{"id":6633,"date":"2015-10-15T16:26:21","date_gmt":"2015-10-15T08:26:21","guid":{"rendered":"http:\/\/localhost\/help\/?page_id=6633"},"modified":"2024-11-22T14:04:06","modified_gmt":"2024-11-22T06:04:06","slug":"configuring-default-security","status":"publish","type":"page","link":"https:\/\/oihelp.corporate.ifs.com\/help\/p2-explorer\/security\/configuring-default-security\/","title":{"rendered":"Configuring Default Security in Explorer"},"content":{"rendered":"\n

This article applies to P2 Explorer versions 4.3.0-4.5.5 ONLY. For the latest, see Security<\/a>.<\/p>\n

Security for P2 Explorer is managed by the P2 Security application.\u00a0<\/p>\n

Default Permission Levels<\/h2>\n

When P2 Explorer is first installed, by default all users are in the \"Everyone\" global role, and the role\u00a0allows all users read and modify\u00a0access to all of Explorer.<\/p>\n

The Everyone role is used by administrators to specify a global setting for anyone who accesses P2 Explorer. For example, the Everyone role can be used to allow all users to view specific pages in P2 Explorer, but not edit them.<\/p>\n

Note: All users are automatically assigned to the \u201cEveryone<\/strong>\u201d global role, even if that role does not exist. If this role is deleted or otherwise does not exist, you can create the role manually so you can secure items and applications against it.<\/p>\n

If you want to start restricting access to certain workspaces, pages, or trends, then you need to explicitly specify permissions for all roles for the workspace, page, or trend you are securing.<\/p>\n

Related: Application and Global Roles<\/a><\/p>\n

\n

Access Levels<\/h2>\n

In P2 Explorer, you can secure workspaces, pages, and trends for viewing and modifying.<\/p>\n

Permissions cascade from higher to lower levels. For example, if you secure a workspace then only the users who are able to view the workspace will be able to view the pages and trends within that workspace.\u00a0<\/p>\n

However, you can also apply further security to pages and trends within a secured workspace. For example, you may have a workspace that is only visible to managers, but you may then have pages within that workspace that are only visible to senior managers.\u00a0<\/p>\n

Related: User Management<\/a><\/p>\n

\n

Launching P2 Security<\/h2>\n

To open P2 Security, type the URL into the browser's address bar. The URL takes the following form:<\/p>\n

https:\/\/servername.domainname.com\/P2.Security.Connect<\/strong><\/p>\n

Note that the server name must be the fully qualified domain name. For example:<\/p>\n

https:\/\/cadrondemo01.petroleumplace.com\/P2.Security.Connect<\/em><\/p>\n

\n

Tutorial: Restrict Access to a Workspace<\/h2>\n

If you want to restrict access to a certain workspace, you will need to create an additional global role for those users who can access the restricted workspace. In this example, we'll restrict access to one workspace by creating\u00a0a global role, and only allowing\u00a0that users with that role to view the workspace. Let's assume there's a workspace in P2 Explorer called Managers - this is what we want to restrict.<\/p>\n

Step 1. Create the\u00a0global role<\/h3>\n

1. On the left, click Global Roles<\/strong> (under Administration).<\/p>\n

2. In the top right of the blue toolbar, click the Add \"addbutton\"\u00a0button . \u00a0<\/p>\n

\"\"<\/a>\u00a0<\/p>\n

3. In the Add Global Role<\/strong> dialog box, type a name and description for the new global role, and then click OK<\/strong>.<\/p>\n

Note that Internal Name is required, and it must be unique and contain no spaces.<\/p>\n

\"addglobalrole\"<\/a><\/p>\n

Step 2. Restrict access\u00a0<\/h3>\n

We'll look at adding users to the global role in the User Management<\/a>\u00a0article.<\/p>\n

Right now, let's focus on how to use the global role to restrict access.\u00a0Now that you've created your global role, we can use that to restrict access to certain workspaces in P2 Explorer.<\/p>\n

1. On the left, under Access<\/strong>, click your P2 Explorer application. In this case, we're clicking P2.Explorer - cadrondemo01<\/strong>.<\/p>\n

\"application<\/a><\/p>\n

2. The next bit that you have to pay attention to is the Object Security<\/strong>. This is where you secure your workspaces, pages, and trends.<\/p>\n

3. First, select your object type. In this case, we want to secure a Workspace<\/strong>, so select that.\u00a0<\/p>\n

You will need to wait a few seconds for the names of the workspaces to load.<\/p>\n

\"objecttype\"<\/a><\/p>\n

4. If you have a lot of workspaces, the one you are looking for may not appear in the list. In this case, \u00a0type the first few letters into the Name filter<\/strong>.<\/p>\n

\"managerobject\"<\/a><\/p>\n

4. When the Managers<\/strong> workspace appears in the list, click it so that it's highlighted dark blue. The edit icon will then appear in the top right corner.<\/p>\n

\"namefilter\"<\/a><\/p>\n

5. Click the Edit \"securityediticon\"\u00a0icon.<\/p>\n

In the Edit Access<\/strong> dialog box, you can see that we're editing access for the Managers workspace on P2 Explorer - cadrondemo01.<\/p>\n

By default, the Allow All<\/strong> option is selected, which means that all users are able to read and modify the workspace. As you can see, access depends on the permissions assigned to each\u00a0global role.<\/p>\n

\"editaccessdefault\"<\/a><\/p>\n

6. We want to customise the permissions, so select the Custom<\/strong> access option.<\/p>\n

Now, we only want people in the Managers<\/strong> role to view and modify the workspace, and we want to all Administrators<\/strong> to see it.<\/p>\n

7. For Administrator<\/strong>, select View<\/em>. And for Managers<\/strong>, select View<\/em> and select Modify<\/em>.\u00a0<\/p>\n

\"customaccess\"<\/a><\/p>\n

\u00a08. Click OK<\/strong>.<\/p>\n

Access permissions for the Managers workspace\u00a0have now been updated.<\/p>\n

You should now add users<\/a> to the Managers role.<\/p>\n

\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"

The \"Everyone\" role in P2 Security allows administrators to specify a global setting for anyone who accesses an application. This article looks at how to configure default security for all users.<\/p>\n

Read more<\/i><\/a><\/p>\n","protected":false},"author":1,"featured_media":6641,"parent":26597,"menu_order":4,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":"","_members_access_role":[],"_members_access_error":""},"categories":[680],"tags":[196],"class_list":["post-6633","page","type-page","status-publish","has-post-thumbnail","hentry","category-security-4-3-0-4-5-5","tag-security","Product-ex"],"_links":{"self":[{"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/pages\/6633","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/comments?post=6633"}],"version-history":[{"count":2,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/pages\/6633\/revisions"}],"predecessor-version":[{"id":67101,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/pages\/6633\/revisions\/67101"}],"up":[{"embeddable":true,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/pages\/26597"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/media\/6641"}],"wp:attachment":[{"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/media?parent=6633"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/categories?post=6633"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/oihelp.corporate.ifs.com\/help\/wp-json\/wp\/v2\/tags?post=6633"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}