Assigning User Access Rights

Once you've created a User ID, you can give that user rights to access the appropriate features of your office's Intranet Quorum system. Assignment can be made from within each User ID or by copying access rights from a single user-id to multiple user-ids using Profiles.

Access Profiles

You assign access rights to users through access Profiles. Each Profile has rights to open certain IQ modules and perform selected functions. IQ provides three Profiles with pre-set security levels - Full, Standard and Restricted that can be modified for each IQ module. Profiles for all of the modules can be copied to one or more selected users or assigned individually from within each User ID.

Note: Profiles should be your primary means of managing all user security.  Customize the Profiles provided to meet as much of your security needs as possible and use Overrides for specific users only when absolutely necessary.

To assign access rights to a user:

  1. Add or find the User record.

  2. Click the Security tab on the New User or User Record page.

  3. Select the desired access profile in the drop-down provided for each module.

  4. Select the Save and Close action.

To copy access rights to one or more users:

  1. Search for and select the user(s) that you want to copy the access profiles to.

  2. Select the Copy Profile action.

  3. Type the user name in the Copy From User field or click the lookup icon and select the user from the list.

  4. Type the module name in the Exception Modules field or click the lookup icon and select one or more modules from the list.

  5. Click the Copy button.

To mass update a security lock for one or more users:

  1. Search for and select the user(s) that you want to mass update security locks.

  2. Select the Change Security action. IQ displays the Mass Update User Security Lock dialog.

  3. Click in the Security Lock field and select the specific security lock (i.e. ADMIN - 106 - ChangePassword) to be updated.

  4. Click in the Permission field and select Granted or Denied

  5. Click the Update button. IQ displays the message "Security Lock updated for X user(s)".

  6. Click the OK button to close the message dialog.

 

Overriding Access Rights

You can assign access rights on the individual level in special cases, when it's necessary to either add to or override the permissions the user has through the assigned profile.

For example, a user with a Standard access profile may need to perform a specific function that’s Denied access. That user can be granted individual access to that function, rather than being assigned the Full access profile, which Grants access to that function, but that also includes other functions that the staff member doesn't need to have access to.

To override access rights for a user:

  1. Add or find the User ID.

  2. On the New User or User Record page, click the Security tab.

  3. Click the + icon next to the module name to display specific settings for that module.

  4. Click in the Permission field next to the security lock and select the desired setting.

  5. Select the Save and Close action.

Note: Changes to individual security do not take effect for users who are currently logged on. They must log off and back on in order for these changes to take effect.

Overrides remain in effect for the user even when a new Profile is applied. Detailed settings for each Profile will not be refreshed when they are initially selected. Save and Close out of the records and reopen it to see a new user's active security before applying overrides.

Security Locks

Profiles are configured using security locks. Locks are used to control anything from access to an entire module to the ability to perform a specific function within a module. Locks are identified by numbers, with rough groupings by module.

To view a listing of all locks for all modules select the Security Locks action on the Profiles page. You can also view security locks from the Users Search Results page. Note: You will not see this action unless you have access to this function. The Security Locks page contains the lock number, module, lock name and description, status and the number of IQ users who have been granted access to each lock. When you click the link in the Granted column, IQ displays the list of the users in the Search Results grid so that you can review or update the records.