Overview Tab of the Roles Form

Use this tab to enter basic settings for a security role, such as the ability to access Vantagepoint applications (menu items), the role type, search and save rights, and more.

Contents

Access to Menu Items

Field	Description
Full access to all menu items	Select this check box to assign this role full access to all Vantagepoint menu items in both the browser and desktop applications. All menus added in future versions of Vantagepoint will also be available to this role. If you do not select this check box, select the specific menu items that the role can access in the menu tree below the check box. After you save a role record, to select or clear this check box, you must first click the Edit action on the Roles form. Warning: Use this option with caution. When you select this check box, a warning message displays to indicate that users assigned to the role will be able to view and edit every record and field in the Vantagepoint database, regardless of their other security settings.
Navigation menu tree	If you do not select the Full access to all menu items option for a role, use this menu tree to select the check box for each menu item that the role is allowed to access. Click next to a menu item to expand the tree and see sub-menus. When you select a parent item, all respective sub-menu items are automatically selected. Therefore, make sure that the role should have access to all sub-menu items before you select a parent-level item. The menu tree contains all standard menu items in the Navigation pane and any additional items that you added through customization. Menu items that exist in both the browser and desktop applications appear only once in the tree, and when you select the one menu item, the role has access to the menu item in both browser and desktop. Warning: Use the Security menu and Roles and Users sub-menu options with caution. When you select any of these options in the Navigation menu tree, a warning message displays to indicate that users assigned to the role will be able to view and edit every record and field in the database for all users, regardless of their other security settings. When you give a role access to a hub, the role can access only the Summary pane and Overview tab for that hub. To give access to additional tabs in a hub, on the Access Rights tab of the Roles form, set the Functional Area option to Application Tabs and then specify the hub tabs that the role can access.
	Security role access also determines which applications are available via the Find Application search tool on the Navigation pane. When you search for an application, Vantagepoint returns application results only and all other submenus are excluded. For more information, see Finding an Application. These menus within the Navigation menu tree have significant security implications when selected. Be sure to review these items before making your selections: Security: All security options will be selected and the role will have access to all users and roles. Security > Roles Security > Users Workflow: Users will have access to scheduled and user-initiated workflows. Workflow > User-initiated workflows Workflow > Scheduled workflows By having access to any of these applications a user can increase their security access to all areas.
Enable All/Disable All	Click the Enable All button to enable all menu options shown on the menu grid. Click the Disable All button to disable all menu options shown on the menu grid. This is helpful when you need to quickly disable all menu options for a role. Warning: Use the Enable All option with caution. When you select this option, a warning message displays to indicate that users assigned to the role will be able to view and edit every record and field in the database, regardless of their other security settings.

Type of Role section

Select one or more of the following check boxes to determine the type of role:

Field	Description
Setup	If you create a security role for use during the setup process, select this check box. When you do, the other options in the Type of Role section are selected as well, giving the role all of the properties provided by the other role types. In addition, the menu options list on this tab changes to display the options relevant to the setup process so you can select those that you want the role to have access to. When users are assigned a setup role to log in to Vantagepoint, the Navigation pane displays only the setup options to which their role gives them access.
Administrator	Select this option to give the role administrative privileges for the following: Dashboard: The role can save the dashboard layout for other users. Process Queues: The role can stop and start process queues and see jobs submitted by other users in the process queue manager. Lookups: The role can access all records in lookups. Hubs: The role can use the Screen Designer to customize hub labels. Plans: The role can check in plans that are checked out to other users. Login: The role can retain log in privileges even if all users are disabled in the "user activity" application. The Available to CRM Users and Available to Accounting Users options that display in the hubs for project, employee, and vendor type firm records do not impact the Administrator role's ability to view a record.
Accounting	This check box is available when you have the Accounting and CRM modules, or only the Accounting module. This option enables the Select Period dialog box. You can set the Type of Role option to either Accounting or Administrator, which allows enterprises with non-accounting users to enter new projects and associated information, without the ability to approve them for use in accounting applications. Employees who have the Accounting role can approve projects, firms, and employees for use in Accounting applications. The administrator can designate certain hub fields as Required for an Accounting user. Fields that are marked required must contain data to save the respective hub record.
CRM	This check box is available when Accounting and CRM are installed. It gives users access to employee, project, and firm records marked as Available to CRM users. If the user is not also marked as an Accounting user, they can enter new records but do not have to complete fields required for Accounting users. They cannot approve records for use in Accounting applications. The administrator can designate certain hub fields as required for a CRM user.

