You will need Security Administrator<\/strong> privileges to access the Security module.\u00a0<\/p>\n To open IFS OI Security, click the padlock icon on the left menu bar.<\/p>\n The three sections of Security that are used for managing Sentinel\u2019s privileges are:<\/p>\n Details of these three sections are described below.<\/p>\n Sentinel\u2019s security can only be updated by a user with the Security Admin<\/strong> privilege. For example, anyone with the default Administrators role, which has this privilege. (Note that a new role can also be created with the Security Admin privilege.)<\/p>\n Note that the default Administrators<\/strong> role also has Module<\/strong> Privileges<\/strong> for all modules, including the Sentinel Admin<\/strong> privilege.<\/p>\n If you want a user to be able to import workspaces, folders, monitors and user processes, you need to assign them to a role that includes the Sentinel<\/strong> Admin<\/strong> module privilege.<\/p>\n The Sentinel Admin<\/strong> module privilege is located near the top of the privileges panel for the different roles.<\/p>\n The Sentinel Admin<\/strong> module privilege allows the following functionality to all roles that have this privilege:<\/p>\n If you want a user to be able to Re-run monitors, you need to assign them to a role that includes the Sentinel Workspaces<\/strong> Re-Run<\/strong> resource privilege.<\/p>\n Sentinel privileges at the resource level are also located in the Privileges page, for the different roles.<\/p>\n The Sentinel Admin<\/strong> module privilege allows the following functionality to all roles that have this privilege:<\/p>\n If you want to set workspace view privileges at the workspace level for a particular role, then you can edit the workspace and select that role in the Security Settings list for that workspace. Follow the instructions in the IFS OI Sentinel User\u2019s Guide, in the Workspace Security Roles<\/strong> section.<\/p>\n To grant a role privileges at this level, you should ensure that the Workspace View<\/strong> privilege is deselected at the Sentinel resource level, for that role, otherwise the role will have view privileges for each and every public workspace, regardless of individual workspace settings.<\/p>\n Note: To set workspace view privilege at the workspace level in Sentinel, you need the Sentinel<\/strong> Admin<\/strong> privilege.<\/p>\n If you want to set workspace approver privileges at the workspace level for a particular role, then you can edit the workspace and select that role in the Approvers list for that workspace. Follow the instructions in the IFS OI Sentinel User\u2019s Guide, in the Workspace Approvers<\/strong> section.<\/p>\n To grant a role privileges at this level, you should ensure that the Workspace Approve<\/strong> privilege is deselected at the Sentinel resource level, for that role, otherwise the role will have approve privileges for each and every public workspace, regardless of individual workspace settings.<\/p>\n Note: To set workspace approve privilege at the workspace level in Sentinel, you need the Sentinel<\/strong> Admin<\/strong> privilege.<\/p>\n The Server Entities View<\/strong> privilege relates to entities in Server, and can be assigned at the resource level (Server Entities View). Roles with this privilege allow Case editing and viewing for all entities. Roles with View privileges assigned at entity level allow Case editing and viewing for those entities only.<\/p>\n In Sentinel 4.1.7 and earlier, privileges were defined in the SentinelConfig<\/strong> file, with default roles allocated to them.