Key Sets

Key sets are groups of permissions, based on areas of operation within your facility, that define the operations a group of users can perform.

After you have configured your key sets, you assign the key sets to the appropriate groups. If a user is a member of a group that has been assigned a specific key set, the user has all of the permissions configured for that key set.

Workflow provides default key sets that you can assign permissions to. These key sets are:

  • System Visibility
  • S95 Configurator
  • Workflow Author
Note: When you install Workflow, you are required to create an administrator user. The administrator user is automatically assigned all permissions for all key sets.

The default key sets are hierarchical with System Visibility, S95 Configurator, and Workflow Author visible at the top. S95 Configurator and Workflow Author contain default child key sets. You can add key sets to any level of the hierarchy below the top level key sets. The following table describes the hierarchy of the default key sets.

> System Visibility
> S95 Configurator> Equipment Configurator

> Material Configurator

> Personnel Configurator

Workflow Author> Workflow Builder> Workflow Manager> Workflow Supervisor> Workflow Operator
Note: The Administrator key set is at the top of the hierarchy, but because it has all permissions and cannot be modified, it is not visible.

The following table describes the top level key sets.

Key SetDescription
System VisibilityRequired for any user to see the models list.
S95 ConfiguratorAutomatically assigned permissions to create, edit, and delete resources in the Equipment, Material, Personnel models.
S95 Configurator > Equipment ConfiguratorAutomatically assigned permissions to create, edit, and delete resources in the Equipment model.
S95 Configurator > Material ConfiguratorAutomatically assigned permissions to create, edit, and delete resources in the Material model.
S95 Configurator > Personnel ConfiguratorAutomatically assigned permissions to create, edit, and delete resources in the Personnel model.
Workflow AuthorAutomatically assigned permissions to create workflows and subprocesses to be used by workflow builders.
Workflow Author > Workflow BuilderAutomatically assigned permissions to create workflows by assembling predefined subprocesses.
Workflow Author > Workflow ManagerAutomatically assigned permissions to maintain workflows and historical task data in the system by importing and exporting data, and by archiving and purging data.
Workflow Author > Workflow SupervisorAutomatically assigned permissions to handle task assignment and management for their assigned operators.
Workflow Author > Workflow OperatorAutomatically assigned permissions to perform work based on tasks that are assigned and available within a Task List.

You can create as many key sets as you require and can organize them into a hierarchy that fits your business purposes. You can also assign additional permissions to each of the default key sets. You can delete the default key sets and replace them with your own; however, you cannot rename them. If a key set is already in use in your system, you cannot delete it.

The permissions that you assign to each key set are inherited by its parent. For example, you have the following key sets: Workflow Operator, Workflow Supervisor, and Workflow Manager. If you assign the system permission Visible and the workflow permission Cancel Tasks to the Workflow Operator key set, then the parent key set, Workflow Supervisor, inherits those permissions. If you then assign the Execute Workflows and Execute Schedules permissions to the Workflow Supervisor key set, those permissions, as well as the Visible and Cancel Tasks permissions are inherited by the Workflow Manager key set.

In addition, permissions set at one level are not inherited by child key sets. Therefore, the Workflow Supervisor key set does not automatically inherit the permissions assigned to the Workflow Manager key set.

Because the Administrator key set automatically has all permissions, it is not available when you are assigning key sets to groups.

When you are designing the security plan for your facility, make sure that you take key set assignments into consideration. When you are assigning key sets, you assign them to the appropriate solution and displays (found under Solutions in the Proficy System model).

Note: You can also assign key sets for the System using the Assign Key Sets Quick Find link under the Personnel model in the navigator or by using the Assign Key Sets link in the Security Editor for a specific user or group.