General tab

The General tab has two sections that are labeled General and Data Access.

Here are descriptions of the fields in the General section.

Name

The text in this field is the name of the group.

Description

This field contains a description of the group.

Personalize Portal

If Yes, users in this group can select Personalize on their portal, which allows them to customize their Home page.

If No or empty, the Personalize button is not available to users in this group.

Personalize Bookmarks

If Yes, users in this group can select Add to Bookmarks and personalize their Bookmarks menu.

If No or empty, bookmarking is not available to users in this group.

Ignorable For Nav. Overrides

If Yes, the group is excluded from consideration in Group Overrides in a Navigation Collection.

If No or empty, the group is included in Group Overrides in a Navigation Collection.

See "Navigation Collections" in the IBM TRIRIGA Application Platform: User Experience User Guide for more information about Group Overrides.

Access All Profiles

If Yes, users in this group can access their own My Profile record or another user's My Profile record.

If No or empty, users in this group can access their own My Profile record but cannot access another user's My profile record. This is the default value.

The ENABLE_PROFILE_ROW_LEVEL_SECURITY property in TRIRIGAWEB.properties must be set to Y for the value of Access All Profiles to control user security access to My Profile records. For information about the properties files, see the IBM TRIRIGA Application Platform: Installation and Implementation Guide.

Login Authentication Type

This drop-down field indicates the login authentication type for users in this group. The options include Default, TRIRIGA Authentication, and any OAuth profile record in which the User For TRIRIGA Login check box is selected. The default option is Default, which indicates that this group uses the Default Login Authentication Type value that is selected in the Administrator Console.

The platform expects that the selected Login Authentication Type value is the same for all groups that are defined for a user. If a user is in multiple groups with different values for Login Authentication Type, then Default is used.

Note: OAuth profile records can be found at Tools > System Setup > Integration > OAuth Settings.

Note: For more information on configuring OAuth for SSO, see Examples of configuring SSO. For more information on login authentication types for the system default in the Administrator Console, see System information.

Here are descriptions of the fields in the General tab's Data Access section.

System Organization

If the value of the group System Organization field is blank, members of the group have access to records with blank System Organization fields. And, members of the group do not have access to records with values in their System Organization fields.

If the value of the group System Organization field is not blank, members of the group have access to records with values in their System Organization fields at the same level or at a lower level in the Organization hierarchy. If the value of the group System Organization field is \Organizations, members of the group have access to records with blank System Organization fields. If the value of the group System Organization field is not blank and not \Organizations, and the record's System Organization field is blank, members of the group have access to records in queries but do not have access to records in forms.

If you do not intend to use groups to restrict access to or visibility of records, and records have values in their System Organization fields, then set the value of the group System Organization field to \Organizations.

This is discussed in greater detail in "Organization and geography".

System Geography

If the value of the group System Geography field is blank, members of the group have access to records with blank System Geography fields. And, members of the group do not have access to records with values in their System Geography fields.

If the value of the group System Geography field is not blank, members of the group have access to records with values in their System Geography fields at the same level or at a lower level in the Geography hierarchy. If the value of the group System Geography field is \Geography, members of the group have access to records with blank System Geography fields. If the value of the group System Geography field is not blank and not \Geography, and the record's System Geography field is blank, members of the group have access to records in queries but do not have access to records in forms.

If you do not intend to use groups to restrict access to or visibility of records, and records have values in their System Geography fields, then set the value of the group System Geography field to \Geography.

This is discussed in greater detail in "Organization and geography".