About the Security Application

As an Administrator, you can use the Security application to provide permissions to group of users to access various Plant Applications modules. It also enables you to provide access to perform various tasks within the applications. You can provide department-level, line-level and unit-level access privileges to the users.

Terminology used in Security application:

Applications: Various modules of Plant Applications such as, Work Order Manager.
Resources: A resource is a unit, line, or a department. Example: Welding Department
Groups: A group is a collection of people and sub-groups. You can create a group of users doing the same task on the same resource. Example: You can have a group of supervisors for each line. Example: Supervisors_LineA, Supervisors_LineB, Supervisors_LineC.
A group can also have multiple sub-groups: Example: You can create a group All_Supervisors and add Line A, B & C supervisors to that group.
Role: A role contains a set of permissions required to perform various tasks. Example: Role1 may include permission to create a work order, update a work order and so on.
Assignment: Enables you to assign a role and resources to groups. An assignment defines the tasks and the resources to which a group of users have access.

The following table describes the tasks that are now secure. A user needs permission to these tasks to be able to perform the tasks.


Application	Tasks	Lowest level of resource that could be added to an assignment
Unit Operations and Work Queue	Execute work orders clock on clock off provide completed quantity for an operation specify a quality variable mark an operation as complete Skip an operation Consume BOM Create raw material lots	Unit
Unit Operations and Work Queue	Add produced material lot to in-progress work order	Line
Work Order Manager	Create a work order Edit a work order plan change start/end dates update the priority Edit the work order (change operations) Change lot identifiers Clock off another operator Cancel a work order Add produced material lot to an in-progress work order Add produced material lot to a not started work order Manually complete a work order Cancel a not started serial/lot	Line
Unit Operations, Work Queue, and Work Order Manager	Edit and delete comments of other users	Site
Time Booking	Edit and delete labor records of other users	Site
ERP	Import the details related to Work Orders, Material Lots, and Outside Processing (OSP) from ERP to MES. To enable this, the user should have the permission to: Create a work order Edit a work order Execute a work order Cancel a work order Clock off others Change work order plans Create a raw material lot	Line

Note: When you create an assignment, if you add a resource that is at lower level than the lowest level required, the permissions will fail. Example: Suppose you want a user to have permission to create a work order, while creating an assignment, if you include only a unit level resource, the permission will fail, because work orders are created on lines and not on units.

Example 1: Ram and Ravi are operators. To provide them access to Non Conformance, perform the following steps:

Create a group such as Operators_1.
Add Ram and Ravi to Operators_1.
Add Operators_1 group to Non Conformance. Ram and Ravi can then access

Example 2: John and Stacy are supervisors. To give them access to edit work order plans on Line 1 in Work Order Manager, perform the following steps:

Create a role such as Supervision_1 and provide permission to edit work order plan.
Create a group such as Supervisors_Line1 and, add John and Stacy to the group.
Ensure that the Supervisors_Line1 group has been added to Work Order Manager.
Create an assignment to assign the role Supervision_1, the resource Line 1 to Supervisors_Line1. John and Stacy will then have the permission to edit work order plans on Line 1 in Work Order Manager.

Example 3: Carol and David are supervisors. To give them access to edit work orders on Line 2 in Work Order Manager, perform the following steps:

Create a role such as Supervision_2 and provide permission to edit a workorder.
Create a group such as Supervisors_Line2 and add Carol and David to the group.
Ensure that the Supervisors_Line2 group has been added to Work Order Manager.
Create an assignment to assign the role Supervision_2, the resource Line 2 to Supervisors_Line2. Carol and David will then have the permission to edit work orders on Line 2 in Work Order Manager.

Example 4: You can create an assignment to give permission to all the supervisors (John, Stacy, Carol and David) of the Site1 (includes Line 1 and Line 2) access to moderate comments on an application (example: Unit Operations).

Create a role Moderator and provide permission to edit and delete comments.
Create a group such as Supervisors_All and add Supervisors_1 and Supervisors_Line2 to the group.
Ensure that the Supervisors_All group has been added to the application for which you want to access comments (example: Unit Operations).
Create an assignment to assign the Moderator role, the Site1 resource to Supervisors_All group.
All the supervisors included in Supervisors_All will now have access to edit or delete comments from within the application (example: Unit Operations).