Access Control / User Maintenance: Difference between revisions

From CTMS
VisualWikitext
(Added details of accessible functionality)
(Combined with other guides.)
Line 1: Line 1:
The administration function encompasses the set up and maintenance of users; the maintenance of system parameters and the configuration of the system. The administration module also allows for the viewing of error messages written by the system to an audit log.
This screen allows an Administrator to create a Menu structure at a Group Level. This allows a user to be associated to a group, which will give them enough visibility (screens, tabs) for them to perform their daily duties. Other functions can also be performed using this screen such as:-


=Access Control=
* Creating New Users.
* Creating multiple profiles for a user.
* Creating and amending new Groups.
* Editing User Profiles.
* Changing the passwords of Users.


User Groups are created to control the forms that a user can access and what capabilities/functions a user has within each form.
All these options will be explained in more detail below.


[[Image:acc_ctrl_1.png|600px]]


When higlighting a Group name in '''Fig 1''' of the form the already assigned users will be shown in '''Fig 2'''
== Accessing the Screen ==
To gain access to the screen you must be an Administrator. A Standard user will not have visible of this menu option. It can be found by selecting the 'Administration' option followed by 'Access Control'  


*'''Add User To Group'''
[[Image:ctrl_1.png]]


Any number of users can be added to a group, this is done by highlighting the appropriate group and pressing ‘Add User to Group’.  A list of users not already in the group will be displayed; it is then a matter of selecting the username.


*'''Remove User From Group'''
== Access Control Main screen ==
This screen is view only and shows the existing User Groups and Users. Users can be associated to more than one group.


If the user wants to remove a user from a specific Group then they should highlight the group, select the button and remove the required user from the group
To view the Users for each group, the relevant Group Line should be highlighted.


*'''Remove All Users Fron Group'''
There are a series of buttons to allow the user to Drill down further to add or edit data, expanded below.


Clicking on this button will remove all the users from the highlighted group
[[Image:ctrl_2.png]]


*'''Users Not In Group'''


When selecting this button, the user is presented with a canvas that shows all the user that have not been assigned to a group
== User Maintenance ==
Administrators are given the ability to create users and administer user passwords. When setting up a new user, the Username, User Type, Description and Password are required. Once a user has been created, there are a number of mandatory User Parameters which are also created and cannot be deleted.


*'''User Maintenance'''
[[Image:ctrl_3.png]]


This Button, when pressed will open up a new form which allows the user to Add new users and edit existing


*'''Change User Password'''
=== Creating a New User ===
* Click the 'New' Button. The user is then populated with the screen below:


Allows the Administrator to change a users Passowrd
[[Image:ctrl_4.png]]


*'''Group Maintenance'''


Selecting this button opens up a new canvas allowting the user to create new groups and edit existing groups
* Fill in the details on the Users screen, User Type being Internal and Based at starting with country of Residence e.g. UK.
* Click Save.
* The check box 'Allow Multiple concurrent sessions' allows a user to have several sessions to be opened without a warning being populated


==Adding a User to a Group==


To add a user to a group take the following steps:
=== Editing a New User ===
Within the 'Edit' function, the Administrator can temporarily disable a user's account or can force a user to change their password. A number of parameters allow multiple selections, i.e., take for example the Carrier user parameter, a user may only be able access one carrier, another user may be able access two carriers. This can be set up quite simply in this form.


* Highlight the required Group that you want the user to be added to [fig 1]
[[Image:ctrl_5.png]]


* Click the 'Add User to a Group' button. A new form will be displayed [fig 2]


=== Change User Password ===
The Administrator can change the password of any user - this may be because the user has forgotten it.


[[Image:Acc_Control_3.png]]
[[Image:ctrl_6.png]]




* Highlight the required user to be added [fig 3]
=== User Parameters ===
By selecting the 'User Parameters' tab, the Administrator can limit the amount of data that is displayed to the user, for example, if a particular user should only see data belonging to a particular Cost Centre, then a user parameter can be added with a value selected from a list where appropriate.


