Users' Permissions Affected by Groups

Path: Admin > User Management > Records

Assigning group membership to users can speed the process of creating user records and assigning permissions. The group rules are as follows:

• A person can belong to one or more groups.
• A group can be established with permissions for specific Privileges, Preferences, Menus, Windows, and Data.
• A group cannot contain another group.
• All group permissions and restrictions are inherited by each group member. For example, if the group has rights to a facility, then all group members have rights to that facility. If the group is part of a repair center, then group members also belong to that repair center.
• A False or Denied setting takes precedence when more than one group is assigned to a user. If permission is granted in one Group and the user is assigned to a second Group that denies the Privilege or Preference, the user is not given permission. Use False or Denied only if the users in a Group should not have access to a particular function.

The following table assumes the user has no permissions set from the user record. It illustrates how the Deny principle works:

To distinguish between general options and more restrictive options, WebTMA uses Preferences Tab settings (general options) and Privileges Tab settings (more restrictive). If a preference value does not exist on the user's record, it is loaded from the first user Group (alphabetically) with a value for that preference.