You can set access rights for users according to their duties(This form opens when you click the Access Rights button on the Administration > Master Data > Users form for the selected user.)
Using this form, you can set up access rights for the selected user by assigning user profiles in accordance with the user's duties and positions as an employee. Based on these settings the users will be able to access various application sections. Only a user with an access profile Administrator can assign personal rights, so the system creates a user with full rights by default. Firstly, set the password for an administrator and hide an administrator from the user’s list.
To set the rights, go to the "Administration" section and open the "Users" catalog. In the user’s list select a user to set rights and click the "Access Rights" button.
The schematic showing how to access the 'Access Rights'
When you select a profile in the right part of the window, a hint with a functionality description is displayed. You can assign multiple profiles to one user at the same time.
User Rights List
According to the set rights, a user will be able to access certain menu items. E. g. the "Accountant" and "HR Manager" profiles give access only to three sections of the application.
Menu items available to users with the 'Accountant' and 'HR Manager' profiles
Without access rights a user cannot enter the application.
The message prompting the user does not have access rights to enter the application
only the specific functionality of this application, specific types of documents and types of records. With multiple profiles assigned, the users will have access to all the documents, records of the types associated with their profiles. For information on how to restrict user access to particular documents and records, refer to Setting up User's Access Rights (with RLS).
Note. Only a user with the Administrator role (profile) can set up other user access rights.
By default, a new user is created without access to any functionality. With no profile assigned, the user even cannot log in to the application.
You can assign multiple predefined profiles to this user by selecting appropriate check boxes in the Profiles list.
The Access Rights form
According to the assigned profiles, the user will be able to access only the functionality defined by the selected profiles.
The toolbar buttons
Click the Save button to save the assigned profiles or the Save and close button to save the user's assigned profiles and close the form.
The Access Rights Report button generates and opens the Access Rights report for this user with complete list of application record types and functionality to which the user has access.