Changes

This page is accessed through the With this scheme, you first [[Configuration MenuCreating User Roles|create one or more roles]], then associate each user with one or more of these roles. This page allows access to the following configuration pages within SmartSimple:

;Role and Security Settings: * '''[[User Role]]sNote: ''' - Use roles The system will always default to control the menu, [[portal]], [[reports]] and fields associated with a specific group minimum level of [[user]]s or [[contact]]s. Roles also control field [[visibility]] and the types access; be aware of contacts this when associating a user in a specific role can add to the system.: '''[[Client Categories|Organization Categories]]''' - Use this feature to create [[categories]] for companies, control [[visibility]] to companies in a specific category and define [[custom fields]] for each categorywith multiple roles. 

[[User Role|User roles]] organize (group) users and, in conjunction with these permissions and other logic, control what people can see and do in their [[SmartSimple]] [[instance]]. User Roles group similar people together and are additive;Permission Settings: '''this means that a user may possess multiple roles, so roles need not be mutually exclusive. Typically, we will group users on what they will be doing within [[Manager Permissions - System Permissions|System PermissionsSmartSimple]]- for example, '''Reviewers, Grant Approvers ''' - Determine which roles are associated with specific system functions.: and by their department - for example, '''Human Resources '''[[Arcadia - Manager Permissions|Arcadia Permissions]]or ''' - Determine which roles are associated with the Arcadia interfaceAccounting.:  '''A [[Manager Permissions - System PermissionsUser|System Feature Permissionsuser]]''' - Determine which roles are associated with specific system functions.: '''s [[Manager Permissions - System PermissionsUser Role|System Feature Permissionsrole]]is there fundamental to their '''Role Base Access Control (RBAC), ''' - Determine which roles are associated with specific system functions.: comprises what we can apply the umbrella term of '''[[Manager Permissions Role- Application Permissions|Legacy Application Permissions]]Based Security.''' - Determine which roles are associated with base application functions.

;UTA Settings: '''[[Manager Permissions - UTA Permissions|UTA Security Permissions]]''' - Determine which roles This security scheme should be used when the relationships between users and system resources are associated with Universal Tracking Application functions.: '''[[Manager Permissions - UTA Permissions|UTA Visibility Permissions]]''' - Determine which roles are associated with Universal Tracking Application functionsmore complex, and you need to provide access to resources independent of any organizational structure. 

===Combining Organization and Role-Based Security===You are also able to combine [[Organization hierarchy#Organization Based Security|organization-based security]] with role-based security; both work through the same process of permissioning certain roles and/or organizations within the system to have differing levels of accessibility, functionality, and visibility of features.  For example, if you wish to share a [[:Category:Calendars|calendar]] with everyone in a '''Marketing Department, '''you could share that calendar with both a specific organization '''and '''anyone with a '''Sales '''role. You would therefore use organization-based security to permission anyone in that marketing department with access, but you would use role-based security to permission individual users with the '''Sales '''role. =Configuration - Essentials=Prior to configuring '''Role-Based Security, '''you must have first configured [[User Role|roles]] into your system. If you have not yet done this in your system, or do not yet know how to, please read our article on [[User Role#Configuration - Essentials|How to Create a User Role]].  ==Accessing Roles and Security Settings==The '''Roles and Security Settings''' of your [[SmartSimple]] [[instance]] can be accessed through the following steps: 1. Click the 9-square menu icon on the top right of your page. :: {{Icon-Menu}}2. Under the heading '''Configuration,''' select '''Roles and Security Settings'''. :: [[File:Roles and security.png|250px|border]]The '''Roles and Security''' Settings page will be displayed. :: {{RolesAndPermissionsPage}}==Functions of Roles and Security Settings==The '''Roles and Security Settings''' page allows access to the following configuration pages within SmartSimple: {| class="wikitable"|-||'''Roles and Categories'''||'''[[User role|User Roles]] '''- Use roles in order to control the [[menu]], [[portal]], [[reports]], and fields associated with a specific group of [[user]]s or [[contact]]s. Roles also control field [[Visibility|visibility]] and the types of contacts that a user in a specific role is able to add into the system. It is under this tab that you are also able to edit the [[Portals#Common aggregated portal vs single role portals|'''Common Portal''']], the aggregated portal that can be helpfully applied to users in all roles rather than a specific role.  '''[[Client Categories|Organization Categories]] '''- Use this feature in order to create categories for companies, control [[Visibility|visibility]] to companies in a specific category, and define the [[Custom Fields]] for each category. |-||'''System Security Settings'''||'''[[Global Security Settings|Security Settings]] - '''Manage business and system security settings, including [[Password Policy]] and [[Email & Email Broadcast Security|Email & Email Broadcast Security]].  '''[[Arcadia Permissions]] - '''Determine which [[User Role|roles]] are associated with the Arcadia [[Interface]], and if necessary, permission some roles to be able to switch to the Classic Interface (now deprecated as of November 2018 upgrade).  '''[[System Feature Permissions]]''' - Allows for [[Global User Administrator|System Administrators]] to personalize their copy of [[SmartSimple]], making various system objects available to users in different roles. The '''Feature '''permissions will allow you to modify the accessibility of certain system features, such as [[Notes Overview|Notes]], [[Reports]], [[SmartFolders]], and more.  '''[[Visibility Permissions#System Visibility Permissions|System Visibility Permissions]]''' - Allows for System Administrators to personalize their copy of SmartSimple, making various system objects available to users in different roles. In the '''Visibility '''permissions, you can '''limit View Access '''and''' hide '''certain features. * '''Note: '''It is recommended to use the [[Company and User Matrix|Organization and User Security Matrix]] over the system visibility permissions for higher levels of security; the matrixes can be accessed from '''[[Global Settings]] > Security. ''' '''[[System Feature Permissions#Legacy Application Permission|Legacy Application Permissions]] - '''Determine which roles are associated with base application functions - for example, [[Applicant Tracking]] and [[Web Forms]].  |-||'''{{UTA}}-based Settings'''||'''[[UTA Settings - Security|UTA Security]]''' '''Settings - '''Permission the security settings of the specific [[UTA]] here. Features of security include a [[Security Matrix]] and role restrictions.  '''UTA Visibility Settings - '''Determine the visibility permissions for various objects and level of control for the specific [[UTA]].  * '''Note: '''Each separate [[UTA]] in your SmartSimple system will have its own heading of these settings, so that you can permission their security and visibility settings differently depending on the application and depending on which roles should appropriately have access to which UTA.  |}=<br />See Also=* [[:Category:Security]]* [[:Category:Roles]]* [[Company and User Security Matrix]]* [[User Role]]* [[Overview of the Security Models]]* [[Role Based Security]]* [[UTA Settings - Security]]* [[System Security Summary]] [[Category:System Management]][[Category:Security]][[Category:Roles]]