<?xml version="1.0" encoding="utf-8"?>
<ManualTopic ID="/baanerp/tt/onlinemanual/usr_create_roles_and_authorizations" xml:lang="en">
	<Header>
		<Title xmlns:HTML="http://www.w3.org/TR/REC-html40">To create roles and authorizations</Title>
		<Keyword ContextSensitive="No"><Level1>User management</Level1>
			<Level2>create roles and authorizations</Level2>
		</Keyword>
		<Keyword ContextSensitive="No"><Level1>Authorizations</Level1>
		</Keyword>
		<Keyword ContextSensitive="No"><Level1>Authorization Management System</Level1>
		</Keyword>
		<Keyword ContextSensitive="No"><Level1>AMS</Level1>
		</Keyword>
		<Keyword ContextSensitive="No"><Level1>Roles</Level1>
		</Keyword>
	</Header>
	<GeneralSection><SectionTitle>Procedure aim</SectionTitle>
		<Paragraph class="Default">Initially, normal users do not have any authorizations for ERP LN. Therefore, you must define the role-dependent authorizations for their function. This section provides information and instructions on how you can use ERP LN ’s Authorization Management System (AMS) to create roles for normal users and the associated role-dependent authorizations.</Paragraph>
		<List><ListIntro>You can use the authorization management system to:</ListIntro>
			<ListItem>Create roles and authorizations.</ListItem>
			<ListItem>Create templates.</ListItem>
		</List>
	</GeneralSection>
	<GeneralSection><SectionTitle>Procedure result and prerequisites</SectionTitle>
		<Tip><SectionTitle>Result</SectionTitle>
			<Paragraph class="Default">The authorization management procedures create a user environment with clearly defined tasks and duties for the normal users in a company.</Paragraph>
		</Tip>
		<Tip><SectionTitle>Prerequisites</SectionTitle>
			<List><ListIntro>The following prerequisites are required to create roles and authorizations:</ListIntro>
				<ListItem>The functions and associated tasks are clearly defined for the employees.</ListItem>
				<ListItem>The software components to which access is required for the functions are clearly defined.</ListItem>
			</List>
			<Paragraph class="Default">The following case study explains how to create roles and authorizations and helps you understand the functions and features of ERP LN ’s AMS. The case study also describes the role concept in the context of a real situation.</Paragraph>
			<Paragraph class="Default">The case study describes authorization management at Global Enterprises, which has offices in The Netherlands and the United States. These offices are designated as the Holland Company and the USA Company. Employees of Global Enterprises must be able to use the company’s data dictionary and the databases of both offices.</Paragraph>
			<Paragraph class="Default">For detailed instructions on how to enter data in the described sessions, refer to the online help of the sessions</Paragraph>
		</Tip>
	</GeneralSection>
	<GeneralSection><SectionTitle>Procedure introduction</SectionTitle>
		<Paragraph class="Default">The authorization management procedure is split up into several smaller procedures, which the system administrator can use as stand-alone procedures to maintain the authorizations at the various levels. The additional roles, which define additional authorizations on top of the standard role, can also be created with this procedure.</Paragraph>
		<GeneralSection><SectionTitle>Case study - Authorization management at Global Enterprises</SectionTitle>
			<Paragraph class="Default">The system administration department at Global Enterprises is responsible for management of the employees’ authorizations. Authorization management involves the definition of the role-dependent authorizations for the employees in roles. To ensure that the user authorizations are easily maintainable, the system administrator defines one standard role with the most basic authorization, as well as additional roles for specific tasks.</Paragraph>
			<Paragraph class="Default">The authorizations defined in the standard role are required by the users to use Global Enterprises’ general data dictionary and the data of the offices in The Netherlands and the USA.</Paragraph>
			<Paragraph class="Default">In the standard role, the system administrator defines the session authorizations and library authorizations at the various levels. In addition, the system administrator makes sure that the users cannot change their own user data.</Paragraph>
		</GeneralSection>
	</GeneralSection>
	<GeneralSection><SectionTitle>Procedure summary</SectionTitle>
		<ProcedureList><ListIntro>The following list shows the procedure steps and the corresponding sessions.</ListIntro>
			<ListItem>Take inventory of the roles in your organization</ListItem>
			<ListItem>Define the authorizations per role - <Link href="/baanerp/tt/ams/ttams2100m000" role="session">Role Data (ttams2100m000)</Link> <List><ListIntro>Via the <GUIRef href="" role="menu">Specific</GUIRef> menu in this session, you can:</ListIntro>
					<ListItem>define session authorizations</ListItem>
					<ListItem>define database authorizations (table and table field authorizations)</ListItem>
					<ListItem>define library authorizations</ListItem>
					<ListItem>Optionally: define authorizations in sub-roles and link these sub-roles to the main role - <Link href="/baanerp/tt/ams/ttams2101m000" role="session">Subroles by Role (ttams2101m000)</Link>
					</ListItem>
				</List> For details on the authorization types, refer to the <Link href="/baanerp/tt/onlinemanual/usr_role_dependent_authorizations" role="manual">Role-dependent authorizations</Link> section.</ListItem>
			<ListItem>Convert the user file to the runtime data dictionary (ttams2200m000)</ListItem>
			<ListItem>The relevant users must log off and log on again.</ListItem>
		</ProcedureList>
	</GeneralSection>
	<RelatedTopics><SectionTitle>
                              Related topics
                           </SectionTitle>
		<RelTopic><Link href="/baanerp/tt/onlinemanual/usr_create_roles_and_authorizations_details" role="manual">To create roles and authorizations - details</Link>
		</RelTopic>
	</RelatedTopics>
</ManualTopic>
