{"id":37813,"date":"2018-04-20T12:08:08","date_gmt":"2018-04-20T04:08:08","guid":{"rendered":"http:\/\/localhost\/help\/?page_id=37813"},"modified":"2024-07-05T10:07:59","modified_gmt":"2024-07-05T02:07:59","slug":"change-a-roles-privileges","status":"publish","type":"page","link":"https:\/\/oihelp.corporate.ifs.com\/help\/p2-server\/security\/change-a-roles-privileges\/","title":{"rendered":"Change a Role’s Privileges"},"content":{"rendered":"\n

This article applies to versions 4.6 and later of IFS OI Explorer.<\/p>\n

Overview<\/h2>\n

After creating a role and assigning resource-level or module-level privileges, you may need to adjust these privileges to cater for new resources or modules.<\/p>\n

Resource-level privileges override any object-level privileges, so users with this role will be able to see all objects of the specified resource, regardless of object-level privileges.\u00a0<\/p>\n

In order to be able to assign roles, a user must be a Security administrator.<\/p>\n

Read more: How Security Works<\/a>, How Roles Work<\/a>, Creating a Role<\/a>, Add an Administrator<\/a>, How Object Access Works<\/a><\/p>\n

This article explains how to modify the resource-level privileges associated with an existing role.<\/p>\n

Note: After changing a user's privileges, the user will receive the updated privileges in a hour, or they can log out and back in to receive them immediately.<\/p>\n

\n

Changing Privileges for a Role<\/h2>\n

1. Open IFS OI Server Management, and click the Security\u00a0\"\"<\/b>\u00a0icon.\u00a0<\/p>\n

2. Click\u00a0Role Privileges\u00a0\"\"<\/strong>.<\/p>\n

3. Click the role in the list that you want to modify.<\/p>\n

\"\"<\/a><\/p>\n

The page updates with the privileges matrix for modules and resources.\u00a0<\/p>\n

4. In the Privileges<\/strong> matrix, change the privileges you want to assign to this role. E.g. You might also want Calculation Editors to be able to edit Units.\u00a0<\/p>\n

What the Colours Mean<\/strong><\/p>\n

The privileges matrix is colour-coded to indicate the cascading nature of privileges. The colours are:<\/p>\n

\"\"\u00a0Grey: Privilege not granted
\n\"\"\u00a0Green tick: Privilege is explicitly granted, associated privileges will also be automatically granted.
\n\"\"\u00a0Green dot: Privilege is granted because a higher level privilege has been granted on the resource.
\n\"\"\u00a0Blue: Privilege is granted because it is inherited by a module privilege.<\/p>\n

Note: For the Write privilege on datasources, the Write flag must also be enabled on the datasource for this to take effect. If the flag is not enabled, this privilege will have no effect.<\/p>\n

5. When you have finished, click Save<\/strong> in the top right corner.<\/p>\n

The privileges for this role has now changed. The user will receive updated privileges in a hour, or they can log out and back in to receive them immediately.<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

After creating a role and assigning resource-level privileges, you may need to adjust these privileges to cater for new resources or modules. This article explains how to modify the resource-level privileges associated with an existing role.<\/p>\n

Read more<\/i><\/a><\/p>\n","protected":false},"author":1,"featured_media":37818,"parent":3652,"menu_order":15,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":"","_members_access_role":[],"_members_access_error":""},"categories":[11],"tags":[634,633,196],"class_list":["post-37813","page","type-page","status-publish","has-post-thumbnail","hentry","category-tutorial","tag-privileges","tag-roles","tag-security","Version-4-6-0","Product-ex"],"_links":{"self":[{"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/pages\/37813","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/comments?post=37813"}],"version-history":[{"count":2,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/pages\/37813\/revisions"}],"predecessor-version":[{"id":67809,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/pages\/37813\/revisions\/67809"}],"up":[{"embeddable":true,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/pages\/3652"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/media\/37818"}],"wp:attachment":[{"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/media?parent=37813"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/categories?post=37813"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/tags?post=37813"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}