Introduction
Use Security overview to get an overview of all your users and maintenance users and validate if your maintenance users have the needed security roles for your company. You can inspect your users to see what type of access they have, and customize users' access to be more economically advantageous for your company.
Security overview allows you to:
- Inspect user setup in relation to security roles.
- Search for entry points and find which security roles and duties include the entry point.
- Get insights into duties and privileges when building your own security roles.
The new Security overview form is available for 'Maintenance Manager'.
You can find Security overview by going to Asset management > Inquiries > Maintenance insights > Security overview.
On the header of the security overview, the number of users is shown along with the number of users for each type of license. The same number is visible for maintenance users. This helps validate the number of costly operational users.
The users shown for security roles are all enabled users at runtime. If a user is related to either an enabled mobile user or an active maintenance worker, then the user is marked as a Maintenance user. This helps to quickly filter users who are relevant to maintenance.
Calculate Security
By clicking the Calculate security button in top menu, you can generate list of all security objects available at this moment in the environment.
In the Security overview fields, you can view basic information about specific security calculations:
- Calculated - date and time of calculation.
- Roles - number of security roles.
- Duties - number of security duties.
- Privileges - number of security privileges.
- Entry points - number of entry points which are assigned to at least one privilege.
- Time elapsed - time elapsed (in seconds) during calculating.
For each selected security object, it's possible to inspect everything related to security. To do so, you can use the 4 menu items on the Security overview page: roles, duties, privileges, and entry points. Each of the objects have a button above the table that says Inspect security followed by the object such as 'Inspect security role'. Select this button to inspect each item.
Roles
From the Roles tab, you can view all calculated security roles in the grid:
- Role name.
- Role description.
- User license - cumulative user license for a security role.
- Duties - number of duties assigned to security role.
Duties
From the Duties tab, you can view all calculated security duties related to selected security role in the grid:
- Duty name.
- Duty description.
- Roles - number of related security roles.
- Privileges - number of assigned privileges.
Privileges
From the Privileges tab, you can view all calculated security privileges related to selected security duty in the grid:
- Privilege name.
- Privilege description.
- Duties - number of related security duties.
- Entry points - number of assigned entry points.
Entry Points
From the Entry points tab, you can view all calculated entry points related to the selected security privilege in the grid:
- Entry point name.
- Entry point type - there are 3 types: Menu item display, Menu item action, Menu item output.
- Access level - access level of entry point.
List of access levels from the highest to lowest:
- Invoke
- Delete
- Correct
- Create
- Update
- Read
- Not specified
- User license – the highest user license assigned as property on menu item.
- Privileges – the number of privileges this entry point is related to.
On the Security overview form, you can view user roles in the 'Roles' tab.
- In the Roles tab, you can select various roles and view which users are assigned to them. Select the relevant roles and then select the tab 'Users' from the tab underneath 'Roles'.
- This shows you all active users with user ID, name, email and number of security roles that are assigned to the user(s).
- As mentioned in the previous article, you can select 'Inspect user roles' to view further information about related roles.
- The same form can also be opened by selecting the User role assignment button at the top of the page.
At the top of the security overview, the button All entry points opens a new form that contains insights into all calculated entry points with related privileges, duties, and roles.
The entry points grid contains the following columns:
- Name - entry point/menu item label.
- Entry point type - there are 3 types: Menu item display, Menu item action, Menu item output.
- Access level - same as in the security overview form.
- Privilege name.
- Duty name.
- Role name.
In the form footer below the grid, you can see an overview of the selected records from the grid. Here, you can see the following fields:
- Entry point
- Privileges - number of privileges the selected entry points is related to
- Access level - access level of the selected entry point
- Security privilege
- Entry points - number of entry points related to the selected privilege
- Duties - number of duties related to the selected privilege
- Security duty
- Privileges - number of privileges related to the selected duty
- Roles - number of roles related to the selected duty
- Security role
- Duties - number of duties related to the selected role
- User license