify Work Order page. This will cause the Assigned To user to receive a notification email when the request is updated. Notifications are only sent if the request is not assigned to the user making the update. Regardless of this setting, the user can select the Notify Assigned To check box, if needed.

• Backdate SLA Values – Allows a user to set the SLA Estimated Completion Date to a date before what is already set on the work order.

• Show Detail On/Off – Controls this user's default setting for the Show Details check box on the My Requests and Find Requests pages. If selected, Show Details check box will be selected, by default, displaying more detailed information about the listed work requests (for example, comments or links to attachments). Regardless of this setting, the user can select the Show Details check box, if needed.

• Public Documents – This security right operates differently for guest and full users.

  For guest users, granting this right displays the Documents tab in the Logbook module, allowing guest users to access public documents from the Logbook.

  For full users, granting this right displays the Documents tab in the Knowledge module, allowing a full user to access public documents from the Knowledge module. Full users must also have either the Knowledge Base or the Find Procedures security right granted so that they can access the Knowledge module.

• Authorize Entry – This feature is used to authorize access to a space and add comments to work orders. The Authorize Entry feature is largely used in residential properties, giving the renter/owner the ability to authorize work if they are not present.

• Allowed Entered in Error – Allows a full user to change status of a work order request to Entered in Error, thereby removing the request from work order reporting.

• My Company Only – Ensures work requests and spaces associated exclusively with your company are displayed. It filters requests on the My Request page to those created by you or your colleagues, and it restricts the Space menu on the Create Request page to relevant company spaces.

• CR-GL Acct – This security right is used in conjunction with the Chart of Accounts and the Chart of Accounts Mask features. If this security right is granted, an Account field is displayed on the Create Requests page for all properties that have an associated chart of accounts and chart of accounts mask. This allows the creator of the request to enter account information for billing purposes when the request is created.

• Show Close Date – Allows a full user to modify the Closed Date and Time on a work request. If this right is not granted, the system will display the Closed Date and Time as static text, thereby preventing users from back dating or specifying their own close date on work requests. By default, all new users have this security right turned off.

• Adv Reassign – Allows a full user to access the Advanced Reassign feature. When this security right is granted, the Adv Reassign link appears next to the Assigned To field on the Request Details page. Clicking this link opens a dialog box containing a list of suggested reassignment users.

• Restrict To Company – Restricts a user's Logbook reports results to contain information only about requests that were assigned to himself or to users from the same company. Also restricts a user to adding or viewing work order watchers from the same company if they have the Add/View Others as Watcher security right enabled.

• Update Locked Status – Allows a full user to make status changes to requests that are in a status that has the Locked Flag set to User Security. It does not allow a user to make status changes to requests in a status where the Locked Flag value is set Yes.

• General Comments – Allows a user to view and update the Comments field on a work order. If not selected, the Comments field does not display, but the user can still view comments in the work order history. Disabling this security right does not prevent users from adding comments using email response codes.

• View Parent/Child WOs – Allows a user access to the Parent/Child and Maintenance Projects pane on the Logbook Request Details page. This pane allows users to view, create, and add parent and child work orders.

• View Cost Rollups – Allows a full user to view the costs that roll up from child work orders in addition to the costs entered directly on a work order when viewing the Work Order Financial page. If this security right is not granted, the user will only see the costs associated with the current work order.

• Manage Templates – This feature is not currently implemented and will be more fully defined in a future release.

• Use Project Templates – This feature is not currently implemented and will be more fully defined in a future release.

• Mass Update – Allows a user to update multiple work orders at the same time using the Work Order Mass Update feature.

  This security right is only available if the Mass Update Requests functionality has been enabled for the installation.

• Access Mobile App – Allows a full user to access the 360Facility application for use on iPhones and Android phones.

• Override Svc Provider to Invoice – Allows a user to override the value from the Svc Provider to Invoice menu on the Update Request pane of the Request Details page. Normally, users can only select a value from this menu if the value of the Svc Provider to Invoice Logbook configuration value is set to Show – Default Yes or Show – Do not default. Users granted the Override Svc Provider to Invoice security right can change the value, regardless of the configuration setting.

• Guest Complete Work – This security right is displayed for guest users only. Allows a guest user to change the status of a work request to the default Complete status.

• Guest Approve Work – This security right is displayed for guest users only. Allows a guest user to with sufficient approval level to be designated as a work request approver as long as the option for self-approving work orders is set to Yes.

• Always close without Labor Costs – Allows a full user to close a work order, ignoring any labor entry requirements that would normally be needed. For example, if a user or building needs to be inactivated but has open work orders, this security right allows the labor requirement to be ignored, thereby saving time in closing any open work orders.

• Update Int Locked Fields - Allows users to edit fields that are normally locked down on integrated work orders.

• Request Hub - Allows a full user to Access the Request Hub page to manage work requests.

• Add/View Others as Watcher - Allows the user to add other users as watchers to a work order and to view them in the Current Watchers list on the work order

• Remove Others as Watcher - Allows the user to remove other users as watchers on a work order

• View Account Info – For installations using NPFA, this security right controls whether the Accounts pane is displayed on the Request Details page. If enabled, a user can see the Accounts pane, in read-only mode; if it is disabled, the Accounts pane is hidden.

