1 Overview

A Security Group is a leaf in the Organogram of a company Organogram_with_Group_Profiling

A Security Group allows you to specify a business unit and then perform a number of actions with that group.

Often Groups start at a broad level all the way down to teams of 1 to 4 people.

Groups are also used to create logical units of people associated with the business or clients who have log ins to your bxp system.

2 Attached data

It is possible to store a lot of information with a Security Group.

2.1 Details

Name : This is how the group will be represented through the system

Parent Group : All first level entries will belong to the "Everyone" group and then spread outwards from there.

Manager : Is a bxp user account primarily responsible for the group. This allows HR functions to be more easily managed.

Assistant Manager : Is a bxp user account which has the same permissions to perform functions as the manager for HR related updates.

2.2 Classification

Sort Order : By default the system will sort alphabetically on name but a custom sort order can be applied.

Icon : It is possible to specify an image with the security group. If you use a number one of the system default icons will be displayed or you can use a URL to specify the image

TOM - FTE : Target Operating Model - Full Time Equivalence is a float point number used in a TOM model. Human_Resources_Management_-_Target_Operating_Model_(TOM)

TOM - Roles : Another TOM model. Roles are added as ID-X,ID-X Where ID is the ID of the role and X is the FTE amount of that role required.

2.3 Security

Functional Access : This allows sections and functions to be automatically modified to a user when they are added to a group. The rules are entered as XX-ADD,YYYY-ADD,XX-REM,YYYY-REM

- XX is the two digit id of a module.

- YYYY is the four digit id of a section

- ADD will add access to the users. REM will remove this access from the users.

Content Access : This allows Content to be automatically modified by a group of users when they are added to the group. The rules are entered as TYPE-ID-ADD,TYPE-ID-REM

- TYPE is a keyword for the "content access keyword" listed as per Bxp_Security_-_Content_Management.

- Id is the numeric id for the content available from the various modules.

- ADD or REM will add or removed the content types appropriately

2.4 HRM (Human Resources Management)

ESS Details : Allows for a custom layout for dealing with people from this Security Group when managing them through the Security Group Manager section in the HR module.

ESS JavaSript : The JavaScript for the above ESS Details

HR fields : When listing users in this Security Group in HR reports this overriding list of HR fields can be applied.

3 Use of Security Groups

== To view your current structure ==

Main Menu > System Access Management > Security Group Management > Organogram with Group Profiling >

Each of the branches are clickable to allow you to review the users in that branch of the tree.

The display will also show all the branches and their members.

== To add a Security Group / Branch ==

Main Menu > System Access Management > Security Group Management > Security Group - Add >

* Give your security group / branch a unique name.
* Choose the parent to attach it to

Below is a display of the current structure to serve as a reminder.

== Profile a User ==

If you want to see what Security Groups / Branches a user is in the this report makes it easy to see.

Main Menu > System Access Management > Security Group Management > Profile a User >

== To associate users with a Security Group / Branch ==

Main Menu > System Access Management > Security Group Management > Add User to a Security Group >

* Choose the group
* Choose the users
* Click "Continue"

4 Security Groups for Forms

There are statistic reports for forms in the Data Profiling that need a Security Group allocated to the form. Form access is managed on a user by user basis for the most granular level control possible. However for quick group reporting a security group can be associated with the form. This association does not change form content access permissions.

Security Group

Contents