* Click the 'Add' button [fig 4]
A number of parameters allow multiple selections, i.e. take for example the Carrier user parameter, A user may only be able access one carrier, another user may be able access two carriers.  This can be set up quite simply in this form. More details and a list of user parameters are referenced in the [[User Parameters]] section.


{{Note}} For new users, you should:
* Click Edit for the user you have just created.
* Edit users BASED_AT, COST_CENTER, ENTRY_FORM and SCHED_GROUP and click OK.


[[Image:Acc_Control_4.png]]


==Removing a User From a Group==
=== Default Printers ===
On selecting the 'Default Printers' tab an individual user can be allocated a default printer.


To Remove a User from a group take the following steps:


*Highliight the required Group [fig 1]
== Group Maintenance ==
In order to determine which functions a group of users can perform the Administrator must identify the C-TMS business functions required. Once the menu structure has been identified, the Functions, Menus, Tabs, Reports, Extracts and Imports will need to be allocated in order to restrict/expand a user's group access to part or all functionality contained within.


*Highlight the required User [fig 2}
[[Image:ctrl_7.png]]


*Click the 'Remove user from Group' button [fig 3]


*A pop up screen will be displayed asking the user to clairfy the removal of the user from the group.Click the 'OK' button to remove the user [fig 4]
=== Creating a New Group ===
* Click Group Maintenance then New
* Give the Group a Name and Description and check Enabled
* For each tab add or remove processes using the Add All/Remove All button or double clicking a process to add one at a time
* Click Save


[[Image:Acc_Control_2.png]]


==Removing All Users from a Group==
=== Editing a Group ===
* For the ADMIN Group in the Menus tab uncheck 'In Menu?' for Interface Errors and then Save
* Exit Form and Look for this at Administration > Interfaces
* Will not be available
* Put the Menu back where it was and click Save
* Check Administration > Interfaces to see it is back


The following steps should be taken to remove all the users from a group:


*Highlight the required Group [fig 1]
=== Group Maintenance – Accessible Functionality ===
The screen has a series of tabs that allows the administrator to modify the features that the users in this group can access.
* Functions - functionality within screens that is accessible to the users in the group.
* Menus - menu items that are accessible to the users in this group.
* Tabs - tabs within screens that are accessible to the users in this group.
* Reports - Reports that are accessible to the users in this group.
* Extracts - Extracts that are accessible to the users in this group.
* Imports - Imports that are accessible to the users in this group.


*Click the 'Remove All Users from Group' button [fig 2]. This will open a box
Each screen works similarly:
* A top panel shows the functionality that is accessible to the users in the group.
* A bottom panel shows the functionality that is currently not accessible to the users in the group.


*Click 'OK' to proceed and remove all the users [fig 3]
To make functionality accessible, double-click the item in the bottom panel and it will be added to the top panel.


To make functionality inaccessible, double-click the item in the top panel and it will be removed and shown in the bottom panel.


[[Image:Acc_Control_5.png]]
Example - tabs:


This tab allows the administrator the ability to control which tabs a group has access to.  For example, the 'Bookings' group has access to the [[Trip Manipulation]] form, but they do not necessarily need to see anything to do with finance.  Therefore, the administrator can restrict access to the Finance tab to the Bookings group. All forms which have tabs can be controlled in this way, except the Access Control form, which assumes that the administrator has access to ALL the tabs.




==Users Not in a Group==
== Users and Groups ==
[[Image:ctrl_8.png]]


When the user clicks this button, they will be directed to another canvas which allows the user to view all users that have not been assigned to an existing Group.


[[Image:Acc_Control_6.png]]
=== Adding a User to Group ===
Any number of users can be added to a group, this is done by highlighting the appropriate group and pressing 'Add User to Group'. A list of users not already in the group will be displayed; it is then a matter of selecting the username.