• Create Account Info – For installations using NPFA, this security right controls whether the Accounts pane is displayed on the Create Request page, allowing the user to add account information when initially creating a work request. The View Account Info security right must be enabled for this security right to be enabled.

• Edit Account Info – For installations using NPFA, this security right controls whether a user can modify the values in the Accounts pane on the Request Details page, including the ability to add account information to work orders that have no account information defined. The View Account Info and Create Account Info security rights must be enabled for this security right to be enabled.

Reclassify Request Security Rights

• Reclassify Request – Allows a full user to access the Reclassify Work Order page and modify a work request. To change the Complete By date on a work request, a user must have both Reclassify Request and Chg Complete By Date security rights.

• Update Priority – Allows a full user who has been given the Reclassify Request security right to edit the Priority field on the Reclassify Work Order page.

• Update Property – Allows a full user who has been given the Reclassify Request security right to edit the Property field on the Reclassify Work Order page.

• Update Complete By Date –Allows a full user to modify the Complete By date on the Reclassify Work Order page and override the default SLA Estimated Completion Date. This date can be viewed in the Other Options pane on the Request Details page.

  Note:

  The changing of Complete By date is also configurable at the origination code level. See Logbook Origination Codes for more information.

• Update NTE – Allows a full user who has been given the Reclassify Request security right to update the Not To Exceed (NTE) amount when reclassifying a work order.

• Update Request Type – Allows a full user who has been given the Reclassify Request security right to change the type of a work request. When granted, the Update Request Sub Type right is also granted to prevent the type/subtype mismatch that would occur if a user changed the request type but was not allowed to change the subType.

• Update Request Sub Type – Allows a full user who has been given the Reclassify Request security right to change the subType of a work request. Granting this right without granting the Update Request Type right allows a user to only change the subType within the selected type.

• Update Origination Code – Allows a full user who has been given the Reclassify Request security right to change the code that indicates the origin of a work request, for example, from a call center or from a field engineer.

Work Order Security Rights

If your installation is using Work Order 1.0, the following security rights are available:

• Access Work Order – Allows a user to view and update work order information on the View Request Details page and access the Work Order – Financial page.

• WO Reports – Allows a full user to access Work Order Reports (used for invoicing and accounting uploading capabilities) on the Logbook Run Reports page.

• Run Update Reports – Allows a full user to run the Work Order Reports in Update mode. Update mode allows the user to change the billing status for requests in a particular billing cycle. This security right also allows a user to edit Labor costs, enabling the Edit button on the Work Order Financial page.

• Restricted WO View – Restricts a full user from seeing labor rates, material costs, or other costs on a work order.

• View Space-Account – Controls how values are displayed in the Space/Floor menu on the Create Request page. If this security right is granted, the account is appended to the name of the space in the menu. This security right is useful for service coordinators in facilities who need to see the account information when entering a work request

• Update Billable Flag – Allows a full user to change the default billable flag. If this right is not granted, the user will be able to view the default billing but cannot modify it.

• Accounts Payable – This security right allows the user to enter payable information from vendors.

• Update Locked Financial – Allows a full user to make changes to the Work Order Financial page for requests that are in a status that has the Lock Financial flag set to User Security. It does not allow a user to make changes to the Work Order Financial page for requests in a status where the Locked Financial flag value is set Yes.

If your installation is using Work Order 2.0, the following security rights are available:

• Access Work Order – Allows a user to view and update work order information on the View Request Details page and access the Work Order – Financial page.

• WO Reports – Allows a full user to access Work Order Reports (used for invoicing and accounting uploading capabilities) on the Logbook Run Reports page.

• Run Update Reports – Allows a full user to run the Work Order Reports in Update mode. Update mode allows the user to change the billing status for requests in a particular billing cycle. This security right also allows a user to edit Labor costs, enabling the Edit button on the Work Order Financial page.

• Restricted WO View – Restricts a full user from seeing labor rates, material costs, or other costs on a work order.

• Update Billable Flag – Allows a full user to change the default billable flag. If this right is not granted, the user will be able to view the default billing but cannot modify it.

• Update Locked Financial – Allows a full user to make changes to the Work Order Financial page for requests that are in a status that has the Lock Financial flag set to User Security. It does not allow a user to make changes to the Work Order Financial page for requests in a status where the Locked Financial flag value is set Yes.

• Enter Invoice/Payments – Allows a full user to create and update invoice and payment information on the Work Order Financial page.

• View Invoice/Payments – Allows a full user to view invoice and payment information on the Work Order Financial and Purchase Order Details pages and to access the Find Invoice page.

• Update Invoice/Payments – Allows a full user to update invoice and payment information on the Work Order Financial and Purchase Order Details pages.

• Access High Estimates – Allows a user to access the Work Order – Estimates page and enter high-level estimates. High level estimates allow the entry of one estimate value for all labor costs, one estimate value for all material costs, and one estimate value for all other costs.

• Access Detailed Estimated – Allows a user to access the Work Order – Estimates page and enter detailed estimates. Detailed estimates allow a user to enter multiple line item values for labor, material, and other costs.

• Update Estimates – Allows a full user to update previously entered estimate values.

If your Logbook Configuration Options have Display Markup Breakdown = Yes, the following security rights are available:

• View Markup - Allows a user to view broken-out markup costs for material, labor, and other costs on the Work Order Financial page.

