Permissions


Permissions

Overview

Each Empower User is assigned to a permission group. A Permission group defines features and data that are available or protected to/from users in that permission group.

Adding Groups

To add a permission group, click the Add toolbar button. This will present the Add Group dialog box.

From the New Group dialog box you will be able to assign the following fields:

Field/OptionDescription
NameSpecify a unique name for the permission group
DescriptionDescription of the permission group
Copy settings fromYou can copy the settings from an existing group by checking the Copy from checkbox and selecting an existing permission group.

To create the Group, click the Apply or Add buttons.

Removing Groups

To remove a Permission Group, first select the group from the Group drop list.

Then click the Remove toolbar button. You will be asked to verify the group removal.

If there are any users assigned to the group, you will have to change the user's permission groups before removing the group.

Modifying Groups

To modify a group, first select the group from the Group drop list.

You can modify the name and description by clicking the Edit icon.

Action Permissions

You can enable or disable an action by checking or un-checking its checkbox.

For each permission group, you can set the following options:

1. Creating Objects

OptionDescription
Can create ItemsIf this option is checked, users in this group can create new items
Can create Changes/ECOsIf this option is checked, users in this group can create Changes/ECOs
Can create CARs/PARsIf this option is checked, users in this group can create CAPA objects
Can create ProjectsIf this option is checked, users in this group can create Projects
Can create Vendor ItemsIf this option is checked, users in this group can create Vendor Items/Parts
Can create VendorsIf this option is checked, users in this group can create Vendors
Can create Service ObjectsIf this option is checked, users in this group can create Service Objects
Can create/modify Training ItemsIf this option is checked, users in this group can create and modify Training Items

2. Item Options

OptionDescription
Can modify released itemsIf this option is checked, users in this group can interactively modify released items without a formal Change/ECO.
Can release ItemsIf this option is checked, users in this group can release part requests that are "Awaiting Release"
Can modify items (when user appears on signoff list)If this option is checked, users in this group can interactively edit new part requests for items where the user is included in the signoff process.
Can modify Items (when user does not appear on signoff list)If this option is checked, users in this group can interactively edit pending Items when the user is not included in the signoff process.
Can modify pending Items when OriginatorIf this option is checked, users in this group can interactively edit pending Items that they have created.
Can modify when awaiting releaseIf this option is checked, users in this group can interactively edit pending Items when they are in an Awaiting Release state.
Can set/modify part numbersIf this option is checked, users in this group can interactively type in a part number on a New Part Request form. If this option is off, users will be required to use the "Get Next Number" feature to assign the part number.
Can set/modify part numbers on released itemsIf this option is checked, users in this group can change part numbers on released items.
Can reset signoff state (place under signoff) on released itemsIf this option is checked, users in this group will be able to place released items back under signoff (pending).
Can view all revisionsIf this option is checked, users in this group can view all revisions of an item. If it is not checked users in this group can only view the active revision.
Can modify revisionsIf this option is checked, users in this group can rename and reorder item revisions.
Can create revisionsIf this option is checked, users in this group can create new revisions interactively.
Can delete revisionsIf this option is checked, users in this group can delete item revisions.
Can access Item Page: HistoryIf this option is checked, users in this group can access the History page of the Item Master form.
Can access Item Page: Changes/ECOsIf this option is checked, users in this group can access the Changes/ECOs page of the Item Master form.
Can access Item Page: Where UsedIf this option is checked, users in this group can access the Where Used page of the Item Master form.
Can access Item Page: Service ObjectsIf this option is checked, users in this group can access the Service Objects page of the Item Master form.
Can access Item Page: VendorsIf this option is checked, users in this group can access the Vendors page of the Item Master form.
Can modify Service Objects Page on released itemsUsers with this permission will be able to add a Service Object or delete an existing Service Object within the Service Object page of a released Item.

