Difference between revisions of "Roles"

From Hornbill
Jump to navigation Jump to search
(11 intermediate revisions by 3 users not shown)
Line 1: Line 1:
 +
This document can now be found at its new location in the [https://docs.hornbill.com/esp-config/organizational-data/roles/ Hornbill Document Library].
 +
 +
[[file:hornbill-document-library.png|Hornbill Cloud|link=https://docs.hornbill.com/esp-config/organizational-data/roles/]]
 +
<!--
 +
 
<div style="border:1px solid #90C0FF; background:#D0E0FF; width:99%; padding:4px; margin-bottom:10px;">
 
<div style="border:1px solid #90C0FF; background:#D0E0FF; width:99%; padding:4px; margin-bottom:10px;">
__NOTOC__[[Main Page|Home]] > [[Administration]] > [[System Administration|System]] > [[Organisational Data]] > Roles
+
__NOTOC__[[Main Page|Home]] > [[Configuration]] > [[Platform Configuration]] > Roles
 
</div>
 
</div>
 
{|style="width: 100%"
 
{|style="width: 100%"
Line 9: Line 14:
 
<br>
 
<br>
 
<br>
 
<br>
Hornbill comes equipped with a range of roles ready to associate to your Users. With each App that's installed, the number of roles available to associate to your users increases as each App is delivered with a set of default roles specifically designed to govern access to that application.
+
Hornbill comes with a range of roles ready to associate to your users. Each app is installed with a set of default roles specifically designed to govern access to that application. Manage Role assignments to your users or create some of your own.
 
<br>
 
<br>
 
<br>
 
<br>
In order for Users to access various parts of Hornbill they need to be given the appropriate roles. This is done using [[Administration|Hornbill Administration]].
+
In order for Users to access various parts of Hornbill they need to be given the appropriate roles. This is done via the [[Configuration]] area.
  
 
|style="width:5%"|
 
|style="width:5%"|
Line 22: Line 27:
 
:* [[Document Manager Roles]]
 
:* [[Document Manager Roles]]
 
:* [[Service Manager Roles]]
 
:* [[Service Manager Roles]]
 +
:* [[ITOM Roles and Rights|IT Operations Management Roles]]
 
|}
 
|}
  
Line 30: Line 36:
 
<br>
 
<br>
 
===Where do I associate Roles to Users?===
 
===Where do I associate Roles to Users?===
Roles are managed in Hornbill Administration and can be associated to a User in two ways:
+
Roles are managed in the Configuration area and can be associated to a User in two ways:
* Navigate to a specific User Account and select and save roles in the "Roles" field.
+
* Navigate to a specific [[User Account]] and select and save roles in the "Roles" field.
 
* Navigate to a specific role and click on the "Assigned Users" tab. Associate more users to this role by clicking the "Add Users" button.
 
* Navigate to a specific role and click on the "Assigned Users" tab. Associate more users to this role by clicking the "Add Users" button.
 
<br>
 
<br>
Line 42: Line 48:
 
* '''Assignment Roles''' - As the name suggests, are primarily there to provide restrictions on the assignment of Activities. For example, when configuring a Human Task node within a Business process, it is possible to assign that task to a Role. This is especially useful if you wish to restrict the assignment of an activity to a number of Users within a particular Group (but not all users) or if you want to expose this activity to a selection of Users across multiple Groups.
 
* '''Assignment Roles''' - As the name suggests, are primarily there to provide restrictions on the assignment of Activities. For example, when configuring a Human Task node within a Business process, it is possible to assign that task to a Role. This is especially useful if you wish to restrict the assignment of an activity to a number of Users within a particular Group (but not all users) or if you want to expose this activity to a selection of Users across multiple Groups.
 
It is also possible to share certain items based on an assignment Role. One example is Dashboards.
 
It is also possible to share certain items based on an assignment Role. One example is Dashboards.
 +
<br>
 +
Assignment Roles can only be associated to "Application Users"
 
<br>
 
<br>
 
<br>
 
<br>
Line 49: Line 57:
  
 
<div class="mw-collapsible mw-collapsed" data-collapsetext="Show Less" data-expandtext="Read More" style="width:1000px">
 
<div class="mw-collapsible mw-collapsed" data-collapsetext="Show Less" data-expandtext="Read More" style="width:1000px">
 +
 
=== Getting Started with Application Users ===
 
=== Getting Started with Application Users ===
 
<div class="mw-collapsible-content">
 
<div class="mw-collapsible-content">
Line 69: Line 78:
 
i.e.
 
i.e.
 
'''''Basic User Role''''' (Mandatory)<br>
 
'''''Basic User Role''''' (Mandatory)<br>
+ '''''Self Service User''''' - provides Service Manager functionality via the Service Portal <br>
+
+ '''''Self Service User''''' - provides Service Manager functionality via the Employee Portal <br>
+ '''''My Library Portal''''' - provides Document Manager functionality via the Service Portal<br>
+
+ '''''Docmanager Portal''''' - provides Document Manager functionality via the Employee Portal<br>
+ '''''Portal Chat Session User''''' - provides Live Chat functionality via the Service Portal<br>
+
+ '''''Portal Chat Session User''''' - provides Live Chat functionality via the Employee Portal<br>
 
and so on.<br>
 
and so on.<br>
  
Generally speaking, where an application is capable of delivering content via the Hornbill Service Portal, there will be a role controlling whether the content will be available to a Basic User.
+
Generally speaking, where an application is capable of delivering content via the Employee Portal, there will be a role controlling whether the content will be available to a Basic User.
 