Save Rights section

Field	Description
Reports, Searches, and Options	This setting controls the role's ability to save or delete searches, favorites, reports, dashboards, and dashparts. It also controls whether a member of the role who creates a custom search for a hub or application in the browser application can make that search available to other users. Select one of the following options in this field: Save Personal Only: The role can save searches, favorites, dashboards, dashparts, and sets of report options for personal use only. You cannot share them with other Vantagepoint users. You cannot create, rename, or delete folders within any of the Global folders. Save For My Role: The role can save searches, favorites, dashboards, dashparts, and sets of report options for yourself and all others who share your security role. Save For All Roles: The role can save searches, favorites, dashboards, dashparts, and sets of report options for yourself, all others who share your security role, and for global access by any co-worker using Vantagepoint. In addition, the role can view and export associated information for the report (such as, report definitions and other parameters).
Dashboards and Dashparts	This setting controls the role's ability to create and edit dashboards and dashparts. Select one of the following options: Save For All Roles: The role can save and edit dashboards and dashparts. None: The role cannot save or edit dashboards or dashparts.
Allow Access to Vantagepoint Intelligence Dashparts	Use this setting to control the role's ability to select and display Vantagepoint Intelligence workbooks in dashboards and dashparts.
Allow Access to Analysis Cubes Full Refresh	Use this setting to give the role the option to perform a full refresh of analysis cubes. When you enable this option, the Full Refresh option is displayed on the Distribution tab of the Schedule dialog box when you display it by clicking Schedule on the Refresh tab of the Analysis Cubes form in (Settings > General > Analysis Cubes). This option is available when access to Vantagepoint Intelligence Dashparts is enabled.

Process Queues section

Field

Description

Allow Priority

Use this setting to control the role's ability to schedule report and postings jobs. A setting of 0 gives the role access to schedule all reports and postings to all queues. A higher setting limits the queues the role can use. For example, Allow priority 2 (or higher) means that a role only has permission to schedule jobs in queues marked as priority 2, 3, 4, and so on. Users cannot submit jobs to priority 1 queues.

Organization Record Access section

Field	Description
Organization Record Access	Select the organizations that the role can access on the Organization lookup. This setting also applies to General Ledger Reporting. Options are: All Organizations: This option saves gives access to all organizations in the Vantagepoint database. Individual Organizations: Use the Advanced search options to look up and select individual organizations.

Additional Search Options section

Select additional options that the role can use when searching for records in the browser and desktop applications.

Field	Description
Allow Access to SQL Where Clause	Select this option to allow access to SQL Where Clause searches, which make it possible to perform more complex searches from the Advanced Search dialog. You can build a SQL Where Clause search to find records across multiple Vantagepoint hubs and applications. You can also use them to include fields not found in the standard searches. For more information, see SQL Where Clause Searches. Warning: When you grant a user security role access to SQL Where Clause searches, they will have access to every field in the database. Therefore, you should grant this access to only those users who have expertise in building SQL Where Clause searches.
Enable Searching Across Hubs in the Desktop Application	Select this option to enable an additional Lookup Search Types and Fields column on the Advanced Search dialog box in the desktop application. Use these fields to dictate the search criteria for searching across multiple hub records.
Allow Lookup Limit Override	Select this option to make the Override Lookup Limit button available on the lookup dialog box for the selected role. This option is editable if the Use Lookup Limits option is selected in the Desktop Lookups section of the Options form in Settings > General > Options.