3. Change/ECO Options

OptionDescription
Can release Changes/ECOsIf this option is checked, users in this group can release Changes/ECOs that are "Awaiting Release"
Can cancel Changes/ECOsIf this option is checked, users in this group can cancel (or hold) an active ECO ("Pending" or "Awaiting Release").
Can set/modify Change/ECO numbersIf this option is checked, users in this group can interactively type in a change number on a Change/ECO form. If this option is off, users will be required to use the "Get Next Number" feature to assign the change number.
Can modify Changes/ECOs (when user appears on signoff list)If this option is checked, users in this group can interactively edit Changes/ECOs where the user is included in the signoff process.
Can modify Changes/ECOs (when user does not appear on signoff list)If this option is checked, users in this group can interactively edit pending Changes/ECOs when the user is not included in the signoff process.
Can modify Changes/ECOs when OriginatorIf this option is checked, users in this group can interactively edit pending Changes/ECOs when the user is the person who created the Change/ECO.
Can modify when awaiting releaseIf this option is checked, users in this group can interactively edit pending Changes/ECOs when they are in an Awaiting Release state.
Can modify released Changes/ECOsIf this option is checked, users in this group can modify the Attributes, Documents, Tasks, Associations, and Training sections of a released Change/ECO.

4. Quality/CAPA Options

OptionDescription
Can release Quality/CAPAIf this option is checked, users in this group can release CAPA objects that are "Awaiting Release"
Can cancel Quality/CAPAIf this option is checked, users in this group can cancel (or hold) an active CAPA object ("Pending" or "Awaiting Release").
Can set/modify Quality/CAPA numbersIf this option is checked, users in this group can interactively type in an issue number on a CAPA form. If this option is off, users will be required to use the "Get Next Number" feature to assign the issue number.
Can modify Quality/CAPA (when user appears on signoff list)If this option is checked, users in this group can interactively edit CAPA objects where the user is included in the signoff process.
Can modify Quality/CAPA (when user does not appear on signoff list)If this option is checked, users in this group can interactively edit pending CAPA objects when the user is not included in the signoff process.
Can modify Quality/CAPA when OriginatorIf this option is checked, users in this group can interactively edit CAPA objects where the user is the person who created the item.
Can modify Quality/CAPA when OwnerIf this option is checked, users in this group can interactively edit CAPA objects where the user is assigned as the Owner.
Can modify when awaiting releaseIf this option is checked, users in this group can interactively edit pending CAPA objects when they are in an Awaiting Release state.
Can modify released Quality/CAPA ItemsIf this option is checked, users in this group can modify the Tasks, Attributes, Documents, Roles, Comments, and Associations of a released Quality/CAPA object.

5. Project Options

OptionDescription
Can complete ProjectsIf this option is checked, users in this group can set projects as "Complete"
Can modify Projects (when user appears on signoff list)If this option is checked, users in this group can interactively edit Projects where the user is included in the signoff process.
Can modify Projects (when user does not appear on signoff list)If this option is checked, users in this group can interactively edit pending Projects when the user is not included in the signoff process.
Can reopen completed ProjectsAccount Administrators can grant gold licensed users the ability to re-open a Completed Project. Once re-opened, the completed Project reverts to the Awaiting Release status.

6. Vendor Item Options

OptionDescription
Can release Vendor ItemsIf this option is checked, users in this group can release Vendor Items that are "Awaiting Release"
Can modify Vendor Items (when user appears on signoff list)If this option is checked, users in this group can interactively edit Vendor Items where the user is included in the signoff process.
Can modify Vendor Items (when user does not appear on signoff list)If this option is checked, users in this group can interactively edit pending Vendor Items when the user is not included in the signoff process.
Can modify Vendor Items when OriginatorIf this option is checked, users in this group can interactively edit Vendor Items where the user is the person who created the item.
Can modify released Vendor ItemsIf this option is checked, users in this group can interactively edit Vendor Items that are released.
Can modify Vendor Item Part NumbersIf this option is checked, users in this group can modify part numbers on Vendor Items/Parts.
Can modify Vendor Item AttributesIf this option is checked, users in this group can modify attributes on Vendor Items/Parts.
Can modify Vendor Item DocumentsIf this option is checked, users in this group can modify documents on Vendor Items/Parts.

7. Vendor Options

OptionDescription
Can release VendorsIf this option is checked, users in this group can release Vendors that are "Awaiting Release"
Can modify Vendors (when user appears on signoff list)If this option is checked, users in this group can interactively edit Vendors where the user is included in the signoff process.
Can modify Vendors (when user does not appear on signoff list)If this option is checked, users in this group can interactively edit pending Vendors when the user is not included in the signoff process.
Can modify Vendors when OriginatorIf this option is checked, users in this group can interactively edit Vendors where the user is the person who created the item.
Can modify released VendorsIf this option is checked, users in this group can interactively edit Vendors that are released.

