{"id":26640,"date":"2017-05-02T12:31:00","date_gmt":"2017-05-02T04:31:00","guid":{"rendered":"http:\/\/localhost\/help\/?page_id=26640"},"modified":"2024-06-10T10:38:00","modified_gmt":"2024-06-10T02:38:00","slug":"application-and-global-roles","status":"publish","type":"page","link":"https:\/\/oihelp.corporate.ifs.com\/help\/p2-explorer\/security\/application-and-global-roles\/","title":{"rendered":"Application and Global Roles"},"content":{"rendered":"\n

This article applies to P2 Explorer versions 4.3.0-4.5.5 ONLY. For the latest version, see Security<\/a>.<\/p>\n

There are two types of roles in P2\u00a0Security: Application Roles<\/em> and Global Roles<\/em>. It's important to know the difference between the two in order to grant users access to advanced functionality (e.g. administrator access) in P2 applications.\u00a0<\/p>\n

Application Roles<\/strong>\u00a0are roles that are automatically provided by an application, that combine several privileges on objects within that system, into a single role. \u00a0E.g.\u00a0The 'Explorer Administrator'<\/em>\u00a0role\u00a0in P2 Explorer allows access to the Settings page in P2 Explorer, as well as viewing audit logs and publishing directly to a workspace.<\/p>\n

While Application Roles are specific to a single application, Global\u00a0Roles<\/strong> are more focused around the business. \u00a0Global Roles\u00a0exist across different applications, and map to the types of role that people perform in their business. \u00a0E.g. You may set up Accounting, Engineering, Management, IT etc.<\/p>\n

Users are assigned<\/strong> to Global Roles, and the Global Roles can be mapped<\/strong> to the Application Roles, which transfers those application access privileges to users with that Global Role.\u00a0<\/p>\n

Note: Users belonging to a global role which has had a mapping change will need to log out and then log in again to notice any changes to their privileges.<\/p>\n

Application Roles<\/h2>\n

An Application Role is created by an application such as P2 Explorer. These may vary from version to version as new features are added.<\/p>\n

P2 Security<\/h3>\n

P2 Security provides the following application roles:<\/p>\n\n\n\n\n
Administration Inspector<\/strong><\/td>\nProvides the ability to view all items in P2 Security Connect, however users with this role are unable to add, edit, or delete anything in P2 Security Connect.\u00a0<\/td>\n<\/tr>\n
Administrator<\/strong>\u00a0<\/td>\nProvides the ability to view, add, edit, and delete all items in P2 Security Connect.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

P2 Server<\/h3>\n

P2 Server\u00a0provides the following application roles:<\/p>\n\n\n\n\n\n
Editor<\/strong><\/td>\nAllows users to view,\u00a0add, edit, and delete all items in P2 Server Management.\u00a0<\/td>\n<\/tr>\n
Image Editor<\/strong><\/td>\nAllows users in P2 Explorer to upload images via the Image Gallery, and store them in P2 Server. This role does not provide access to P2 Server Management.<\/td>\n<\/tr>\n
Tag Editor<\/strong><\/td>\nAllows users in P2 Explorer to save new calculations to P2 Server.\u00a0This role does not provide access to P2 Server Management.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

P2 Explorer<\/h3>\n

P2 Explorer\u00a0provides the following application roles:<\/p>\n\n\n\n\n\n
Explorer Administrator<\/strong><\/td>\n\n

Allows users to import\/export pages and trends, view audit logs, publish directly to a workspace, and access the Settings<\/em> function in P2 Explorer for administration of home pages.<\/p>\n

\"\"<\/a><\/p>\n<\/td>\n<\/tr>\n

Explorer Style Administrator\u00a0<\/strong><\/td>\nAllows users to create and modify styles in P2 Explorer.<\/td>\n<\/tr>\n
Explorer Workspace Administrator<\/strong><\/td>\nAllows users to create workspaces, approve submitted pages, and publish pages directly to a non-private workspace (i.e. any workspace other than \u2018My Workspace\u2019).<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Read more: Setting Up an Explorer Administrator<\/a><\/p>\n

Custom Applications<\/h3>\n

Consuming applications are able to integrate their own custom configuration files with P2 Security. Custom applications can create their own application roles to enable user access to that system. The Application Roles for a custom application will be specific to that application.\u00a0<\/p>\n

 <\/p>\n

\n

Global Roles<\/h2>\n

Global Roles are created by Security administrators. The point of a Global Role is to bundle access permissions for users and user groups with that role.<\/p>\n

