Overview Tab of the Roles Form

Use this tab to enter basic settings for a security role, such as the ability to access Vantagepoint applications (menu items), the role type, search and save rights, and more.

Contents

Access to Menu Items

Field	Description
Full Access to All Menu Items	Select this checkbox to assign this role full access to all Vantagepoint menu items in both the browser and desktop applications. All menus added in future versions of Vantagepoint will also be available to this role. Warning: Use this option with caution. When you select this checkbox, a warning message displays to indicate that users assigned to the role will be able to view and edit every record and field in the Vantagepoint database, regardless of their other security settings.
Navigation menu tree	If you do not select the Full Access to All Menu Items checkbox for a role, use this menu tree to select the checkbox for each menu item that the role is allowed to access. Click next to a menu item to expand the tree and see submenus. When you select a parent item, all respective submenu items are automatically selected. Therefore, make sure that the role should have access to all submenu items before you select a parent-level item. The menu tree contains all standard menu items in the Navigation pane and any additional items that you added through customization. Menu items that exist in both the browser and desktop applications appear only once in the tree, and when you select the one menu item, the role has access to the menu item in both the browser and desktop applications. Warning: Use the Security menu and the Roles and Users submenu options with caution. When you select any of these options in the Navigation menu tree, a warning message displays to indicate that users assigned to the role will be able to view and edit every record and field in the database for all users, regardless of their other security settings. When you give a role access to a hub, the role can access only the Summary pane and Overview tab for that hub. To give access to additional tabs in a hub, on the Access Rights tab of the Roles form, set the Functional Area option to Application Tabs and then specify the hub tabs that the role can access.
	Security role access also determines which applications are available via the Find Application search tool on the Navigation pane. When you search for an application, Vantagepoint returns application results only, and all other submenus are excluded. For more information, see Find an Application. These menus within the Navigation menu tree have significant security implications when selected. Be sure to review these items before making your selections: Security: All security options will be selected and the role will have access to all users and roles. Security > Roles Security > Users Workflow: Users will have access to scheduled and user-initiated workflows. Workflow > User Initiated Workflows Workflow > Scheduled Workflows By having access to any of these applications, a user can increase their security access to all areas.
Enable All/Disable All	Click the Enable All button to enable all menu options displayed in the menu grid. Click the Disable All button to disable all menu options displayed in the menu grid. This is helpful when you need to quickly disable all menu options for a role. Warning: Use the Enable All button with caution. When you click this button, a warning message displays to indicate that users assigned to the role will be able to view and edit every record and field in the database, regardless of their other security settings.

Type of Role section

Select one or more of the following checkboxes to determine the type of role:

Field	Description
Setup	If you create a security role for use during the setup process, select this checkbox. When you do, the other options in the Type of Role section are selected as well, giving the role all the properties provided by the other role types. In addition, the menu options list on this tab changes to display the options relevant to the setup process so that you can select those that you want the role to have access to. When users are assigned a setup role to log in to Vantagepoint, the Navigation pane displays only the setup options to which their role gives them access.
Administrator	Select this option to give the role administrative privileges for the following: Dashboard: The role can save the dashboard layout for other users. Process Queues: The role can stop and start process queues and see jobs submitted by other users in the process queue manager. Lookups: The role can access all records in lookups. Hubs: The role can customize the hubs in the desktop interface. This requires access to the Screen Designer. To give members of a security role access to Screen Designer for the Equipment hub, the Administrator checkbox must be selected for the role in the Type of Role section on the Overview tab in Settings > Security > Roles in the browser application. In addition, you must select the Equipment hub in the access to menu items section on the Overview tab of the Roles form. Then, on the Access Rights tab of the Roles form, set the Functional Area option to Application Tabs and specify the tabs that the role can access: Plans: The role can check in plans that are checked out to other users. Login: The role can retain login privileges even if all users are disabled in the "user activity" application. Connect: The role has administrative access rights to Vantagepoint Connect in Utilities > Integrations > Connect . Only users with this administrative right have the ability to use the Delete All Connect Configurations option on the Actions menu in Vantagepoint Connect. The Available to CRM Users and Available to Accounting Users options that display in the hubs for project, employee, and vendor type firm records do not impact the Administrator role's ability to view a record.
Accounting	This checkbox is available when you have the Accounting module. This option enables users with this role to change periods and to mark project, employee, and vendor firm records as approved for use in processing. When a record is approved for use in processing, it can be used in transactions such as timesheets or AP vouchers. If this checkbox is cleared, users with this role can add new projects, firms, and employees if they have Add rights, but they cannot approve those records for use in accounting applications. The administrator can designate certain hub fields as Required for an Accounting user. Data must be specified in these fields to be able to save the respective hub record.
CRM	This checkbox is available when both the Accounting and CRM modules are enabled. It gives users access to employee, project, and firm records marked as Available to CRM Users. If the user is not also marked as an Accounting user, they can enter new records according to their record security, but they do not have to complete fields that are required for Accounting users. A CRM-only user cannot approve records for use in accounting applications. The administrator can designate certain hub fields as required for a CRM user.