• Edit Markup - Allows a user to edit broken-out markup costs for material, labor, and other costs on the Work Order Financial page

Inspection Security Rights

• Access Inspection – Allows a full user to access the Inspection module.

• Create Inspection – Allows a full user to create an inspection.

• Find Inspection – Allows a full user to search for inspections using a number of different criteria.

• Update Inspections – Allows a full user to edit an inspection.

• Run Reports – Allows a full user to run Inspection reports.

• Delete/Inactivate – Allows a full user to delete or inactivate an inspection.

• Attachments – Allows a full user to add an attachment to an inspection.

Asset Security Rights

• Access Assets – Allows a full user access to the Asset module. 

• Create Assets – Allows a full user to create assets.

• Find Assets – Allows a full user to search for assets using search criteria.

• Update Assets – Allows a full user to edit an asset.

• Run Reports – Allows a full user to run Asset reports.

• Asset Viewer – Allows a full user access to the Asset Viewer to search for and view images of an asset.

• Update Restricted Assets – Allows a full user to edit a restricted asset. Assets are classified as restricted by assigning an asset rank that has the restricted asset flag set to Restricted.

Schedule Security Rights

• Access Schedules – Allows a full user access to the Schedule module.

• Create Schedules – Allows a full user access to create a schedule.

• Find Schedules – Allows a full user access to search for schedules.

• Workloading – Allows a full user access to the Workloading feature from both the Logbook and Schedule modules.

• Run Reports – Allows a full user to run Schedule reports.

• Schedule Financials – Displays the Schedule - Financial link on the Schedule Details page allowing a full user to add materials, labor, and other costs to a schedule which will be inherited by all work orders generated from the schedule.

Project Security Rights

• Access Projects – Allows a full user to access the Project module. 

• Create Projects – Allows a full user to create a project.

• Find Projects – Allows a full user to search for a project.

• Update Projects – Allows a full user to access the Edit Project and View Project Details pages and allows the user to update documents and create project requests.

• Run Reports – Allows a full user access to run Project reports.

• Update Documents – Allows a full user to create and update project documents.

• Project Invoicing – Allows a full user to edit work order labor, material, other cost details, invoice date, and invoice number.

• Financial Data – Other – Allows a full user access to edit additional project financial information, such as allowance per SF, recoverable escrow, and project fees.

• Project Budgeting – Allows a full user to create a project budget.

Inventory Security Rights

• Access Inventory – Allows a full user access to the Inventory module.

• Create Inventory – Allows a full user to access the Create Inventory tab to create new inventory items.

• Update Inventory – Allows a full user to make changes to an existing inventory item.

  Granting this right enables the following functionality for Basic Inventory:

  • Displays the Transactions tab. If the Receive Inventory right is granted as well, the user can perform inventory transactions (receive, transfer, and so on). If the Receive Inventory right is not granted, the Transactions page is read-only, displaying past transactions.
  • On the On the Material Item Details page, in the Warehouse Item Records pane, displays the Edit Item link allowing the user to edit the item, the Add Item to Warehouse link which allows the item to be added to a warehouse, and the Edit and Bin buttons which allow the item to be edited or added to another bin.
  • On the Material Item Details page, in the Supplier Item Records pane, displays the Add Supplier Item link to allow a supplier record to be added to the item.

   Granting this right enables the following functionality for Advanced Inventory:
  

  • On the Material Item Details page, in the Warehouse Item Records pane, displays the Edit Item link allowing the user to edit the item, the Add Item to Warehouse link which allows the item to be added to a warehouse, and the Edit and Bin buttons which allow the item to be edited or added to another bin.
  • On the Material Item Details page, in the Supplier Item Records pane, displays the Add Supplier Item link to allow a supplier record to be added to the item.

• Find Inventory – Allows a full user the ability to search inventory for an item based on specified criteria.

• Run Reports – Allows a full user to run Inventory reports.

• Receive Inventory – Allows a full user to perform a Receive inventory transaction from the Inventory Transactions and Purchase Order Details pages.

  Granting this right enables the following functionality for Basic Inventory:

  • If the Update Inventory right is enabled as well, this right allows a full user to perform any type of inventory transaction (Receiving, Transfer, Physical Count, Add/Return, and Remove/Loss) from the Transactions page.

  Granting this right enables the following functionality for Advanced Inventory:

  • Displays the Receipt link on the Transactions page, allowing a full user to perform an inventory Receipt transaction.

The following additional security rights are available only if Advanced Inventory is enabled:

• Item Issue – Allows a full user to access the Item Issue inventory transaction to issue inventory items to a work request.

• Item Return – Allows a full user to access the Return inventory transaction to return inventory items to a supplier.

• Item Transfer – Allows a full user to access the Transfer inventory transaction to transfer inventory items from one warehouse bin location to another.

• Supply Issue – Allows a full user to access the Supply Issue inventory transaction to issue inventory items to a user.

• Physical Count – Allows a full user to access the Physical inventory transaction to adjust the count of multiple inventory items.

• Quantity Adj – Allows a full user to access the Item Adjustment inventory transaction to adjust the quantity of an inventory item.

• Price Adj – Allows a full user to access the Item Adjustment inventory transaction to adjust the price of an inventory item.

• Facilitated Reorder – Allows a full user access to the Reorder tab where he can select and place items that need reordering on a purchase requisition to facilitate the reorder process.

• View Unit Cost – Allows a full user to view the unit cost of inventory items.

