Granting admin access to users in Administrator Console
You can also grant access to the Administrator Console for any active user. In previous releases, the access was limited to only the users in the admin group. For SOC or SOX audit purposes, it is important to give users with Administrator Console access to have limited access to the main TRIRIGA® Application Platform for separation of duty requirements. With TRIRIGA Application Platform 3.6.0.2 and newer versions, you must setup a TRIRIGA security group and give limited access, possibly to their My Profile record only, and Read Only or No Access to every thing else.
Procedure
- Navigate to the Administrator Console. Select the Admin Users object from the navigation and use options in the Admin Console User Manager to control the display. You can change the number of users shown per page from the default 25 and show next or previous pages. You can show all active users or only active admin users. You can filter by complete or partial user name, full name, or both; the filters are not case sensitive.
- Click All Users to toggle the list to display all TRIRIGA users, not only those that are in the Admin group.
- To configure a user's access to the Admin Console features, you can select one of the
following options:
- Full Access: Give access to all features
- Read Only: Give access to non-configurable features
- No Access: Deny access to all features
- Select only the required features for which you want to give access. You can copy and paste permissions from one user to another within each page of users that is currently displayed.
- Click Reset to set a user's permissions to what is saved in the database.
- Click Save Users when the access for all users on the page is
configured the way you want it.Restriction: When you click Next or Prev to move from page to page, any changes made to users on the page you are leaving and any set of permissions that have been copied are lost. To save the changes to each page, you must click Save Users before clicking Next or Prev to move to another page. If you need to have more users listed on the same page, for example to Copy and Paste a set of permissions from one user to another, you can increase the number of users shown per page. Also, note that after you click Save Users, a subsequent Reset action shows the current permissions, not any prior values. If you are upgrading from a prior version of the TRIRIGA Application Platform, existing users retain the level of access to the Administrator Console defined in the upgraded release. New users created after upgrade do not have access to the Administrator Console.