Save Rights section

Field	Description
Reports, Searches, Options, and Grid Views	This setting controls the role's ability to save or delete searches, favorites, reports, and grid views. It also controls whether a member of the role who creates a custom search for a hub or application in the browser application can make that search available to other users. Select one of the following options in this field: Save Personal Only: The role can save searches, favorites, grid views, and sets of report options for personal use only. The role cannot share them with other Vantagepoint users. The role cannot create, rename, or delete folders within any of the Global folders. Save For My Role: The role can save searches, favorites, grid views, and sets of report options for themself and all others who share their security role. Save For All Roles: The role can save searches, favorites, grid views, and sets of report options for themself, all others who share their security role, and for global access by any coworker using Vantagepoint. In addition, the role can view and export associated information for the report, such as report definitions and other parameters.
Dashboards and Dashparts	This setting controls the role's ability to create and edit dashboards and dashparts. Select one of the following options: Save Personal Only: The role can save and edit personal dashboards. Only the user that created the personal dashboards can access them. Save For All Roles: The role can save and edit dashboards and dashparts that can be shared to other employees and can also save and edit personal dashboards. None: The role cannot save or edit dashboards or dashparts.
Email Templates	Select one of the following options in this field to control the role's ability to save email templates: Save Personal Only: The role can save email templates for personal use only. Save For My Role: The role can save email templates for personal use and the use of those who share their security role. Save For All Roles: The role can save email templates for personal use and for use by all roles.
Allow Access to Vantagepoint Intelligence Dashparts	Use this setting to control the role's ability to select and display Vantagepoint Intelligence workbooks in dashboards and dashparts. This option displays if the Vantagepoint Intelligence module is enabled.
Allow Access to Analysis Cubes Full Refresh	Use this setting to give the role the option to perform a full refresh of analysis cubes. When you enable this option, the Full Refresh option is displayed on the Distribution tab of the Schedule dialog box, which you display by clicking Schedule on the Refresh tab of the Analysis Cubes form in Settings > General > Analysis Cubes. This option displays if the Vantagepoint Intelligence module or the Analysis Cubes module is enabled.

Process Queues section

Field

Description

Allow Priority

Use this setting to control the role's ability to schedule reports and postings jobs. A setting of 0 gives the role access to schedule all reports and postings to all queues. A higher setting limits the queues that the role can use. For example, Allow priority 2 (or higher) means that a role has permission to schedule jobs only in queues marked as priority 2, 3, 4, and so on. Users cannot submit jobs to priority 1 queues. See Process Queue Manager Form for additional information.

Organization Record Access section

Field	Description
Organization Record Access	Select the organizations that the role can access on the Organization lookup. This setting also applies to General Ledger Reporting. The options are: All Organizations: This option gives the role access to all organizations in the Vantagepoint database. Individual Organizations: Use the Advanced search options to look up and select individual organizations that the role can access.

Additional Search Options section

Select additional options that the role can use when searching for records in the browser and desktop applications.

Field	Description
Allow Access to SQL Where Clause	Select this option to allow access to SQL Where Clause searches, which make it possible to perform more complex searches from the Advanced Search dialog box. You can build a SQL Where Clause search to find records across multiple Vantagepoint hubs and applications. You can also use them to include fields not found in the standard searches. For more information, see SQL Where Clause Searches. Warning: When you grant a user security role access to SQL Where Clause searches, they will have access to every field in the database. Therefore, you should grant this access only to those users who have expertise in building SQL Where Clause searches.
Enable Searching Across Hubs in Desktop Applications	Select this option to enable an additional Lookup Search Types and Fields column on the Advanced Search dialog box in the desktop application. Use these fields to dictate the search criteria for searching across multiple hub records.
Allow Lookup Limit Override	Select this option to make the Override Lookup Limit button available on the lookup dialog box for the selected role. This option is editable if the Use Lookup Limits option is selected in the Desktop Lookups section of the Options form in Settings > General > Options.