Global Roles can be used to represent specific categories of users in the business (e.g. Engineering, Operations, Management, IT). You can then associate one or more Application Roles with the Global Role. For example, you may want all users in the IT Global Role to have 'Explorer Administrator' (a P2 Explorer<\/em> application role) privileges as well as 'Editor' (a P2\u00a0Server<\/em> application role) privileges.<\/p>\n

'Everyone' Default Global Role<\/h3>\n

By default, the 'Everyone' Global Role is included in all P2 Explorer installations, and all users are automatically assigned to this role. The role\u00a0allows all users read and modify\u00a0access to all of P2 Explorer.<\/p>\n

Note: All users are automatically assigned to the 'Everyone' Global Role, even if that role does not exist. If this role is deleted or otherwise does not exist, you can create it manually to enable the ability to secure items and applications against this role.<\/p>\n

The 'Everyone' role also allows administrators to specify a different global setting for anyone who accesses an application. For example, the Everyone role can be used to allow all users to view specific pages in P2 Explorer, but not edit them.<\/p>\n

If you want to start restricting access to certain workspaces, pages, or trends, then you need to explicitly specify permissions in the\u00a0roles for the objects\u00a0you are securing.<\/p>\n

 <\/p>\n

\n

Example Role Mapping Exercise<\/h2>\n

Here is an example of a Super Administrator global role, that has all the application roles mapped. All users with the Super Administrator role will also have all of the mapped application roles. After the role mapping is done, you can go ahead and add users<\/a> to the global roles.<\/p>\n

\"\"<\/a><\/p>\n

To map these roles, you will need to first add the global role, and then map the application roles.<\/p>\n

Adding a Global Role<\/h3>\n

1. In P2 Security, click Global Roles<\/strong> (under Administration on the left).<\/p>\n

2. In the top right of the blue toolbar, click the Add \"addbutton\"\u00a0button . \u00a0<\/p>\n

\"\"<\/a>\u00a0<\/p>\n

3. In the Add Global Role<\/strong> dialog box, type the name and description for the new global role, and then click OK<\/strong>.<\/p>\n

Note that Internal Name is required, and it must be unique and contain no spaces.<\/p>\n

\"\"<\/a><\/p>\n

\u00a0The new global role 'Super Administrator' is created.<\/p>\n

 <\/p>\n

Mapping an Application Role to a Global Role<\/h3>\n

\"\"<\/a>\u00a0<\/p>\n

1. In P2 Security, click Role Mappings<\/strong> on the left.<\/p>\n

2. In the Applications\u00a0<\/strong>box on the left, click the name of the\u00a0application containing the application roles you want to map (e.g. P2 Explorer).\u00a0You may need to wait a few seconds for the rest of the screen to refresh with the roles for the chosen application.<\/p>\n

3. In the Application roles<\/strong> box on the right, click the application role you want to map (e.g. Explorer Administrator).<\/p>\n

4. In the Other global roles<\/strong> box on the right, click the Global Role you just created (Super<\/strong>\u00a0Administrator<\/strong>).<\/p>\n

5. Click the left arrow \"securityleftarrow\"\u00a0button to add the selected application role to this global role.<\/p>\n

Repeat steps 2-5 to add more application roles to the global role.<\/em><\/p>\n

6. Once all\u00a0roles have been mapped, click the Save<\/strong> button.\u00a0<\/p>\n

Now you can go ahead and add users<\/a> to the Super Administrator Global Role.<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

This article explains the application roles in P2 Explorer, P2 Server, and P2 Security.<\/p>\n

Read more<\/i><\/a><\/p>\n","protected":false},"author":1,"featured_media":26641,"parent":26597,"menu_order":1,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":"","_members_access_role":[],"_members_access_error":""},"categories":[680],"tags":[196],"class_list":["post-26640","page","type-page","status-publish","has-post-thumbnail","hentry","category-security-4-3-0-4-5-5","tag-security","Version-4-5-0","Product-ex"],"_links":{"self":[{"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/pages\/26640","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/comments?post=26640"}],"version-history":[{"count":4,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/pages\/26640\/revisions"}],"predecessor-version":[{"id":67102,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/pages\/26640\/revisions\/67102"}],"up":[{"embeddable":true,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/pages\/26597"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/media\/26641"}],"wp:attachment":[{"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/media?parent=26640"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/categories?post=26640"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/tags?post=26640"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}