<\/p>\n The table below shows the default privileges for Sentinel 4.1.7 and earlier (on the left), compare against the privileges in Sentinel 4.6 and later. Refer to this table when configuring the new security roles and privileges.<\/p>\n Sentinel Editors<\/p>\n<\/td>\n<\/tr>\n *Server Entities View privileges are set for Server\u2019s security. This is also in IFS OI Server Management. Refer to the section Server Entities View Privilege (above), for more information on this privilege.<\/em><\/p>\n There are two default roles in Security:<\/p>\n Administrators<\/strong>:\u00a0A default administrator role that has all privileges assigned.<\/p>\n Everyone<\/strong>: A default role that represents all authenticated users. When a new user is added to Security, the Everyone role is assigned to them.<\/p>\n In order to change anything in Security, you will need the Security Admin<\/strong> privilege. This comes with the Administrators<\/strong> role, or you can use any other role with this privilege.<\/p>\n All other roles need to be added. There might already be roles intended for the other modules (such as Explorer and Commentary), and there may be roles for Sentinel that have already been added by another Security Admin user.<\/p>\n We recommend adding some basic Sentinel roles, preferably prefixed by the word \u2018Sentinel\u2019, for example:<\/p>\n In our example, we will create a new Sentinel role for Sentinel Process Editors.<\/p>\n![](\"https:\/\/oihelp.corporate.ifs.com\/help\/wp-content\/uploads\/2020\/01\/word-image.png\")
<\/p>\nPrivileges<\/h2>\n
\n
Security Admin Privilege<\/h3>\n
![](\"https:\/\/oihelp.corporate.ifs.com\/help\/wp-content\/uploads\/2020\/01\/word-image-1.png\")
<\/p>\nSentinel Admin Privilege<\/h3>\n
![](\"https:\/\/oihelp.corporate.ifs.com\/help\/wp-content\/uploads\/2020\/01\/word-image-2.png\")
<\/p>\n\n\n
\n Area of Functionality<\/strong><\/td>\n Privileges to\u2026<\/strong><\/td>\n<\/tr>\n \n Private Workspaces<\/td>\n \n \n
\n Delete<\/td>\n \n \n
\n Import and Export<\/td>\n \n \n
Sentinel Resource Privileges<\/h3>\n
![](\"https:\/\/oihelp.corporate.ifs.com\/help\/wp-content\/uploads\/2020\/01\/word-image-4.png\")
<\/p>\n\n\n
\n Sentinel<\/strong><\/td>\n View<\/strong><\/td>\n Edit<\/strong><\/td>\n Delete<\/strong><\/td>\n Approve<\/strong><\/td>\n Re-Run<\/strong><\/td>\n Clear Messages<\/strong><\/td>\n<\/tr>\n \n Events<\/strong><\/td>\n -<\/td>\n Edit events<\/td>\n Delete events<\/td>\n -<\/td>\n -<\/td>\n -<\/td>\n<\/tr>\n \n User Processes<\/strong><\/td>\n -<\/td>\n Add or Edit user processes<\/td>\n Delete user processes<\/td>\n -<\/td>\n -<\/td>\n -<\/td>\n<\/tr>\n \n Workspaces<\/strong><\/td>\n \n \n
\n \n
-<\/td>\n Approve submitted monitors<\/td>\n Re-Run monitors<\/td>\n Clear messages<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n Workspace View Privileges<\/h4>\n
![\"C:\\Users\\gxl1129\\AppData\\Local\\Temp\\SNAGHTML76c84073.PNG\"](\"https:\/\/oihelp.corporate.ifs.com\/help\/wp-content\/uploads\/2020\/01\/c-users-gxl1129-appdata-local-temp-snaghtml76c840.png\")
<\/p>\nApprove Privileges<\/h4>\n
![\"C:\\Users\\gxl1129\\AppData\\Local\\Temp\\SNAGHTML76ca669f.PNG\"](\"https:\/\/oihelp.corporate.ifs.com\/help\/wp-content\/uploads\/2020\/01\/c-users-gxl1129-appdata-local-temp-snaghtml76ca66.png\")
<\/p>\nServer Entities View Privilege<\/h3>\n
![](\"https:\/\/oihelp.corporate.ifs.com\/help\/wp-content\/uploads\/2020\/01\/word-image-5.png\")
<\/p>\nComparing Security Roles in Sentinel 4.6 versus Sentinel 4.1.7<\/h3>\n
\n
\n\n
