Changes

Once you have created ==Overview==The '''UTA Security Matrix '''feature in your [[Universal Tracking ApplicationSmartSimple]] [[instance]] allows you may want to restrict [[User|user]]'s interaction with the [[Universal Tracking Application|Universal Tracking Applications|application]] in your system and the associated [[Entity|entities]]with each application. In order The '''Security Matrix '''allows you to do this you will define how users can interact with each level of the data in an application, based on the way that they need to interact with data. You must enable the '''Security MatrixMatrix ''' featureand permission each [[User Role|role]] to have varying levels of accessibility to the [[Universal Tracking Application]]. 

'''Note: '''You should only enable this feature when you must have completed the entire application, as it may become very difficult [[Global User Administrator|System Administrator]] privileges in order to work with the application once this security is switched onenable the '''Security Matrix.'''

The '''==Configuration - Essentials=====Enabling the Security Matrix''' ===Your first step is configured from to create the [[Universal Tracking Application|Universal Tracking Applications]] for your system. If and once these have already been created, you may then enable the '''ConfigurationSecurity Matrix ''' pagefeature to ensure that the levels of access dependent on [[User Role|user role]] are properly secure and permissioned. 

1. Click Open the '''Settings''' tab{{UTA}} whose security you would like to permission.

2. Click the '''gear icon '''on the top left of the UTA page in order to enter its '''Application ConfigurationSettings.''' link.

The :: [[File:UTA configuration.png]]3. Click into the '''Security Matrix''' setting is displayed in the '''Application SettingsSecurity '''tab.

[[Image:Uta1354.png]] 3. Click the Toggle on the '''Enable Security MatrixMatrix ''' check boxoption. 

45. Click the A '''SaveSecurity Matrix ''' buttonhyperlink will then appear below. Click this hyperlink.

The ''':: [[File:UTA security matrix.png|500px|border]] <pre>As soon as the Security Matrix''' link is added enabled, all users will lose all access to data within the top of application until the '''Application Settings''' windowrole-specific permissions are established.</pre>

[[Image:Uta136.png]]===Setting Role-Based Security Permissions=== As soon as The next step after clicking into the security matrix '''Security Matrix''' hyperlink is enabled, all [[User|users]] to specifically choose which roles will lose all access to data within the application until the have which security permissions are establishedwith this {{UTA}}.

5. Click the The {{UTA}} '''Security Matrix''' linkpage will appear with a top row of tabs that lead, chronologically, to the security matrices of the {{L1}}, {{L2}}, and {{L3}} entities in that UTA (if more than a {{L1}} entity is applicable).

* The current view is for security associated with the Contract level. * '''Two additional tabs''' are used to control security associated with the '''Activity''' ({{l2}}) and '''Action''' Level 3 Activity levels.

For each [[Role|role]] that you have permissioned to access the application in the "[[ApplicationUTA_Settings_-_Security#Access_Role_Settings|applicationAccess Role Settings]], " the same set of options will be displayed at each level.

* '''Owner''' – Only a [[User|user]] in this [[Role|role]] associated through the “Owner” "Owner" standard field can perform the permissioned actions.* '''Assigned''' – Only [[User|users]] in this [[Role|role]] that are assigned to the item - either in the "Assigned" standard field or assigned as a contact with this role - can perform the permissioned actions.* '''AccountsOrganizations''' – Only [[User|users]] in this [[Role|role]] that are associated with organisations organizations assigned to this item can perform the permissioned actions. This is an indirect permission. For example, if you were to associate a company with a project and use this permission, then someone from that company with this [[Role|role]] would be able to perform the permissioned actions.* '''Person''' - Only [[User|users]] in this [[Role|role]] associated through the "Person" standard field can perform the permissioned actions.

The following five permission types * '''Deny''' - Users in this role are available:denied access to this item.

1[[Image:SecurityMatrixExample. Set the '''permissions''' as shown below:png|link=]]

[[Image:Uta138.png]] * All employees Employees can view all items.* Only the owner Employee assigned as the "Owner" of a given record can view, add, edit, delete and assign other peopleto that record.

The same set of [[Role|roles]] and permissions are displayed, but this time for the Level 2 {{l2}} items. [[Image:SecurityMatrixL2.png|link=]]

6. Repeat this process for '''Level 3 – ActionsActivities'''.  

{{PrevNextStart}} [[Calculating Information between Levels]]{{PrevNextMid}} [[Reader Logs]] {{PrevNextEnd}}[[Category:Universal Tracking Application]][[Category:ApplicationsSecurity]]