Difference between revisions of "Roles and Security Settings"

From SmartWiki
Jump to: navigation, search
(Access)
(21 intermediate revisions by the same user not shown)
Line 1: Line 1:
 
=Overview=
 
=Overview=
 +
'''Role-Based Security '''is a method of permissioning accessibility and security measures in your SmartSimple copy based on the [[User Role|role]] that is associated with the user. 
 +
 +
With this scheme, you first [[Creating User Roles|create one or more roles]], then associate each user with one or more of these roles.
 +
 +
* '''Note: '''The system will always default to the minimum level of access; be aware of this when associating a user with multiple roles. 
 +
 +
By setting a default user role in your [[Personal Settings|personal settings]], the system will assume that you are adding someone using a specific role when you add a new person to the system. 
 +
 +
[[User Role|User roles]] organize (group) users and, in conjunction with these permissions and other logic, control what people can see and do in their [[SmartSimple]] [[instance]]. User Roles group similar people together and are additive; this means that a user may possess multiple roles, so roles need not be mutually exclusive. Typically, we will group users on what they will be doing within [[SmartSimple]] - for example, '''Reviewers, Grant Approvers '''- and by their department - for example, '''Human Resources '''or '''Accounting. '''A [[User|user]]'s [[User Role|role]] is there fundamental to their '''Role Base Access Control (RBAC), '''which comprises what we can apply the umbrella term of '''Role-Based Security.'''
 +
 +
==Advantages of Role-Based Security==
 +
* You can make individuals, regardless of their [[organization]], members of a role and therefore provide them access to a specific resource.
 +
* When you move the user to another organization, it does not affect their permission to access a resource.
 +
* Associating the role with the resource is less time-consuming than if the alternative is to associate the resource to many organizations. 
 +
 +
This security scheme should be used when the relationships between users and system resources are more complex, and you need to provide access to resources independent of any organizational structure. 
 +
 +
The '''Roles and Security Settings '''part of the SmartSimple system will allow you to configure the '''Role-Based Security '''scheme to your personal needs.
 +
 +
===Combining Organization and Role-Based Security===
 +
You are also able to combine [[Organization hierarchy#Organization Based Security|organization-based security]] with role-based security; both work through the same process of permissioning certain roles and/or organizations within the system to have differing levels of accessibility, functionality, and visibility of features. 
 +
 +
For example, if you wish to share a [[:Category:Calendars|calendar]] with everyone in a '''Marketing Department, '''you could share that calendar with both a specific organization '''and '''anyone with a '''Sales '''role. You would therefore use organization-based security to permission anyone in that marketing department with access, but you would use role-based security to permission individual users with the '''Sales '''role.
 +
 +
=Configuration - Essentials=
 +
Prior to configuring '''Role-Based Security, '''you must have first configured [[User Role|roles]] into your system. If you have not yet done this in your system, or do not yet know how to, please read our article on [[User Role#Configuration - Essentials|How to Create a User Role]]. 
 +
 +
==Accessing Roles and Security Settings==
 
The '''Roles and Security Settings''' of your [[SmartSimple]] [[instance]] can be accessed through the following steps:
 
The '''Roles and Security Settings''' of your [[SmartSimple]] [[instance]] can be accessed through the following steps:
  
Line 9: Line 37:
 
:: [[File:Roles and security.png|250px|border]]
 
:: [[File:Roles and security.png|250px|border]]
 
The '''Roles and Security''' Settings page will be displayed.
 
The '''Roles and Security''' Settings page will be displayed.
 +
 
:: {{RolesAndPermissionsPage}}
 
:: {{RolesAndPermissionsPage}}
 
+
==Functions of Roles and Security Settings==
==Access==
+
The '''Roles and Security Settings''' page allows access to the following configuration pages within SmartSimple:
This page allows access to the following configuration pages within SmartSimple:
 
  
 
{| class="wikitable"
 
{| class="wikitable"
Line 26: Line 54:
 
||'''System Security Settings'''
 
||'''System Security Settings'''
 
||
 
||
'''Global Security Settings - '''
+
'''[[Global Security Settings|Security Settings]] - '''Manage business and system security settings, including [[Password Policy]] and [[Email & Email Broadcast Security|Email & Email Broadcast Security]]. 
  
