MANAGE SECURITY GROUPS

Use this screen to create and manage the groups authorized to access parts that are subject to the International Traffic in Arms Regulations (ITAR) or Export Administration Regulations (EAR). This screen displays any user-defined fields set up using the Manage Security User-Defined Labels application.

You can link parts, users, and projects to security groups, controlling access to part data. Additionally, you cannot enter any data on this screen if the Use Part Data Security Controls option is not selected on the Configure Product Definition Settings screen.

Before running this screen, please see this Part Data Security Overview to ensure that you have the correct security groups configuration so that only authorized users within your organization are able to access restricted part data.

Location

Security Group

Enter a unique identification code for the security group.

Description

Enter a description for the security group.

Issuing Agency

Enter the issuing agency for which the security group is created.

Security User-Defined Labels 1-5

Enter the value for the security user-defined fields 1-5, as defined on the Manage Security User-Defined Labels screen.

Status

Select whether the security group is Active or Inactive. Changing this field from Active to Inactive automatically sets the part data security status to Inactive in the linked users, parts, and projects.

Activation Date

This displays the date when the security group is initially made active for Part Data Security, or subsequently changed from inactive to active.  

Deactivation Date

This displays the date when the security group is no longer active for part data security. This field is updated automatically with the current date when the Status field is made Inactive.

Subtasks

• Table Information

  Changes to this screen update the following tables:

  • SEC_GRP

  • SEC_GRP_USER

  • SEC_GRP_PART

  • SEC_GRP_PROJ

  • ITEM

  • ITEM_SETTINGS_UDF

  • PART

  • PROJ

• FAQs

  I encountered an error message pertaining to part/revision access restriction. What does this mean?

  Parts or revisions that are subject to data security restrictions as defined in the International Traffic in Arms Regulations (ITAR) or the Export Administration Regulations (EAR) may not be visible to all users in your organization, and may trigger validation error messages to be displayed on certain screens. The table below explains the conditions that prompt the error messages that you may encounter.

  Error Message	Error Condition
  You are not authorized to access this restricted part/rev.	The part/revision you are viewing is actively linked to one or more security groups, and your user ID is not actively linked to any of those security groups.
  You are not authorized to access the restricted build part/rev associated with this manufacturing order.	The manufacturing order build part/revision is actively linked to one or more security groups, and your user ID is not actively linked to any of those security groups.
  One or more SO lines have unauthorized parts which require issues at the component level.	Your user ID is not authorized to access one or more sales order line part/revision records, which require issues at the component level.
  You not authorized to access one or more end items for the selected proposal.	Your user ID is unauthorized for one or more end item/revision within the selected proposal/revision.
  You are not authorized to access this restricted part/rev.	The part/revision is actively linked to one or more security groups, and your user ID is not actively linked to any of those security groups.
  A secured part/revision cannot be a component in an manufacturing bill of material (MBOM) that contains an unsecured assembly part/revision.	The MBOM component part/revision is actively linked to at least one security group, but the assembly part/revision is not.
  An unsecured MBOM assembly part/revision cannot have secured components.	You changed the part data security Status field to Inactive in a part security group row. This creates a condition where the  part/revision is no longer actively linked to any security group. However, the part/revision is still allocated as the assembly part/revision in an MBOM that has at least one component actively linked to one or more security groups.
  A secured part/revision cannot be a component in an MBOM with an unsecured assembly part/revision.	You changed the part data security Status field to Active in a part security group row. However, this part/revision is still allocated as a component in an MBOM with an assembly part/revision that is not actively linked to any security group.
  You are not authorized to access one or more of the restricted assemblies where the From Part/Rev is used.	You are not authorized to access at least one of the Where-Used assemblies for the part/revision.
  Buyer is not authorized for the part/revision on one or more requisition lines.	The buyer assigned at the requisition level is linked to a user that is not authorized for one or more requisition line parts/revisions.
  Buyer is not authorized for the part/revision on the requisition line.	The buyer is linked to a user that is not authorized for the requisition line part/revision.
  You are not authorized for the part/rev on one or more BOM components of the SO line assembly.	Your user ID is authorized for the SO line part/revision. However, when you clicked the Autoload BOM button, the autoloaded assembly part BOM on the SO line assembly contained at least one component part that your user ID has not been unauthorized for.
  You are not authorized for the part/rev on one or more Forecast rows.”	You selected the Clear Forecast Quantities option and your user ID is  not authorized to access part/revision data on one or more forecast rows.
  You are not authorized for the part/rev on one or more requisition lines.	You clicked the Autoload button and your user ID is not authorized to access part/revision data on one or more requisition lines.
  You are not authorized for the part/rev on one or more requisition lines associated with the RFQ.	You clicked the Autoload button and the request for quote record is linked to a requisition. However, your user ID is not authorized to access part/revision data on one or more of those requisition lines.
  You are not authorized for the part/rev on one or more components associated with the assembly MBOM.	You clicked the Autoload button and your user ID is not authorized to access part/revision data on one or more MBOM components for the assembly.
  This transaction cannot be deleted because you are not authorized for the part/rev on one or more lines.	You clicked Delete Record in the record header and your user ID is not authorized to access part/revision data on one or more associated lines.
  One or more RFQ lines do not have authorization and will not be saved (OK/Cancel).	Request for quotes lines are autoloaded, with some rows containing unauthorized parts/revisions.