• Create Bin – Allows a user to create a new warehouse bin from non-administrative application pages (for example, Create Inventory).

• Add Bin – Allows a user to associate an existing bin with an item from the Inventory – Receipt page so that the item can be received into a bin that was not previously associated with the item.

Shopping Cart Security Rights

• Access Shopping Cart – Allows a full user to Access the Shopping Cart to reserve the inventory items. This right can only be granted if Advanced Inventory is enabled.

Dashboard Security Rights

• Access Dashboard – Allows a full user to access the Dashboard module.

• Logbook – Work Orders – Allows a full user access to the Logbook tab in the Dashboard module, used to view real-time work order information such as percent complete, work order totals by type, and SLA (Service Level Agreement) overdue work orders.

• Logbook – SLA – For a full user, granting this right displays the Completion Time link on the Logbook tab of the Dashboard module. This link provides access to the Average Completion Time and SLA Completion Time – Analysis panes to allow a user to analyze work order performance.

• Logbook – Aging – For a full user, granting this right displays the Aging link on the Logbook tab of the Dashboard module. This link provides access to the Percent Complete, Count By Type, and Overdue panes to display aging trends and statistics for work orders that have not been closed or are nearly overdue.

• Logbook – Quick Report – For a full user, granting this right displays the Quick Report link on the Logbook tab of the Dashboard module. This link provides access to reports that provide a summary of key statistics related to work order completion.

• Inspections – Allows a full user to access the Inspections tab of the Dashboard module, used to view real-time information about inspection scoring for a specific region, property, or inspection class.

• Inspection – Quick Report – For a full user, granting this right displays the Quick Report link on the Inspection tab of the Dashboard module. This link provides access to reports that provide a summary of key statistics related to survey completion.

• Asset – SLA Status – Allows a full user to access the Asset tab of the Dashboard module, used to view real-time information about on-time/overdue asset-related work requests.

• Flash User – Allows a user to view Flash images on the dashboard. If this right is not granted, Flash content is suppressed.

• Accruent Analytics – Allows a full user to access the Accruent Analytics web site to run reports and dashboards. If granted, the Accruent Analytics link appears in the user's top-level navigation bar.

Business Intelligence Security Rights

• Access BI – Allows a full user to access BI (Business Intelligence) reporting.

• BI Report Security – Click this link to open the User Security – Reports – Business Intelligence page to set access to BI reports for this user.

Company Security Rights

• Access Company – Allows a full user access to the Company module.

• Create/Edit Company – Allows a full user to create a company or edit an existing company.

• Delete Company – Allows a full user to delete a company on the Edit Company Details page.

• Find/View Company – Allows a full user to search for companies and view the companies found.

• Run Reports - Allows a full user to run company reports.

• Update Comments – Allows a full user to edit company comments for companies defined as vendors.

• Delete Comments - Allows a full user to delete company comments for companies defined as vendors.

• View Documents – Allows a full user to view documents in read-only mode.

• Update Documents – Allows a full user the ability to add company documents, make changes to company documents, and access the Online Document functionality. For users with this security right, the Add Company Document link displays on the Find Company Documents page.

• Associate Properties - Allows a full user to make, edit, or delete company/property associations on the Edit Company Details page.

Purchasing Security Rights

If your installation is using Purchasing 1.0, the following security rights are available:

• Access Purchasing – Allows a user to access the Purchasing module.

• Create PO – Allows a user to create a purchase order.

• Update PO – Allows a user to update a purchase order.

• Find PO – Allows a user to search for a purchase order.

• Run PO Reports – Allows a user to run Purchasing reports.

If your installation is using Purchasing 2.0, the following security rights are available:

• Access Purchasing – Allows a user to access the Purchasing module.

• Create PO – Allows a user to create a purchase order.

• Update All POs – Allows a user to update any purchase orders he can access.

• Update My POs - Allows a user to update the purchase orders he has created.

• Find PO – Allows a user to search for a purchase order.

• Run PO Reports – Allows a user to run Purchasing reports.

• Access Requisition – Allows a user to access the Requisition module.

• Create PR – Allows a user to create a Purchase Requisition (PR).

• Update All PRs – Allows a user to update any PR he can access, including updating the PR NTE if the user is also a PR approver.

• Find PR – Allows a user to search for a PR.

• Run PR Reports – Allows a user to run reports on the Requisition module.

• Buyer Access – Allows a user to access the Buyer tab in the Requisition module.

• Update Locked PO (Buyer Only) – Allows a full user who has also been defined as a Buyer (on the Edit User page) to edit a locked purchase order.

• Update My PRs – Allows a user to update the PRs he has created, including adding, deleting and viewing PR attachments.

• Edit PO Number - Allows a user to edit a purchase order number on the Create Purchase Order, Buyer, and Purchase Requisition pages.

• Edit PO Date - Allows a user to edit the purchase order date.

• View Receipts – Allows a user to view information about received items on the Purchase Order Details page.

• Update Receipts – Allows a user to update information about received items on the Purchase Order Details page.

• Delete Receipts – Allows a user to delete information about received items on the Purchase Order Details page.

• Enter Receipts – My POs – Allows a user to perform a Receive inventory transaction on items displayed on the Purchase Order Details page for any purchase order he created or is the requestor for.