'''Arcadia Permissions - '''
+
'''[[Arcadia Permissions]] - '''Determine which [[User Role|roles]] are associated with the Arcadia [[Interface]], and if necessary, permission some roles to be able to switch to the Classic Interface (now deprecated as of November 2018 upgrade). 
  
'''System Feature Permissions -'''
+
'''[[System Feature Permissions]]''' - Allows for [[Global User Administrator|System Administrators]] to personalize their copy of [[SmartSimple]], making various system objects available to users in different roles. The '''Feature '''permissions will allow you to modify the accessibility of certain system features, such as [[Notes Overview|Notes]], [[Reports]], [[SmartFolders]], and more. 
  
'''System Visibility Permissions - '''
+
'''[[Visibility Permissions#System Visibility Permissions|System Visibility Permissions]]''' - Allows for System Administrators to personalize their copy of SmartSimple, making various system objects available to users in different roles. In the '''Visibility '''permissions, you can '''limit View Access '''and''' hide '''certain features.
  
'''Legacy Application Permissions - '''
+
* '''Note: '''It is recommended to use the [[Company and User Matrix|Organization and User Security Matrix]] over the system visibility permissions for higher levels of security; the matrixes can be accessed from '''[[Global Settings]] > Security. '''
 +
 
 +
'''[[System Feature Permissions#Legacy Application Permission|Legacy Application Permissions]] - '''Determine which roles are associated with base application functions - for example, [[Applicant Tracking]] and [[Web Forms]]. 
  
 
|-
 
|-
 
||'''{{UTA}}-based Settings'''
 
||'''{{UTA}}-based Settings'''
 
||
 
||
'''UTA Security Settings - '''
+
'''[[UTA Settings - Security|UTA Security]]''' '''Settings - '''Permission the security settings of the specific [[UTA]] here. Features of security include a [[Security Matrix]] and role restrictions. 
  
'''UTA Visibility Settings - '''
+
'''UTA Visibility Settings - '''Determine the visibility permissions for various objects and level of control for the specific [[UTA]]. 
 +
 
 +
* '''Note: '''Each separate [[UTA]] in your SmartSimple system will have its own heading of these settings, so that you can permission their security and visibility settings differently depending on the application and depending on which roles should appropriately have access to which UTA. 
  
 
|}
 
|}
 
+
=<br />See Also=
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
; Role and Security Settings
 
: '''[[User Role]]s''' - Use roles to control the menu, [[portal]], [[reports]] and fields associated with a specific group of [[user]]s or [[contact]]s. Roles also control field [[visibility]] and the types of contacts a user in a specific role can add to the system.
 
: '''[[Client Categories|Organization Categories]]''' - Use this feature to create [[categories]] for companies, control [[visibility]] to companies in a specific category and define [[custom fields]] for each category.
 
 
 
 
 
; Permission Settings
 
: '''[[Security Settings|Global Security Settings]]''' - Manage business and system security settings.
 
: '''[[Arcadia - Manager Permissions|Arcadia Permissions]]''' - Determine which roles are associated with the Arcadia interface.
 
: '''[[System Security Permissions|System Feature Permissions]]''' - Allows for system administrators to personalize their copy of SmartSimple and to make various system objects available to users in different roles.'''
 
: '''[[Visibility Permissions|System Visibility Permissions]]''' - Allows for system administrators to personalize their copy of SmartSimple and to make various system objects available to users in different roles.
 
: '''[[Manager Permissions - Application Permissions|Legacy Application Permissions]]''' - Determine which roles are associated with base application functions.
 
 
 
 
 
; UTA Settings
 
: '''[[UTA Settings - Security|UTA Security Permissions]]''' - Security settings of the UTA.
 
: '''UTA Visibility Permissions''' - Determine visibility permission for various objects and control
 
 
 
=See Also=
 
 
* [[:Category:Security]]
 
* [[:Category:Security]]
 
* [[:Category:Roles]]
 
* [[:Category:Roles]]
 +
* [[Company and User Security Matrix]]
 
* [[User Role]]
 
* [[User Role]]
 
* [[Overview of the Security Models]]
 
* [[Overview of the Security Models]]
 
* [[Role Based Security]]
 
* [[Role Based Security]]
 
* [[UTA Settings - Security]]
 
* [[UTA Settings - Security]]
 +
* [[System Security Summary]]
  
 
[[Category:System Management]][[Category:Security]][[Category:Roles]]
 
[[Category:System Management]][[Category:Security]][[Category:Roles]]

Revision as of 12:03, 16 August 2019

Overview

Role-Based Security is a method of permissioning accessibility and security measures in your SmartSimple copy based on the role that is associated with the user. 

