How do I grant and revoke data access for users?

Overview

In metasfresh, user roles enable you to configure which windows and functionalities individual users are permitted to access. In addition, user access can also be restricted or extended within the shared windows for certain data entries. This means that although a user is allowed to access a window, they may only be able to read, but not edit, individual or all entries, for example. Access to these management functions for data record permissions (“Grant Access” and “Revoke Access”) can also be configured flexibly per individual user role.

Requirements

• Set up access to the record permissions management features. (System Administrator)

Steps

1. Open any window from the menu where you want to manage user access permissions, e.g., “Business Partner”.

   Note: To be able to manage data access in a window, the underlying database table must have a permission entry in the role entry of the currently logged-in user.

2. Open an existing entry or create a new one.
3. Start the action “Grant Access” or “Revoke Access”, depending on your intention. An overlay window opens up.
4. Pick an Access type, e.g., Read, Write, Export oder Report.
5. Pick a Type of user, e.g., an individual User or a Nutzergruppe (User Group)
6. In the field Contact (or User Group), enter part of the name of the user (group) whose access permission you want to adjust and click on the matching result in the drop-down list.
7. Click “Start” to apply the changes and close the overlay window.
8. metasfresh saves the progress automatically.

Example