• Enter Receipts – All POs – Allows a user to perform a Receive inventory transaction on items displayed on the Purchase Order Details page for any purchase order.

• Enter Service Receipts – Allows a user to perform a Receive transaction on service items displayed on the Purchase Order Details page. This right works in conjunction with the Create Receipts (My POs/All POs) to determine which purchase orders the user can receive service items on.

  The Receive Inventory security in the Inventory module grants the user the right to receive material items on a purchase order.

• Enter Invoice/Payments – Allows a user to enter and update invoice and payment information on the Purchase Order Details page.

• Create Blanket PO – Allows a user to create a blanket purchase order used to aggregate purchases from a particular vendor over time.

• Update Blanket PO – Allows a user to update a blanket purchase order.

• View Blanket PO – Allows a user to view existing blanket purchase orders.

• Update Approved Other Type – Allows a user to change the OTHER -Type value for service items after the purchase order has been approved.

Provision Security Rights

• Access Provisioning – Allows a user access to the Provision module.

• Create Provisioning – Allows a user to create a provision.

• Update Provisioning – Allows a user to update an existing provision.

• Find Provisioning – Allows a user to search for an existing provision.

• Run Reports – Allows a user the ability to run Provision reports.

EP Security Rights

• Access EP – Allows a user to access the Emergency Preparedness module.

• Create EP – Allows a user to create an EP plan.

• Find EP – Allows a user to access EP for the areas and properties in which they have been given security rights.

• Update EP – Allows a user to update existing EP plans that they have access to.

• Run Reports – Allows a user to run reports on the EP plans that they have access to.

• EP Attachments – Allows a user to attached external documents to an EP plan.

• EP Approvals– Allows a user to approve an EP plan. This right is typically given to the primary manager of a building or facility.

Incident Security Rights

• Access Incidents–Allows a user to access the Incident module.

• Create Incidents– Allows a full user the ability to create incidents.

• Find Incident– Allows a full user to search for incidents.

• Update Incidents– Allows a full user to edit incidents.

• Run Reports– Allows a full user to run reports on the Incident module.

• View Confidential– Allows a full user to view all incidents that have been marked as confidential.

Event Security Rights

• Access Events – Allows a user to access the Events module.

• Create Events – Allows a user to create an event.

• Find Events – Allows a user to find an event at a property to which they have security rights.

• Update Events – Allows a user to update an event.

• Run Reports – Allows a user to run reports on the Event module.

Property Security Rights

• Access Property – Allows a user to access the Property module and to search for and view property details.

• Update Property Detail – Allows a user to update Property UDFs for the properties that they have security rights to.

• Find Property – Allows a user to search for a property.

• Run Reports – Allows a user to run reports on the Property module.

• Property Documents – Allows a user to view and add documents to a property.

• Create Property – Allows a full user to create a property. If selected, a Create Property tab is added to the Property module so that the user does not need Admin access to create a property.

• Edit Property - Allows a user or administrator to edit any of the fields on the Edit Property page for the properties that they have security rights to. This security right must also be granted to users with the Property, Region, and System Admin rights to allow them to edit a property; the admin rights do not automatically provide property edit rights.

Property Billing Security Rights

• Access Property Billing – Allows a user to access and find property billing information.

• Create Property Billing – Allows a user to create a new property fixed-fee rate schedule record.

• Update Property Billing – Allows a user to update properties with a property fixed-fee rate schedule record.

• Run Reports – Allows a user to run property billing reports.

Region Security Rights

These security rights provide greater control over the rights granted to Regional Admin users. They only display after a user has been granted Regional Admin rights in the Administrator Rights pane and these rights have been saved to the user account.

• Create Region – Allows an administrator to create a new region on the Company regions page. If Edit Region rights are not also granted, each newly added region will be grayed out and cannot be edited once added.

• Edit Region – Allows an administrator to edit an existing region. A region can be edited on the Company Regions page if the Create Region rights have also been granted, or on the Region Details page, by clicking the Edit Region link if Find/View Region rights have also been granted.

  Note:

  An administrator with Edit Region rights must be granted either Create Region or Find/View Region rights to allow him to access a page where he can select the region to edit.

• Find/View Region – Allows an administrator to access the Region Details page and view information about a selected region.

• Manage Region Associations - Allows an administrator to:

  • Access the Associate Properties to Regions page to associate a property with an existing region.

  • Access the Region Hierarchy Setup page to create and edit parent/child relationships for regions.

  • Access the Region Accounts page (Work Order Admin) to associate charge-to account numbers with properties within a region.

TimeCard – Employee Time Entry Security Rights

• Access TimeCard – Allows a full user to access the TimeCard module.

• Create TimeCards – Allows a full user to create a time card.

• Dashboard – Allows a full user to view time cards in a summary format (available if TimeCard 2.0 is enabled).

• Run Reports – Allows a full user to run reports on the TimeCard module.

• TimeCard Manager – Allows a full user the ability to view time cards for all users that they are the assigned manager for.

• Payroll Admin – Allows a full user to view and unlock all time cards regardless of Manager Security or Property Security rights. This security right also grants reporting capabilities. 

TimeSheet Security Rights

These rights only appear if the TimeSheets module is turned on.

• Create TimeSheet – Allows a full user the ability to create a timesheet and enter their labor hours against work orders.

• TimeSheet Requires Approval – Requires full users with the Create TimeSheet security right to have their labor approved before appearing on the work order.

