Rights Tab – Access Groups
The Rights page defines the permissions granted to members of this group. Rights include access to modules, features, and pages and permissions to edit, delete, approve, or otherwise modify records. All members of the access group share the same rights and permissions as defined on this page.
On the left side of the page is a Search field along with two filters. The Search field performs a quick search for rights. All rights that contain your search criteria in their description are returned. The Search field only works when the Type filter is set to All.
The Module filter limits the results to those rights applicable to a specific module. This filter includes options for each available module and for All Modules, Home Page, Reporter, and System features. Rights for the Technician Work Center and MC Express can be found under the System filter.
The Type filter limits the results to rights of the designated type. The All option can only be selected when a module has been chosen from the Module filter.
There are numerous types of rights including access, edit, delete, approve, and issue. Some rights may not be available for all modules.
The All Disabled Rights option in the Type filter allows you to quickly view the rights that have been disabled for the displayed access group and module.
-
If the page is filtered to a particular module, the option returns all rights except Approval Required.
-
If there is no module selected, this option returns all disabled permissions except Approval Required and MC Express permissions.
Field Descriptions
The following fields are displayed in the Rights List:
-
Module: The module with which the right is associated. The column displays values for each available module and entries for the Home Page, Reporter, and System features. If a specific module has been selected from the module filter control on the left, each record displayed will be associated with that module.
-
Type: The type of right, categorized by the values displayed in the Type filter on the left. Types of rights include—but are not limited to—access, edit, delete, approve, and issue.
-
Description: A description of the right.
-
Value: A field to specify a value for particular rights, such as the List rights.
-
Enabled?: Indicates whether or not the right is enabled for the access group.
-
A check mark is displayed for all enabled rights.
-
A dash is displayed for all disabled rights.
-
Types of Rights
The Access Rights list indicates the types of rights that can be defined for each access group. Use the Type filter to filter them by type. Only the rights applicable to a particular modules are displayed.
-
All: Display all rights of a selected module. This option is not available if All Modules is selected from the Module filter.
This option excludes the field-level permissions. Field-level permissions are only displayed when field is selected from the Type filter.
-
All Disabled: Display all rights that have been disabled for this access group.
-
If the page is filtered to a particular module, the option returns all rights except Approval Required.
-
If there is no module selected, it will return all disabled permissions except Approval Required and MC Express permissions.
-
-
Access: Display all rights that control access to modules or specific features. For most modules, a single access right is available, such as Access Asset Module. For other modules, multiple values may be available. For example, in the Work Order module, rights are available to enable access to the module and to the Complete/Close process.
Access rights are enforced by prohibiting users from accessing the selected feature. For example, if the Asset module was disabled for an access group, members of that group would only see a dimmed Asset module option in the Module menu, and they would be prohibited from accessing the feature.
-
Tabs — Display all rights that control access to specific pages within a module. Tab access rights are enforced by hiding the disabled tab from the user.
-
Fields — Display all rights that control access to specific fields. Separate permissions are available to define whether the field can be viewed or edited by members of the access group. Additionally, a separate permission is available to determine whether the field can be populated on new records, allowing users to edit values on newly created records, but not existing records. A new option for fields is available from the Type filter to set these values.
You must coordinate your field-level security settings with your Forms Manager and Complete/Close settings. Users should be given proper access to any required entry field so they do not get stuck trying to fulfill requirements that they do not have permission to fulfill.
-
List: List rights are unique in that they are not used to Enable/Disable access to a feature, they are used to assign a custom list for the given module for the defined access group. When editing a List right, the Value field is used to specify a Report ID that defines the fields that should display in the module list for the access group. For more information, see Configurable module Lists.
-
View: A specific right related to documents that enables users of the access group to view documents that have been attached to a record.
-
New: Rights to create new records of the specified type. If this right is disabled, members of the access group will receive a warning upon attempting to create a new record.
-
Edit: Rights to edit records of the specified type. If this permission is disabled, all fields on the page are read-only, regardless of field-level security settings.
On most pages, edit rights are enforced by disabling the ability to edit data fields. On tabs that contain multiple records, members of the access group are not able to add records or edit displayed records.
-
Batch Update: Rights to use the Batch Update feature for each specified module. If this right is disabled, members of the access group will receive a warning upon attempting to update records from the Expanded List.
-
Delete: Rights to delete records of the specified type. If this right is disabled, members of the access group will receive a warning upon attempting to delete a record.
-
Filter: Rights to use filters defined of the specified type. If the filter right is disabled for a specific module, the filter menu does not display in the module list.
-
Print: Rights to print reports of the specified type. If this right is disabled, members of the access group will receive a warning upon attempting to print reports using the Print button or the Run Report option in the Reporter.
-
Move: A specific right related to assets, which enables users of the access group to move assets to another location in the hierarchy.
-
Setup: A specific right related to reports, which enables users of the access group to modify report setups.
-
Copy and Copy / Paste: Rights to copy reports or assets.
-
Authorization Required: There is a single approve/reject right available for the work order, predictive maintenance, and project modules.
Rights that define the authorization that should be required are also shown. For work order approvals, each available authorization level can have a currency limit or amount specified. When determining the correct approval requirements, the system references total estimated cost on the work order at time of creation.
-
Approvals: Rights surrounding purchase order approval. There are two sets of rights displayed, which are used dependent on the setting on the Repair Center Approval tab.
-
User Based Rights are used when repair center approvals are based on the permission of the user creating the purchase order.
-
Amount Based Rights are used when approval requirements are based on the total amount of the purchase order.
-
-
Unapprove: Rights to remove approval from purchase orders and work orders.
-
Issue / Deny / On-Hold / Re-Issue: Rights to modify the status of work orders, purchase orders, projects, and predictive maintenance records.
-
Respond: The right to respond to work orders.
-
Assign: The right to assign work orders.
-
Complete: The right to complete work orders.
-
Close: Rights to close out work orders, purchase orders, projects, and predictive maintenance records.
Enabling or Disabling Rights Individually
-
Locate the right you want to modify.
-
Click the record row.
The Access Groups window opens.
-
Choose between two options:
-
To enable a right that is currently disabled, select the Enabled? check box.
-
To disable a right that is currently enabled, clear the Enabled? check box.
The Value field displayed is only used for List rights.
-
-
Click Apply.
The window closes. The Rights page appears and the updated status displays.
-
Click Save.
Enabling or Disabling Multiple Rights
The Rights page also allows you to modify multiple rights simultaneously. However, the Value field that is displayed when using these features is used for Configured Lists, which are typically set individually.
Modify All Rights
-
Use the Module and Type filters to display the rights you want to modify.
-
Verify that the rights you want to modify all have the same value (enabled or disabled).
-
Choose between two options:
-
To enable rights for the selected rows, click the Enable All button.
The page refreshes, and a check mark displays in the Enabled? column of each row.
-
To disable rights for the selected rows, click the Disable All button.
The page refreshes, and a dash displays in the Enabled? column of each row.
-
-
Click Save.
Modify Multiple Rights
-
Use the Module and Type filters to display the rights you want to modify.
-
Select the first right you want to modify by clicking the check box in the left-most column.
A check mark appears to indicate that the record has been selected.
-
Continue to select any additional records you want to modify.
-
Click the Action button.
-
Choose between two options:
-
To enable rights for the selected rows, click the Enable Selected option.
The page refreshes, and a check mark displays in the Enabled? column of the selected rows.
-
To disable rights for the selected rows, click the Disable Selected option.
The page refreshes, and a dash displays in the Enabled? column of the selected rows.
-
-
Click Save.