=User Maintenance=


Administrators are given the ability to create users and administer user passwords.  When setting up a new user, the Username, User Type, Description and Password are required.  Once a user has been created, there are a number of mandatory User Parameters which are also created and cannot be deleted.
To add a user to a group take the following steps:


[[Image:acc_ctrl_2.jpg]]
* Highlight the required Group that you want the user to be added to [fig 1]


* Click the 'Add User to a Group' button. A new form will be displayed [fig 2]


== Creating and Editing a New User ==


[[Image:Acc_Control_3.png|600px]]


*Click User Maintenance and then the New button.


*Fill in the details on Users screen, User Type being Internal and Based at starting with country of Residence e.g. UK
* Highlight the required user to be added [fig 3]


*Click Save.
* Click the 'Add' button [fig 4]


*Click Edit for the user you have just created.


*Edit users BASED_AT, COST_CENTER, ENTRY_FORM and SCHED_GROUP and click OK.
[[Image:Acc_Control_4.png|600px]]


*Click Save


=== Remove User from Group ===
Users can be removed from a group at any time just by highlighting the User and clicking the button.


Your new user has been created.


==Group Maintenance==
To Remove a User from a group take the following steps:


In order to determine which functions a group of users can perform the Administrator must identify the [[C-TMS]] business functions required.  Once the menu structure has been identified, the Functions, Menus, Tabs, Reports, Extracts and Imports will need to be allocated in order to restrict/expand a user’s group access to part or all functionality contained within.  For example those groups with the function ADM_GEO_MAINT present allows users within that group to maintain locations via the locations form, if the form has been set up within the Menu structure.
*Highlight the required Group [fig 1]


=== Creating a New Group ===
*Highlight the required User [fig 2}


<ul>
*Click the 'Remove user from Group' button [fig 3]
<li>Click Group Maintenance then the New button</li>
<li>Give the Group a Name and Description and check Enabled</li>
<li>For each tab add or remove processes using the Add All/Remove All button or double clicking a process to add one at a time</li>
<li>Click Save</li>
</ul>


=== Editing a Group ===
*A pop up screen will be displayed asking the user to clairfy the removal of the user from the group.Click the 'OK' button to remove the user [fig 4]


<ul>
[[Image:Acc_Control_2.png|600px]]
<li>For the ADMIN Group in the Menus tab uncheck ‘In Menu?’ for Interface Errors and then Save</li>
<li>Exit Form and Look for this at Administration > Interfaces</li>
<li>Will not be available</li>
<li>Put the Menu back where it was and click Save</li>
<li>Check Administration > Interfaces to see it is back</li>
</ul>


=== Group Maintenance – Accessible Functionality ===


The screen has a series of tabs that allows the administrator to modify the features that the users in this group can access.
=== Remove All Users from Group ===
* Functions - functionality within screens that is accessible to the users in the group.
This button will remove all the users from a group in one action.
* Menus - menu items that are accessible to the users in this group.
* Tabs - tabs within screens that are accessible to the users in this group.
* Reports - Reports that are accessible to the users in this group.
* Extracts - Extracts that are accessible to the users in this group.
* Imports - Imports that are accessible to the users in this group.


Each screen works similarly:
* A top panel shows the functionality that is accessible to the users in the group.
* A bottom panel shows the functionality that is currently not accessible to the users in the group.


To make functionality accessible, double-click the item in the bottom panel and it will be added to the top panel.
*Highlight the required Group [fig 1]


To make functionality inaccessible, double-click the item in the top panel and it will be removed and shown in the bottom panel.
*Click the 'Remove All Users from Group' button [fig 2]. This will open a box
 
Example - tabs:
 
This tab allows the administrator the ability to control which tabs a group has access to.  For example, the 'Bookings' group has access to the [[Trip Manipulation]] form, but they do not necessarily need to see anything to do with finance.  Therefore, the administrator can restrict access to the Finance tab to the Bookings group. All forms which have tabs can be controlled in this way, except the Access Control form, which assumes that the administrator has access to ALL the tabs.