<br>
 
<br>
'''NOTE:''' A Basic User account cannot posses a role which has a privilege level higher than "basic".
+
'''NOTE:''' A Basic User account cannot posses a role which has a privilege level higher than "basic". Basic Users cannot be given assignment roles.
  
  
Line 84: Line 93:
  
 
== Custom Roles ==
 
== Custom Roles ==
In the unlikely event that the range of System Roles supplied with Hornbill do not cater for your specific needs, it is possible to create your own Security and Assignment Roles.
+
In the unlikely event that the range of roles supplied with Hornbill do not cater for your specific needs, it is possible to create your own Security and Assignment roles.
 
<br>
 
<br>
 
Creating a new Assignment role is very simple and straightforward.
 
Creating a new Assignment role is very simple and straightforward.
 
<br>
 
<br>
However, creating a custom security role is quite an advanced task as it potentially requires becoming familiar with Hornbill's API documentation found at https://api.hornbill.com/docs/ in order to specify the correct system rights and database table access against the role.
+
However, creating a custom security role is quite an advanced task as it requires familiarity with Hornbill's API documentation found at https://api.hornbill.com/docs/ in order to specify the correct system and application rights against the role.
  
 
<div class="mw-collapsible mw-collapsed" data-collapsetext="Show Less" data-expandtext="Read More" style="width:1000px">
 
<div class="mw-collapsible mw-collapsed" data-collapsetext="Show Less" data-expandtext="Read More" style="width:1000px">
 
=== Creating a Custom Role ===
 
=== Creating a Custom Role ===
 
<div class="mw-collapsible-content">
 
<div class="mw-collapsible-content">
:# Launch [[Administration | Hornbill Administration]]
+
:# Launch [[Administration | Configuration]]
:# Select which application you are interested in the selection box at the top left
+
:# Select where the new role will be created (either Platform Configuration or a specific Hornbill App) from the drop down menu.
:# Select ''Roles'' then Roles
+
:# Click "Roles" under the section "User & Guest Access"
 
:# Select '+ Create New Role'
 
:# Select '+ Create New Role'
:# Specify the type of the new role
 
 
:# Complete Role details...  
 
:# Complete Role details...  
:::* Role ID - Name of new role. It must be unique.
+
:::* Role ID - Name of new role. It must be unique and cannot be changed later.
 
:::* Privilege Level - For most roles this will be User
 
:::* Privilege Level - For most roles this will be User
:::* Applications - Can apply to one or more Apps that will use this role
+
:::* Type - Security or Assignment
:::* Groups = Please leave blank
+
:::* Description - What the role has been created for
:::* Shared Mailboxes = Name of required mailbox
 
 
:: 6. Click "Create Role" to Save
 
:: 6. Click "Create Role" to Save
 +
: Once created, if the role was created in the context of Platform Configuration it's possible to add or update the application context or tie the role to a Hornbill Shared Mailbox. If the role was created in the context of a specific app, the application context cannot be amended.
 
<br>
 
<br>
: Here is an example of a new role definition:
 
 
:: [[File:New_role.png|700px|new role]]
 
:: [[File:New_role.png|700px|new role]]
 
</div>
 
</div>
Line 112: Line 119:
  
 
<div class="mw-collapsible mw-collapsed" data-collapsetext="Show Less" data-expandtext="Read More" style="width:1000px">
 
<div class="mw-collapsible mw-collapsed" data-collapsetext="Show Less" data-expandtext="Read More" style="width:1000px">
 +
 
=== Modifying a Custom Role ===
 
=== Modifying a Custom Role ===
 
<div class="mw-collapsible-content">
 
<div class="mw-collapsible-content">
:# Launch[[Administration| Hornbill Administration]]
+
:# Launch[[Administration| Configuration]]
:# Select which application you are interested in the selection box at the top left
+
:# Select Platform Configuration or the application you are interested in from the Configuration drop down at the top left
:# Select ''Roles'' then Roles
+
:# Click "Roles" under the section "User & Guest Access"
 
:# Select the role that needs changing
 
:# Select the role that needs changing
 
:# Edit the details and then 'Save Changes'
 
:# Edit the details and then 'Save Changes'
Line 127: Line 135:
 
=== Deleting a Custom Role ===
 
=== Deleting a Custom Role ===
 
<div class="mw-collapsible-content">
 
<div class="mw-collapsible-content">
:# Launch[[Administration | Hornbill Administration]]
+
:# Launch[[Administration | Configuration]]
:# Select which application you are interested in the selection box at the top left
+
:# Select Platform Configuration or the application you are interested in from the Configuration drop down at the top left
:# Select ''Roles'' then Roles
+
:# Click "Roles" under the section "User & Guest Access"
 
:# Mark the check box for role that needs deleting
 
:# Mark the check box for role that needs deleting
:# Using the drop-down menu next to the '+ Create New Role' button, click 'delete selected'and confirm.
+
:# Click the delete button located to the top right of the roles list.
 
<br>
 
<br>
 
</div>
 
</div>
 
</div>
 
</div>
 +
[[Category:Configuration]][[Category:HDOC]]
 +
-->
 +
<!-- esp-config/organizational-data/roles -->

Revision as of 23:25, 20 November 2023

This document can now be found at its new location in the Hornbill Document Library.

Hornbill Cloud