Enhanced Security Model for Organization Based Access

The security model for organization-based access to Emptoris® Contract Management objects is enhanced so that in a complex organizational structure, users from one organization can access contracts and objects from other organizations even if they are not parent or child organizations of the organization that they belong to.

Users in Emptoris Contract Management can now be associated with multiple organizations in the organization hierarchy. Depending on the permissions and on the organizational grants in the Security Manager, users can access contracts that belong to associated organizations and to child organizations of associated organizations.

Associated organizations for users

You can associate a user with multiple organizations in Emptoris Contract Management from the Emptoris Strategic Supply Management Platform. Go to the Application tab in the User Profile for a user and add the Associated Organizations for the user.

Organization-restricted grants

Organization-restricted grants can be assigned only to user groups and only for objects that support organization controls.

The following options are available for organization-restricted grants.

Assigned
Assigned and Child organizations of Assigned
Associated
Associated and Child organizations of Associated
Assigned and Associated
Assigned, Child organizations of Assigned, and Associated
Assigned, Associated, and Child organizations of Associated
Assigned, Child organizations of Assigned, Associated, and Child organizations of Associated
Any

Note: In previous version of Emptoris Contract Management, Child organizations were referred to as Parent organizations. If you are migrating from a previous version to 10.1.0, the settings for Parent organizations are migrated to Child organizations automatically. Administrators must assign associated organizations to users and edit the organization-restricted grants to use the security options that are added in the 10.1.0 release.