*Click 'OK' to proceed and remove all the users [fig 3]


=== Change User Password ===
The Administrator can change the password of any user - this may be because the user has forgotten it.
=== Disable User Access ===
Within the ‘Edit’ function, the Administrator can temporarily disable a user’s account or can force a user to change their password. 
=== Parameter Set up ===
A number of parameters allow multiple selections, ie, take for example the Carrier user parameter, A user may only be able access one carrier, another user may be able access two carriers.  This can be set up quite simply in this form. To read more about user parameter uses click [[User Parameters|here]].
=== Default Printers ===
On selecting the ‘Default Printers’ tab an individual user can be allocated a default printer and by selecting the ‘User Parameters’ tab, the Administrator can limit the amount of data that is displayed to the user, for example, if a particular user should only see data belonging to a particular Cost Centre, then a user parameter can be added with a value selected from a list where appropriate.
=== Change User Password ===
The Administrator can change the password of any user - this may be because the user has forgotten it.


[[Image:Acc_Control_5.png|600px]]




== Audit Log ==
=== Users not in a Group ===
A list of users who do not belong to any group can be viewed.


The [[Audit Log]] is used throughout the [[C-TMS]] system to record events and errors that occur during both forms and database execution. For example the MSMQ Daemon (a Visual Basic Application) writes a message to the Audit Log every 7 minutes.  This allows Administrators to determine whether [[C-TMS]]/Isotrak jobs are being processed.
[[Image:ctrl_9.png]]


If the error type is set to ‘ERROR’ then the action flag is set to ‘YES’ in the [[Audit Log]].  Users can then search easily and deal with problems within [[C-TMS]].


[[Category:Maintenance|100]]
[[Category:Maintenance|100]]

Revision as of 13:11, 9 May 2024

This screen allows an Administrator to create a Menu structure at a Group Level. This allows a user to be associated to a group, which will give them enough visibility (screens, tabs) for them to perform their daily duties. Other functions can also be performed using this screen such as:-

  • Creating New Users.
  • Creating multiple profiles for a user.
  • Creating and amending new Groups.
  • Editing User Profiles.
  • Changing the passwords of Users.

All these options will be explained in more detail below.


Accessing the Screen

To gain access to the screen you must be an Administrator. A Standard user will not have visible of this menu option. It can be found by selecting the 'Administration' option followed by 'Access Control'

Ctrl 1.png


Access Control Main screen

This screen is view only and shows the existing User Groups and Users. Users can be associated to more than one group.

To view the Users for each group, the relevant Group Line should be highlighted.

There are a series of buttons to allow the user to Drill down further to add or edit data, expanded below.

Ctrl 2.png


User Maintenance

Administrators are given the ability to create users and administer user passwords. When setting up a new user, the Username, User Type, Description and Password are required. Once a user has been created, there are a number of mandatory User Parameters which are also created and cannot be deleted.

Ctrl 3.png


Creating a New User

  • Click the 'New' Button. The user is then populated with the screen below:

Ctrl 4.png


  • Fill in the details on the Users screen, User Type being Internal and Based at starting with country of Residence e.g. UK.
  • Click Save.
  • The check box 'Allow Multiple concurrent sessions' allows a user to have several sessions to be opened without a warning being populated


Editing a New User

Within the 'Edit' function, the Administrator can temporarily disable a user's account or can force a user to change their password. A number of parameters allow multiple selections, i.e., take for example the Carrier user parameter, a user may only be able access one carrier, another user may be able access two carriers. This can be set up quite simply in this form.

Ctrl 5.png


Change User Password

The Administrator can change the password of any user - this may be because the user has forgotten it.

Ctrl 6.png


User Parameters

By selecting the 'User Parameters' tab, the Administrator can limit the amount of data that is displayed to the user, for example, if a particular user should only see data belonging to a particular Cost Centre, then a user parameter can be added with a value selected from a list where appropriate.

A number of parameters allow multiple selections, i.e. take for example the Carrier user parameter, A user may only be able access one carrier, another user may be able access two carriers. This can be set up quite simply in this form. More details and a list of user parameters are referenced in the User Parameters section.

