...
Access Group Profiles are managed in Administration → Master Data → Access Group Profiles. Profiles are assigned to users through Administration → Master Data → Users → Access rights.
Warning: Standard system Access Group Profiles are predefined and cannot be edited. Roles cannot be added to or removed from standard system profiles. If a user needs additional roles, an administrator must create or use a custom Access Group Profile and assign it to the user.
An administrator Users can add roles to an existing custom Access Group Profile or create a new custom profile with the required roles.
...
Add a Role to an Existing Custom Profile
This option is available only for an editable custom Access Group Profile. Standard system profiles cannot be edited.
If the required role needs to be added to an existing custom Access Group Profile, an administrator can edit the profile and select the required role.
- Go to Administration → Master Data → Access Group Profiles.
- Open the required custom Access Group Profile.
- Open the Access Groups tab.
- In the Allowed Actions (Roles) area, find the required role.
Find a Role in the List
The Selected Roles Only option controls which roles are displayed in the list.
...
If you want to add a new role:
- Clear Selected Roles Only.
- Use the Search field to find the required role.
- Select the checkbox next to the role.
- Save the profile.
After clearing Selected Roles Only, the list displays the roles available in the system, including roles that are not yet selected in the profile.
...
If user do not want to modify an existing custom profile, an administrator can create a new Access Group Profile containing the required roles.
- Go to Administration → Master Data → Access Group Profiles.
- Select Create.
- Enter a name for the new profile.
- Open the Access Groups tab.
- In the Allowed Actions (Roles) area, make sure Selected Roles Only is cleared.
- Use the Search field to find the required role.
- Select the checkbox next to the role.
- Repeat the search and selection for each additional role that needs to be included.
- Select Save and close.
The new Access Group Profile now contains the selected roles.
...
After creating a new Access Group Profile, an administrator must assign it to the user who needs the roles included in the profile.
- Go to Administration → Master Data → Users.
- Open the required user.
- Open the user's Access rights.
- Find the newly created Access Group Profile.
- Select the checkbox next to the profile.
- Save the changes.
The user now receives the roles included in the assigned Access Group Profile.
...
Standard system Access Group Profiles are predefined and cannot be modified. You cannot add or remove roles in these profiles.
If the required role cannot be added because the profile is a standard system profile, an administrator must create a new custom Access Group Profile containing the required roles and assign it to the user.
instead.Screenshot: Show a standard system profile where the roles cannot be edited.
Important Notes
- Only users with administrator rights can create Access Group Profiles, add roles to profiles, or assign profiles to users.
- Roles are added to Access Group Profiles, not directly to users.
- Standard system Access Group Profiles cannot be modified.
- You can add roles to an existing custom Access Group Profile if it is available for editing.
- To add a role that is not currently included in a profile, clear Selected Roles Only before searching for the role.
- Selected Roles Only displays only roles that are already selected in the current profile, not all roles available in the system.
- A new Access Group Profile can contain one or multiple required roles.
- A newly created profile must be assigned to the required user through Users → Access rights.
- If a role is added to an existing profile that is already assigned to a user, the profile does not need to be assigned again.
- After changing access rights, the affected user must log out and log in again before checking the result.
Thank you for being FirstBIT Customer!