8. Service Object Options

OptionDescription
Can release Service ObjectsIf this option is checked, users in this group can release Service Objects that are "Awaiting Release"
Can modify Service Objects (when user appears on signoff list)If this option is checked, users in this group can interactively edit Service Objects where the user is included in the signoff process.
Can modify Service Objects (when user does not appear on signoff list)If this option is checked, users in this group can interactively edit pending Service Objects when the user is not included in the signoff process.
Can modify Service Objects when OriginatorIf this option is checked, users in this group can interactively edit Service Objects where the user is the person who created the item.
Can modify released Service ObjectsIf this option is checked, users in this group can interactively edit Service Objects that are released.

9. Training Options

OptionDescription
Can view all Training revisionsIf this option is checked, users in this group will be able to see active and previous training versions.
Can modify Training revisionsIf this option is checked, users in this group can rename and reorder training revisions.
Can delete Training revisionsIf this option is checked, users in this group can delete training revisions.
Can view Training usersIf this option is checked, users in this group will be able to see all users assigned to training items.
Can modify Training ComprehensionIf this option is checked, users in this group will be able to modify Training Comprehension exams.
Can view user Training ComprehensionIf this option is checked, users in this group will be able to view results from any user's Training Comprehension exam.
Can grade user Training ComprehensionIf this option is checked, users in this group will be able to grade the results from any user's Training Comprehension exams.

10. BOM Configuration Options

OptionDescription
Can create BOM configurationsIf this option is checked, users in this group will be able to create BOM Configurations.
Can modify BOM configurationsIf this option is checked, users in this group will be able to modify BOM Configurations.
Can set released configurations to pendingIf this option is checked, users in this group will be able to change released BOM configurations back to a pending state.
Can view pending BOM configurationsIf this option is checked, users in this group will be able to view pending BOM configurations.

11. BOM Routing/MPM Options

OptionDescription
Can modify BOM RoutingIf this option is checked, users in this group will be able to modify BOM Routings.
Can modify when awaiting releaseIf this option is checked, users in this group will be able to modify BOM Routings when the Routing is awaiting release.
Can release BOM RoutingIf this option is checked, users in this group will be able to release pending BOM Routings.
Can modify released BOM RoutingIf this option is checked, users in this group will be able to modify released BOM Routings.
Can view pending BOM RoutingIf this option is checked, users in this group will be able to view pending BOM Routings.
Can modify Routing TemplatesIf this option is checked, users in this group will be able to modify BOM Routing templates.

12. General Options

OptionDescription
Can assign workflowIf this option is checked, users in this group can interactively assign workflows to objects.
Can modify workflowIf this option is checked, users in this group can interactively edit existing workflows assigned to objects.
Can add workflow usersIf this option is checked, users in this group can interactively add users to existing signoff workflow stages assigned to objects.
Can modify user signoff typeIf this option is checked, users in this group can change user's review/must signoff states on existing signoff workflow stages assigned to objects.
Can check out/in vaulted filesIf this option is checked, users in this group can Check out and Check in vaulted documents.
Can view private HelpDesk PostsIf this option is checked, users in this group can view posts that they did not create or were not a recipient.
Can import dataIf this option is checked, users in this group can use the Empower Data Importer.
Can access the Toolkit AdministratorIf this option is checked, users in this group can use the Toolkit Administrator.
Can access the CADKit AdministratorIf this option is checked, users in this group can use the CADKit Administrator.
Can modify user Media LinksIf this option is checked, users in this group can edit the Media Links assigned to users.
Can modify associations after releaseIf this option is checked, users in this group can edit the Associations section on Items, Changes, Quality, Vendors, Vendor Items, and Service objects after they are released.
Can complete any taskIf this option is checked, users in this group can mark any task on any object as complete.
Can access Replace User utilityIf this option is checked, users in this group can access the Replace User utility tool.

13. Deleting Objects

OptionDescription
Can delete ItemsIf this option is checked, users in this group can delete Items from the database.
Can delete Changes/ECOsIf this option is checked, users in this group can delete Changes/ECOs from the database.
Can delete Quality/CAPA itemsIf this option is checked, users in this group can delete CAPA objects from the database.
Can delete ProjectsIf this option is checked, users in this group can delete Projects from the database.
Can delete Service ObjectsIf this option is checked, users in this group can delete Service Objects from the database.
Can delete Training ItemsIf this option is checked, users in this group can delete Training Items from the database.
Can delete VendorsIf this option is checked, users in this group can delete Vendors from the database.
Can delete Vendor ItemsIf this option is checked, users in this group can delete Vendor Items from the database.
Can delete HelpDesk TicketsIf this option is checked, users in this group can delete HelpDesk Tickets from the database.