Note Note: For new users, you should:

  • Click Edit for the user you have just created.
  • Edit users BASED_AT, COST_CENTER, ENTRY_FORM and SCHED_GROUP and click OK.


Default Printers

On selecting the 'Default Printers' tab an individual user can be allocated a default printer.


Group Maintenance

In order to determine which functions a group of users can perform the Administrator must identify the C-TMS business functions required. Once the menu structure has been identified, the Functions, Menus, Tabs, Reports, Extracts and Imports will need to be allocated in order to restrict/expand a user's group access to part or all functionality contained within.

Ctrl 7.png


Creating a New Group

  • Click Group Maintenance then New
  • Give the Group a Name and Description and check Enabled
  • For each tab add or remove processes using the Add All/Remove All button or double clicking a process to add one at a time
  • Click Save


Editing a Group

  • For the ADMIN Group in the Menus tab uncheck 'In Menu?' for Interface Errors and then Save
  • Exit Form and Look for this at Administration > Interfaces
  • Will not be available
  • Put the Menu back where it was and click Save
  • Check Administration > Interfaces to see it is back


Group Maintenance – Accessible Functionality

The screen has a series of tabs that allows the administrator to modify the features that the users in this group can access.

  • Functions - functionality within screens that is accessible to the users in the group.
  • Menus - menu items that are accessible to the users in this group.
  • Tabs - tabs within screens that are accessible to the users in this group.
  • Reports - Reports that are accessible to the users in this group.
  • Extracts - Extracts that are accessible to the users in this group.
  • Imports - Imports that are accessible to the users in this group.

Each screen works similarly:

  • A top panel shows the functionality that is accessible to the users in the group.
  • A bottom panel shows the functionality that is currently not accessible to the users in the group.

To make functionality accessible, double-click the item in the bottom panel and it will be added to the top panel.

To make functionality inaccessible, double-click the item in the top panel and it will be removed and shown in the bottom panel.

Example - tabs:

This tab allows the administrator the ability to control which tabs a group has access to. For example, the 'Bookings' group has access to the Trip Manipulation form, but they do not necessarily need to see anything to do with finance. Therefore, the administrator can restrict access to the Finance tab to the Bookings group. All forms which have tabs can be controlled in this way, except the Access Control form, which assumes that the administrator has access to ALL the tabs.


Users and Groups

Ctrl 8.png


Adding a User to Group

Any number of users can be added to a group, this is done by highlighting the appropriate group and pressing 'Add User to Group'. A list of users not already in the group will be displayed; it is then a matter of selecting the username.


To add a user to a group take the following steps:

  • Highlight the required Group that you want the user to be added to [fig 1]
  • Click the 'Add User to a Group' button. A new form will be displayed [fig 2]


Acc Control 3.png


  • Highlight the required user to be added [fig 3]
  • Click the 'Add' button [fig 4]


Acc Control 4.png


Remove User from Group

Users can be removed from a group at any time just by highlighting the User and clicking the button.


To Remove a User from a group take the following steps:

  • Highlight the required Group [fig 1]
  • Highlight the required User [fig 2}
  • Click the 'Remove user from Group' button [fig 3]
  • A pop up screen will be displayed asking the user to clairfy the removal of the user from the group.Click the 'OK' button to remove the user [fig 4]

Acc Control 2.png


Remove All Users from Group

This button will remove all the users from a group in one action.


  • Highlight the required Group [fig 1]
  • Click the 'Remove All Users from Group' button [fig 2]. This will open a box
  • Click 'OK' to proceed and remove all the users [fig 3]


Acc Control 5.png


Users not in a Group

A list of users who do not belong to any group can be viewed.

Ctrl 9.png

Retrieved from ‘https://calidusassist.adcservices.apteancloud.com/calidus-assist/MTS/index.php?title=Access_Control_/_User_Maintenance&oldid=6459’