CMP - User Profile Maintenance
Overview
User profiles are used to represent ITAS Users in terms of their access rights/permissions within the system, as well as for identification purposes for features such as auditing.
CMP is the application that is used to administrate security access to the ITAS procedures. All ITAS user profiles are created and updated in CMP or it's restricted version CMP_EXT.
CMP_EXT can only setup new profiles and associate Group profiles to those profiles. CMP_EXT can not setup a Grouping Profile. The CMP Business user will maintain the profile contents and the CMP_EXT will apply those definitions.
User Profile
5 main elements need to be maintained:
1) The user's name and initials, desktop/web browser access, email address etc.
2) ITAS desktop style/content.
3) The privilege levels to access/ view company accounts and the menu options (programs) that are to be accessed by the individual user.
4) Profile status i.e. is the profile to be ONLY used as a Grouping Profile e.g. TRADERS
5) The CMP privilege for the individual applications, see task bar icon, which can be organised by user or by application.
Group Profiles
Group Profiles can be setup and individual users will be referenced to those Group user names (column headed User Group). The maintenance of a Group profile is exactly the same as an individual account. The individual user profiles can either be associated with a group profile OR have their own maintenance. If a user profile is assigned a group profile, their access will be kept consistent with the group profile maintenance. This access includes the CMP privilege, per task bar icon.
Permission Hierarchy
Defining privilege levels comprises 6 elements:
1) The companies the user can access,
2) The menu options that are available for each of the companies,
3) The privilege level that the user is assigned for each company. This determines which accounts/information the user can access. The level is 0 - 9 with Zero the most secure. An example of it’s use is where a bank account in the NOM can be setup with privilege = 2, therefore only users with company privilege 0, 1 or 2 can view the contents of that account.
4) Whether or not the user is restricted to only access selected Department's information.
5) Whether or not the user is restricted to only access selected Terminal's information. This is only relevant in TRADE and the production processes PROMAN, PROSCHED.
6) Certain programs e.g. TRADE, CLI, DOCENT, WIP, CHARTERS apply internal access control to some of the features in their application. A user would need to be setup with CMP/user privileges for each company to use the specific features. When a user is setup as a copy from another profile, the new profile will include the copy-from user/privileges. When a CMP record is created from empty, all of the user/privileges are automatically assigned for the companies to which the user has been given access.
The User Group feature maintains these access controls automatically.
Selecting Menu Options
In the Menu Options Tab
Company selection: In the first field of the tab you will have the option to select from the list of companies, the company whose menu options you are going to define.
Options selection per company: Having selected a company a list of menu options will automatically appear in the Available Options field. Choose the options you want the user to have for the company. (click on the option name and use the Add button to add it to the User Options field. To remove an option form the User Options field use the Remove button. You can also add all the options to the User Options filed by using the Add All button and do the opposite with the Remove All button)
Copying existing profiles: There is a Copy Another User Profile field you may use if you know that the profile you are creating is identical to an existing user's profile. To do so, select from the Profile to Copy list the appropriate profile and click on the OK button.
Note: Only companies that have been selected for a user and that do not have the Allow All cell ticked, will be listed. If no companies fulfill these requirements no changes can be made in the Menu Options Tab.
Specific program functionality is controlled by CMP Privileges