With this scheme, you first create one or more roles, then associate each user with one or more of these roles.

  • Note: The system will always default to the minimum level of access; be aware of this when associating a user with multiple roles. 

By setting a default user role in your personal settings, the system will assume that you are adding someone using a specific role when you add a new person to the system. 

User roles organize (group) users and, in conjunction with these permissions and other logic, control what people can see and do in their SmartSimple instance. User Roles group similar people together and are additive; this means that a user may possess multiple roles, so roles need not be mutually exclusive. Typically, we will group users on what they will be doing within SmartSimple - for example, Reviewers, Grant Approvers - and by their department - for example, Human Resources or Accounting. A user's role is there fundamental to their Role Base Access Control (RBAC), which comprises what we can apply the umbrella term of Role-Based Security.

Advantages of Role-Based Security

  • You can make individuals, regardless of their organization, members of a role and therefore provide them access to a specific resource.
  • When you move the user to another organization, it does not affect their permission to access a resource.
  • Associating the role with the resource is less time-consuming than if the alternative is to associate the resource to many organizations. 

This security scheme should be used when the relationships between users and system resources are more complex, and you need to provide access to resources independent of any organizational structure. 

The Roles and Security Settings part of the SmartSimple system will allow you to configure the Role-Based Security scheme to your personal needs.

Combining Organization and Role-Based Security

You are also able to combine organization-based security with role-based security; both work through the same process of permissioning certain roles and/or organizations within the system to have differing levels of accessibility, functionality, and visibility of features. 

For example, if you wish to share a calendar with everyone in a Marketing Department, you could share that calendar with both a specific organization and anyone with a Sales role. You would therefore use organization-based security to permission anyone in that marketing department with access, but you would use role-based security to permission individual users with the Sales role.

Configuration - Essentials

Prior to configuring Role-Based Security, you must have first configured roles into your system. If you have not yet done this in your system, or do not yet know how to, please read our article on How to Create a User Role

Accessing Roles and Security Settings

The Roles and Security Settings of your SmartSimple instance can be accessed through the following steps:

1. Click the 9-square menu icon on the top right of your page.

052919 MenuIcon.png

2. Under the heading Configuration, select Roles and Security Settings.

Roles and security.png

The Roles and Security Settings page will be displayed.

Roles and Security Settings.png

Functions of Roles and Security Settings

The Roles and Security Settings page allows access to the following configuration pages within SmartSimple:

Roles and Categories

User Roles - Use roles in order to control the menu, portal, reports, and fields associated with a specific group of users or contacts. Roles also control field visibility and the types of contacts that a user in a specific role is able to add into the system. It is under this tab that you are also able to edit the Common Portal, the aggregated portal that can be helpfully applied to users in all roles rather than a specific role.


Organization Categories - Use this feature in order to create categories for companies, control visibility to companies in a specific category, and define the Custom Fields for each category.

System Security Settings

Security SettingsManage business and system security settings, including Password Policy and Email & Email Broadcast Security

Arcadia PermissionsDetermine which roles are associated with the Arcadia Interface, and if necessary, permission some roles to be able to switch to the Classic Interface (now deprecated as of November 2018 upgrade). 

System Feature Permissions - Allows for System Administrators to personalize their copy of SmartSimple, making various system objects available to users in different roles. The Feature permissions will allow you to modify the accessibility of certain system features, such as Notes, Reports, SmartFolders, and more. 

System Visibility Permissions - Allows for System Administrators to personalize their copy of SmartSimple, making various system objects available to users in different roles. In the Visibility permissions, you can limit View Access and hide certain features.

Legacy Application PermissionsDetermine which roles are associated with base application functions - for example, Applicant Tracking and Web Forms

-based Settings

UTA Security Settings - Permission the security settings of the specific UTA here. Features of security include a Security Matrix and role restrictions. 

UTA Visibility Settings - Determine the visibility permissions for various objects and level of control for the specific UTA

  • Note: Each separate UTA in your SmartSimple system will have its own heading of these settings, so that you can permission their security and visibility settings differently depending on the application and depending on which roles should appropriately have access to which UTA. 


See Also