\n Privilege in Sentinel 4.1.7 and Earlier<\/strong><\/td>\n Permission To\u2026<\/strong><\/td>\n Default Roles in 4.1.7 and Earlier<\/strong><\/td>\n Privilege in Sentinel 4.6 and Later<\/strong><\/td>\n<\/tr>\n \n SecurityRolesWorkspaceDelete<\/td>\n Delete workspaces<\/td>\n Sentinel Administrators<\/td>\n Sentinel Admin<\/td>\n<\/tr>\n \n SecurityRolesFolderDelete<\/td>\n Delete folders<\/td>\n Sentinel Administrators,
\nSentinel Deleters<\/td>\n<\/tr>\n\n SecurityRolesMonitorDelete<\/td>\n Delete monitors<\/td>\n Sentinel Administrators,
\nSentinel Deleters<\/td>\n<\/tr>\n\n SecurityRolesImport<\/td>\n >Import workspaces, folders, monitors (includes bulk import)<\/td>\n Sentinel Importers<\/td>\n<\/tr>\n \n SecurityRolesExport<\/td>\n Export workspaces, folders, monitors (includes bulk export)<\/td>\n Sentinel Exporters<\/td>\n<\/tr>\n \n SecurityRolesWorkspaceAdd<\/td>\n Add workspaces<\/td>\n Sentinel Administrators<\/td>\n Workspaces Edit<\/td>\n<\/tr>\n \n SecurityRolesWorkspaceEdit<\/td>\n Edit workspaces<\/td>\n Sentinel Administrators<\/td>\n<\/tr>\n \n SecurityRolesFolderAdd<\/td>\n Add folders<\/td>\n Sentinel Administrators,
\nSentinel Editors<\/td>\n<\/tr>\n\n SecurityRolesFolderEdit<\/td>\n Edit folders<\/td>\n Sentinel Administrators,
\nSentinel Editors<\/td>\n<\/tr>\n\n SecurityRolesMonitorAdd<\/td>\n Add monitors<\/td>\n Sentinel Editors<\/td>\n<\/tr>\n \n SecurityRolesMonitorEdit<\/td>\n Edit monitors<\/td>\n Sentinel Editors<\/td>\n<\/tr>\n \n SecurityRolesEventViewAdd<\/td>\n Add event views<\/td>\n Sentinel Administrators,<\/p>\n \n SecurityRolesEventViewEdit<\/td>\n Edit event views<\/td>\n Sentinel Administrators,
\nSentinel Editors<\/td>\n<\/tr>\n\n SecurityRolesMonitorReRun<\/td>\n Re-run monitors<\/td>\n Sentinel Administrators<\/td>\n Workspaces Re-Run<\/td>\n<\/tr>\n \n SecurityRolesEventViewView<\/td>\n View event views<\/td>\n Sentinel Administrators,
\nSentinel Editors<\/td>\nWorkspaces View<\/td>\n<\/tr>\n \n SecurityRolesMonitorStatusReportClearMessages<\/td>\n Clear monitor status messages<\/td>\n Sentinel Administrators<\/td>\n Workspaces Clear Messages<\/td>\n<\/tr>\n \n SecurityRolesUserProcessEdit<\/td>\n Edit user processes<\/td>\n Sentinel Administrators,
\nSentinel Process Editors<\/td>\nUser Processes Edit<\/td>\n<\/tr>\n \n SecurityRolesUserProcessDelete<\/td>\n Delete user processes<\/td>\n Sentinel Administrators,
\nSentinel Deleters<\/td>\nUser Processes Delete<\/td>\n<\/tr>\n \n SecurityRolesEventEdit<\/td>\n Edit events<\/td>\n Sentinel Administrators,
\nSentinel Editors<\/td>\nEvents Edit<\/td>\n<\/tr>\n \n SecurityRolesEventDelete<\/td>\n Delete events<\/td>\n Sentinel Administrators<\/td>\n Events Delete<\/td>\n<\/tr>\n \n SecurityRolesCaseViewer<\/td>\n View cases<\/td>\n Case Viewer<\/td>\n * Server Entities View<\/td>\n<\/tr>\n \n SecurityRolesCaseEditor<\/td>\n Edit cases<\/td>\n Case Editor<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n Security Roles<\/h2>\n
\n
Creating a Role<\/h3>\n
![](\"https:\/\/oihelp.corporate.ifs.com\/help\/wp-content\/uploads\/2020\/01\/word-image-7.png\")
<\/p>\n![](\"https:\/\/oihelp.corporate.ifs.com\/help\/wp-content\/uploads\/2020\/01\/word-image-8.png\")
<\/p>\n![](\"https:\/\/oihelp.corporate.ifs.com\/help\/wp-content\/uploads\/2020\/01\/word-image-9.png\")
<\/p>\n![](\"https:\/\/oihelp.corporate.ifs.com\/help\/wp-content\/uploads\/2020\/01\/word-image-10.png\")
<\/p>\n![](\"https:\/\/oihelp.corporate.ifs.com\/help\/wp-content\/uploads\/2020\/01\/word-image-11.png\")
<\/td>\n![](\"https:\/\/oihelp.corporate.ifs.com\/help\/wp-content\/uploads\/2020\/01\/word-image-12.png\")
<\/td>\n![](\"https:\/\/oihelp.corporate.ifs.com\/help\/wp-content\/uploads\/2020\/01\/word-image-13.png\")
<\/td>\n![](\"https:\/\/oihelp.corporate.ifs.com\/help\/wp-content\/uploads\/2020\/01\/word-image-14.png\")
<\/td>\n