Approval Security Rights

• Create Project Approvals – Allows a user to add approval requests to projects. The user's approval level (as determined on the Edit User page) is displayed.

• Create WO Approvals – Allows a user to add approval requests to work orders. The user's approval level (as determined on the Edit User page) is displayed.

• Create PO Approvals – Allows a user to add approval requests to purchase orders (POs). The user's approval level (as determined on the Edit User page) is displayed.

• Create PR Approvals – Allows a user to add approval requests to purchase requisitions (PRs). The user's approval level (as determined on the Edit User page) is displayed.

• Edit Proxy Approver – Allows a user to override his default proxy approvers and select a different approver on the Proxy Approvals page.

Visitor Security Rights

• Access Visitor – Allows a user to access the Visitor module and create visits. Both Full Users and Named Guest Users have the ability to use the Visitor module.

• Office Reception Desk – Allows a full user or Named Guest to create visits on behalf of others in their company or subtenant companies.

• User Admin – Allows a user to create users who have the ability to access the Visitor module. This security right allows the facility manager to delegate user set up to office contacts.

• Create Perm. Visitor – Allows a user to designate persons in the My Visitors feature as Permanent Visitors. A Permanent Visitor is a person who visits a facility frequently and does not require a pre-entered visit to gain facility access.

• Run Reports – Allows a full user access to run reports.

• Select Vendor – Allows a user access to use the Select Vendor feature.

• Visitor Desk – Allows a full user to perform the Visitor Desk function which allows the user the ability to look up visitors, check-in visitors, and print badges.

• Visitor Desk Create Visit – Allows a full user to create visits from the Visitor Desk.

• Visitor Desk Restricted – This feature is not yet implemented.

• Visitor Desk View Vendor – Allows a full user with Visitor Desk security rights the ability to view Vendor-Company-Property information. This includes, but is not limited to, certificates of insurance, other rules, contact name, and plate number.

• Share My Visitors – Allows this full user's visitor list to be shared/viewed by other users on the My Visitors page.

NPFA Security Rights

• Access Chart of Accounts – Allows a full user to edit and create accounts.

Space Security Rights

• Access Space – Allows a user access to the Space module.

• Create Location – Allows a full user to access the Create tab to create new space locations.

• Find Location – Allows a user to access the Find tab to search for locations based on a set of criteria.

• Run Reports – Allows a full user to run Space module reports.

• Move Manager – This feature is not currently implemented and will be more fully defined in a future release.

• Create Floor – Allows a full user to create a floor on the Create Locations page.

• Edit Floor – Allows a full user to modify floor details on the on the View Floor page.

• View Floor – Allows a full user to view floor details on the on the View Floor page.

• Location Audit – This feature is not currently implemented and will be more fully defined in a future release.

• Create Space – Allows a full user to create a space on the Create Locations page.

• Edit Space – Allows a full user to modify space details on the on the View Space page.

• View Space – Allows a user to view space details on the on the View Space page.

• View Allocations – Allows a full user to view the Complex Allocations pane on the Space Details page, allowing a space to be allocated to multiple categories for defined periods of time.

• Edit Allocations – Allows a full user to edit the Complex Allocations pane on the Space Details page, allowing a space to be allocated to multiple categories for defined periods of time.

• Create Sub-Space – Allows a full user to create a subSpace on the Create Locations page.

• Edit Sub-Space – Allows a full user to modify subSpace details on the on the View Sub-Space page.

• View Sub-Space – Allows a full user to view subSpace details on the on the View Sub-Space page.

• Departments Only - Restricts a full user to only be able to access spaces associated with the Departments he has been granted security rights to through the Department Settings pane on the User Security page

Visual Map Security Rights

• Access Visual Map – Allows a user to access the Visual Map feature of the Space module.

• Visual Map Admin – Enables the Admin button on the Visual Map console, allowing a system administrator access to the Authorization tab to manage authorization groups.

Space Survey Security Rights

• Access Surveys – Allows a user access to the Space Survey module and the Find Surveys tab.

• Create Surveys – Allows a full user to create/assign space surveys and to begin a space survey.

• My Surveys – Allows a user to access the My Surveys page listing all assigned space surveys.

• Survey Approval – Allows a full user to access the My Approvals page to approve or reject space surveys. This right is only displayed if Survey Approvals are enabled.

• Edit Surveys – Allows a user who has been assigned a survey (either as a surveyor or an approver) to edit or delete a space survey, including the space information for spaces included in the survey.

• My Allocations Only – This feature is not currently implemented and will be more fully defined in a future release.

To access and edit a survey, a user must have the Access Space, View Space, Access Survey, My Surveys, and Edit Survey security rights. The user must also have security rights to the property the survey is being performed on.

To access and approve a survey, a user must have the Access Space, View Space, Access Survey, and Survey Approval security rights. The user must also have security rights to the property the survey is being performed on.

Utility Security Rights

• Access Utility – Allows a full user access to the Utility module.

• Create Utilities – Allows a full user to access the Create tab to create new utilities.

• Create Utility Systems – Allows a full user to access the Create tab to create new utility systems.

• Create Meter Sites – Allows a full user to access the Create tab to create new meter sites.

• Access Meter Readings – Allows a full user to access the utility meter Readings tab.

• Create Meter Work Orders – Allows a full user to create work orders for meter sites.

