Privileges

After you have created your new Proficy Portal roles and users, you must configure their privileges. Each role's or user's privileges can be edited by expanding the Roles or Users folder in the tree, selecting a role or user, and configuring its options in the lower pane of the Roles & Users window.

In the bottom pane of the Roles & Users window, you will find the following tabs:

General Tab – View and configure general options, such as name, comment and reserved sessions. See To configure General settings for more information.

Membership Tab – View the users assigned to the selected role, or view the roles the selected user is a member of. To assign a user account to a role, see To assign a user or group to a role.

Applications Tab – Configure the applications and the operations within those applications the selected role or user has access to. See To set application privileges for more information.

Folders Tab – Define the folders or subfolders the role or user has access to. The left-hand pane displays all current folders, while the right-hand pane shows a list of currently shared folders. Refer to the section Securing Folders for more information.

Data Sources Tab – Configure the login credentials the roles will use to access a data source. Refer to the section Securing Data Sources for more information.

The General Tab
Property	Description
Role Domain/Group synchronize rate (hours)	Enter the number of hours between an automatic refresh of role domain/group synchronization. 0 hours indicates automatic refresh is off. This field is available only when the Roles node is selected.
Name	The current user or role name. This field cannot be edited.
Comment	Add any comments about the user or role. Comments are useful for further defining the role's function.
Has reserved session	Specify whether the user or role should have a reserved session or not. For more information, refer to the section Reserving Dedicated Sessions. NOTE: You need to make sure that the number of reserved sessions allowed by Proficy Portal can accommodate the number of users/roles that are set up to have a reserved session. For example, if a user who is configured with this 'Has reserved session' option, but there are no reserved sessions set aside, then the reserved session will not occur. The number of reserved sessions available is set in the Settings & Diagnostics panel. Refer to Configuring Sessions.
Synchronized to Domain/ Group	Specify whether the selected role is set up for synchronization with its associated domain. Refer to Role Domain/Group Synchronization. This field is available only when a role is selected.
Domain	Enter the name of the domain that is set for synchronization with the selected role. This field is available only when a role is selected.
Group	Enter the name of the group that is set for synchronization with the selected role. This field is available only when a role is selected.
Full Name	The selected user's full name. This field is available only when a user is selected.

The Membership Tab
Property	Description
Member of	The role(s) the selected user belongs to. This field is available only when a user is selected.
Members	The users that belong to the selected role. This field is available only when a role is selected.
Comment	Comments about the selected user or role.

The Applications Tab
List Items	Permissions
Administration	Permissions for the Proficy Portal Administration application. You can grant one of two privileges: Run – allows the user (or users belonging to the role) to view the Administration application, but not make changes to it. All – allows the user (or users belonging to the role) full access (view and make changes) to the Administration application. Selecting this option automatically selects the Run option.
Proficy Portal Client	Permissions for the Proficy Portal client. You can grant one or more of the following privileges: Run – allows the user (or users belonging to the role) to run, but not configure displays in the Proficy Portal client. Access Application Preferences – allows the user (or users belonging to the role) to set Application-level preferences. Switch to Configuration – allows the user (or users belonging to the role) to switch to the configuration environment, to edit displays. Save Run-time Configuration – allows the user (or users belonging to the role) to save changes made to a display in the run-time environment. Save Pen Groups – allows the user (or users belonging to the role) to save any changes to the display's pen groups and to create new pen groups. Save Event Groups – allows the user (or users belonging to the role) to save any changes to the display's event groups and to create new event groups. Manage Folders – allows the user (or users belonging to the role) to manage folders in the system tree. Manage Web Links – allows the user (or users belonging to the role) to add, remove, or modify web links in the system tree. Manage WebSources – allows the user (or users belonging to the role) to create, edit, delete, and import WebSources. Without this permission, the user can edit a WebSource from within an associated object's configuration dialog box (web control or hyperlink). Also, without this permission the user will be able to drag and drop Internet Explorer shortcuts; however, they will not be prompted to create WebSources. Allow Export of Data – allows the user (or users belonging to the role) to export data from a Proficy Portal display. In addition to the Export Data to (Remote/Local) menu items, this privilege controls access to the Save As Image, and Copy to Clipboard menu items. Allow Data Writes – Allows user (or users belonging to the role) to write to data sources. Access Datasources From System Tree – allows the user (or users belonging to the role) to access data sources from the system tree. Run-time Object Creation – allows the user (or users belonging to the role) to create objects in the run-time environment. All – allows the user (or users belonging to the role) to access all options within the Proficy Portal client. Selecting this option automatically selects all the options.
Statement Builder	Permissions for the Statement Builder. You can grant one or more of the following privileges: Run - allows the user (or users belonging to the role) to view, but not make changes in the Statement Builder. All - gives the user (or users belonging to the role) full access (view and make changes) to the Statement Builder. Selecting this option automatically selects the Run option.

Privileges

See Also