14. Reports

OptionDescription
Can create Database ViewsIf this option is checked, users in this group can create database views using the Empower Reporter.
Can access Reporter: Document PackagerIf this option is checked, users in this group can access the Document Packager in the Empower Reporter.

Field Access Rules

You can define/limit user's access to certain fields/attributes and documents by adding rules to the Field Access Rules section of the permission settings list.

To add an access rule, click the Add button. This will invoke the Add Field Access Rule dialog box.

From the Add Field Access Rule dialog, you can select the object you wish to limit access to.

You can limit the following objects and fields:

ObjectField TypeAccess TypeDescription
[All]ProjectProhibitIf this rule is enabled, users will be prohibited from accessing objects that are assigned to the selected project.
[All]ProjectAllowIf this rule is enabled, users will only be able to access objects that are assigned to the selected project.
[All]Business UnitProhibitIf this rule is enabled, users will be prohibited from accessing objects that are assigned to the selected Business Unit.
[All]Business UnitAllowIf this rule is enabled, users will only be able to access objects that are assigned to the selected Business Unit.
Items/Parts/BOMsTypeProhibitIf this rule is enabled, users will be prohibited from accessing items that are assigned to the selected Type.
Items/Parts/BOMsCategoryProhibitIf this rule is enabled, users will be prohibited from accessing items that are assigned to the selected Category.
Items/Parts/BOMsStatusProhibitIf this rule is enabled, users will be prohibited from accessing items that are assigned to the selected Status.
Items/Parts/BOMsAttributeProhibitIf this rule is enabled, users will be prohibited from accessing items that are assigned to the selected Attribute name and value.
Items/Parts/BOMsRead-Only AttributeProhibitIf this rule is enabled, users will be able to view but not modify the selected attribute.
DocumentsDocument TypeProhibitIf this rule is enabled, users will be prohibited from viewing documents/files assigned to the selected document type.
DocumentsDocument VaultProhibitIf this rule is enabled, users will be prohibited from viewing documents/files assigned to the selected document vault.
DocumentsDocument Type Check-in/outProhibitIf this rule is enabled, users will be prohibited from checking in or checking out documents/files assigned to the selected document type.

Project Access Rules

You can configure users' access to Projects if you are associated with a specific Project name.

You can assign an action of OPEN or SEE for each rule.

ActionDescription
OPENAllow users to open and see specific Projects.
SEEAllow users to see specific Projects in searches, reports, and drop-down lists.
OperatorDescription
INAllow user groups direct access to the specific Projects
NOT INGive users access to all objects except to those specified in the Project Access rule.

You can choose value from the search results.

Business Unit Access Rules

You can configure users' access to objects by Business Unit.

Similar to Project Access Rules, you can assign an action of OPEN or SEE for each rule.

ActionDescription
OPENAllow users to open and see objects associated with the specific Business Unit.
SEEAllow users to see objects with a specific Business Unit.

Tips:
If Project Access Rules and Business Unit Rules contradict each other, then the access rule that gives access takes priority. For example, if the first Business Unit access rule grants the ability to open and see all objects except those with a value of A and B for Business Unit and another Business Unit access rule in the same user group gives the user the ability to see only objects with a Business Unit of A or B, then the users in that user group can see all objects due to the additive nature of access rules. Administrators are responsible for managing and resolving contradicting access rules.

Data Access Policies

Similar to the previous access rules, you can assign Data Access Policies within the Permissions, User Options page of Empower Administrators. Data Access Policies govern access to Items, Changes, and Quality.

Click add to choose policies.

Choose one policy you want to add, then click add.

You can create new Data Access Policies in User Options - Data Access Policies.

Click Add to start creating a new policy

Click Apply to complete the policy duplication process

You can define the Policy Name and Description. You can also choose a policy to copy from in the drop-down menu. Click Add to go to the next step.

Click + to add rules. You can check Enabled to enable this rule.

After adding a rule, you can edit its conditions by clicking its name.

You can see messages if rules are applied.