• Create Meter Site Schedules – Allows a full user to create schedules for meter sites.

• Create Meter Site Inspections – If the inspection module is enabled, allows a full user to create inspections for meter sites.

• Access Invoices – Allows a full user to access the utility Invoices tab.

• Enter Adjustments – Allows a full user to enter adjustments against a closed utility billing period.

• Close Billing Periods – Allows a full user to calculate and close a utility billing period.

• Run Reports – Allows a full user to run Utility module reports.

• Enter Adjustments - Allows a full user to manually correct meter readings without the meter consumption calculating incorrectly.

Knowledge Security Rights

• Access Where Used – Allows a full user to access the Where Used pane on the Procedure Details page to examine a list of schedules, assets, inspection classes and types, and request types and subTypes that the procedure is associated with.

• KB Create Item – Allows a full user to add work orders to the Knowledge Base. When this right is granted, the Include in KBase field is displayed in the Miscellaneous Fields pane of the Request Details page for the selected user. Setting this field to Yes and clicking UPDATE adds the work order to the Knowledge Base.

Additional Administrator Rights

These security rights provide greater control over the rights granted to certain types of Admin users. They only display when a user has been granted specific Admin rights in the Administrator Rights pane.

• Edit User – Provides certain user editing capabilities, depending on the other Admin security rights granted.

  • System Admins and Region Admins – Allows these administrators to access the Edit a User page through the Admin menu and modify any existing user account.

  • Property Admins – Enables the EDIT link on the Property Guest page, allowing property administrators to edit a displayed user.

  • Visitor Guest Admins – Enables the EDIT link on the Visitor module’s User Admin page, allowing visitor guest admins to edit a displayed user.

  • Provisioning Admins – Enables the Edit Person link on the Provision Details page, allowing provisioning administrators to edit a displayed person.

• Create/Edit Activity Group – This security right is only available to System Admins. If enabled, system administrators can access the Activity Groups page and create new activity groups or modify existing activity groups.

• View Activity Group – This security right is only available to System Admins. If enabled, system administrators can view activity groups on the Activity Groups page, but cannot create new activity groups or modify the main activity group information (Default Group, Name, or Include in Data Extract).

  Note:

  If the Associate Request Types to Activity Groups security right is enabled, request types can still be added or deleted from the activity group even if only the View Activity Group right has been granted. To make activity groups entirely view-only, both rights must be disabled.

• Associate Request Types to Activity Groups – This security right is only available to System Admins. If enabled, system administrators can add or delete request types from an activity group on the Activity Groups page.

  Note:

  Either the Create/Edit Activity Group or the View Activity Group security right must be enabled to provide access to the Activity Groups page.

• Associate Users to Activity Groups – This security right is only available to System, Region, and Property Admins. If enabled, the Activity Group Settings pane is displayed on the User Security page, allowing these administrators to associate activity groups with a user.

• Find/View Request Type/Subtype – This security right is only available to System and Project Admins. If enabled, these administrators can access the Request Types and SubTypes page in view-only mode and view details about any request type or subtype, but cannot make any modifications.

• Create/Edit Request Type/Subtype – This security right is only available to System and Project Admins. If enabled, these administrators can access the Request Types and SubTypes page to create new request types and subTypes or modify existing request types and subTypes.

• Associate Request Type/Subtype to Property – This security right is only available to System and Project Admins. If enabled, these administrators can access the Property Request Types page to associate request types with a property and define follow-up alerts, escalations, and SLA response and completion time for the property.

Administrator Rights

Administrator rights allow a user to manage the configuration options and settings associated with a module. Users are only allowed to modify settings for the properties and regions they have been granted security rights to.

• System Admin – Allows a full user to administer the following modules: Admin, Asset, Chart of Accounts, Company, Dashboard, Global, Inspection, Inventory, Logbook, Procedures, Project, Provision, Purchasing, Reservation, Space Survey, TimeCard, Visitor, Work Order, and System.

  For additional information about limitations that may be placed on users with System Admin rights, see Additional Administrator Rights.

• API Documentation - For installations that have the API Documentation Site functionality enabled, granting this security right allows a developer to access the interactive API Documentation web site by manually typing the address to the doc site into the browser's address bar. The address to the doc site is entered by appending /MobileWebServices/docs/index to the standard URL used to access the 360Facility/FAMIS site. Once at the doc site, a developer must enter her standard user name and password to access the site

• Approval Admin – Allows a full user to administer settings for project, purchase order, and purchase requisition approvals. The Proxy Approvals option is only displayed if Proxy Approval is enabled on the Approval Configuration Options page.

• Asset Admin – Allows a full user to administer the Asset module. Users granted this right must also be granted either Property Admin or Region Admin rights. The Configuration Options right is not available unless System Admin rights have also been granted.

• Company Admin – Allows a full user to administer the Company module.

• EP Admin – Allows a full user to administer the EP (Emergency Preparedness) module. Users granted this right must also be granted either Property Admin or Region Admin rights.

• Event Admin – Allows a full user to administer the Event module. Users granted this right must also be granted either Property Admin or Region Admin rights.

• Incident Admin – Allows a full user to administer the Incident module. Users granted this right must also be granted either Property Admin or Region Admin rights.

• Inspection Admin – Allows a full user to administer the Inspection module.

• Inventory Admin – Allows a full user to administer the Inventory module.

