The Assign Roles to Users (IMUR) screen provides a listing of all the users and the roles they've been given. After all the roles have been assigned, you will need to assign the users to specific roles using IMUR.
During testing, all users were most likely set-up with the Role P2K_MASTER. P2K_MASTER gives the user access to all functions. Once the users have been assigned to their new Execution Rights roles, you would replace the P2K_MASTER role with the correct role for the employee.
DO NOT make any changes to the P2K_MASTER Role as this role will be used by P2K and will have access to everything in the system.
The P2K_USER role must remain with each user, as this gives them access to the application. Sequences are very important to define the hierarchy of the roles and are important if a user is assigned to more than one role.
For example, if you have a PR_ROLE and an HR_ROLE and you assign USER-A to both these Roles, you need to identify a sequence. Set P2K_USER to 10, PR_ROLE to 20 and HR_ROLE to 30. If in PR_ROLE, you say that for the IEID function the P2K_User has no access but in HR_ROLE the user has access, sequence 30 prevails and therefore the user has access to IEID. Again, the Default role is only required if this user needs to have access outside of the application. You must have P2k_User checked as the Default Role or a Parse error occurs.
In the example above the user will have a business role which will give them the standard Splash screen when they enter the application. The EP_FOS role sets the specific objects or fields the user can see or update. The EP_DATA role sets the specific data the user may be restricted from or to.
ASSIGN ROLES TO USERS
The Assign Roles to Users (IMUR) screen is used to assign roles to users, giving them certain security restrictions or other capabilities. There are several base roles in the application supplied by High LineMckesson. P2K_USER This role is required for all users and provides the user with basic rights and privileges. P2K_MASTER P2K_Master is an application role only with no database rights or privileges assigned. This is an initial startup role that has all screen and report execution rights in it. As such, this role should not be assigned to your regular users, but rather to new roles with execution rights specific to the tasks assigned to that user. P2K_DBA This is the database administrative role that should only be given to a minimum number of users that are part of your technical team and senior users. DISC_USER This is an optional role that can be defined with a High LineMckesson supplied script to create a default role in both the database and the application. This role can now be added to a user and removed inside of the application. This role will allow those users to make use of the discoverer application with all the database selectivity within the user’s application rights.
‘Assign Roles to Users’ Usage and Examples
Screen captures are meant to be indicative of the concept being presented and may not reflect the current screen design.
If you have any comments or questions please email the Wiki Editor
All content © High Line Corporation