• Job Costing Admin – Allows a full user to administer Non-Profit Fund Accounting (NPFA).

• Login Admin – Allows a full user to define additional login/password options on the Installation Options page, such as password expiration and locked password error text.

• Procedure Admin – Allows a full user to create or edit procedures within the Knowledge module.

• Project Admin – Allows a full user to administer the Project module.

• Property Admin – Allows a full user to administer the properties that they have been given security rights to. For additional information about limitations that may be placed on users with Property Admin rights, see Additional Administrator Rights and Edit Property.

• Provisioning Admin – Allows a full user to administer the Provision module. For additional information about limitations that may be placed on users with Provisioning Admin rights, see Additional Administrator Rights.

• Purchasing Admin – Allows a full user to administer the Purchasing module. Users granted this right must also be granted either Property Admin or Region Admin rights.

• Regional Admin – Allows a full user to administer the regions that they have been given security rights to, including the right grant and revoke other users' access to regions. For additional information about limitations that may be placed on users with Regional Admin rights, see Region Security Rights and Additional Administrator Rights.

• Reservation Admin – Allows a full user to administer the Reservation module. Users granted this right must also be granted either Property Admin or Region Admin rights.

• Space Admin – Allows a full user to administer the Space module. Users granted this right must also be granted either Property Admin or Region Admin rights as well as the Access Space module right.

• Space Survey Admin – Allows a full user who does not have System Admin rights to administer the Space Survey module.

• TimeCard Admin – Allows a full user to administer the TimeCard module.

• Utility Admin – Allows a full user to administer the Utility module.

• Visitor Guest Admin – Allows a full user to administer the Visitor module. For additional information about limitations that may be placed on users with Visitor Guest Admin rights, see Additional Administrator Rights.

The Incident Type Settings pane allows the system administrator to define which types of incidents (fire, bomb threat, hurricane) the user can access. Granting access to an incident type allows users to create, find, or run reports on the specified types of incidents.

Incident type access is only enforced if Enforce Security is set to Yes on the Incident Configuration Options page.

To grant the user access to an incident type:

1. In the Add Incident Type field, select the incident type that you want to grant access to.

2. Click ADD.

   The selected incident type is listed with the Current Incident Types.

3. In the View Confidential field, select Yes or No.

   If you select Yes, this user is allowed to view incidents of the specified type that have been marked confidential.

4. In the Tab Order field, enter a numeric value.

   The Tab Order indicates the position, in menus, where this value will be listed. Lower numbered values are displayed toward the top of the list. Values will the same tab order will be sorted alphabetically.

5. In the Default SubType field, select a default incident subType.

   The default subType is the one that is selected, by default, for this user on pages where an incident subType can be selected, for example, Create Incident.

   You are not required to select a default subType. Selecting a default subType does not prevent the user from accessing other subTypes of this incident type.

6. Click UPDATE.

If you want to delete an incident type from the list of incident types this user can access, click the DELETE button to the right of the incident type name.

The Inspection Class Settings pane allows the system administrator to specify the groups of inspection types that the user can access.

If an inspection is associated with a work request, that request can only be assigned to users that have security rights to the appropriate inspection class.

To grant the user access to an inspection class:

1. In the Add Inspection Class field, select the inspection class that you want to grant access to.

2. Click ADD.

   The selected inspection class is listed with the Current Inspection Classes.

3. In the Tab Order field, enter a numeric value.

   The Tab Order indicates the position, in menus, where this value will be listed. Lower numbered values are displayed toward the top of the list. Values will the same tab order will be sorted alphabetically.

4. In the Default Type field, select a default inspection type.

   The default type is the one that is selected, by default, for this user on pages where an inspection type can be selected, for example, Create Inspection.

   You are not required to select a default type. Selecting a default type does not prevent the user from accessing other types of inspections.

5. Click UPDATE.

If you want to delete an inspection class type from the list of inspection classes this user can access, click the DELETE button to the right of the inspection class name.

The User Group Settings pane allows the system administrator to specify the user groups that the user can access. User groups are groups of full users who can view work requests assigned to other users in the same group.

To grant the user access to a user group:

1. In the Add User Group field, select the user group that you want to grant access to.

2. Click ADD.

   The selected user group is listed with the Current User Groups.

3. In the Tab Order field, enter a numeric value.

   The Tab Order indicates the position, in menus, where this value will be listed. Lower numbered values are displayed toward the top of the list. Values will the same tab order will be sorted alphabetically.

4. Click UPDATE.

The Warehouse Settings pane allows the system administrator to associate warehouses with a user, allowing that user to access inventory in any warehouse to which security rights have been granted. Normally, users access only the warehouses associated with the properties they have security rights to. However, providing direct security rights to a warehouse allows a user to access that warehouse regardless of the properties he or she can access. This is useful to provide direct warehouse access to inventory personnel who may have no need for any particular property rights. This feature is used in conjunction with Advanced Inventory only.

To grant the user access to a warehouse:

1. In the Add Warehouse field, select the warehouse that you want to grant access to.

2. Click ADD.

   The selected user group is listed with the Current Warehouses.

3. In the Tab Order field, enter a numeric value.

   The Tab Order indicates the position, in menus, where this value will be listed. Lower numbered values are displayed toward the top of the list. Values will the same tab order will be sorted alphabetically.

4. Click UPDATE.