<?xml version="1.0" encoding="utf-8"?>
<Session ID="/baanerp/tt/aad/ttaad4162s000" xml:lang="en">
	<Header>
		<Title xmlns:HTML="http://www.w3.org/TR/REC-html40">Audit Authorizations (ttaad4162s000)</Title>
	</Header>
	<HelpTopic xml:lang="en"><AimSection><Paragraph class="Default"> 
                                 Use this session to assign various authorization levels to a user.</Paragraph>
		</AimSection>
		<Note><SectionTitle>
                                 Note
                              </SectionTitle>
			<List><ListIntro>This session can only be run by the following administrative user accounts</ListIntro>
				<ListItem>"root" on a Unix platform</ListItem>
				<ListItem>"baan" on a Windows 2000 platform</ListItem>
				<ListItem>"QSECOFR" on an AS400/OS400 platform</ListItem>
			</List>
		</Note>
		<GeneralSection><Paragraph class="Default">Audit authorizations can be defined for normal users and for super users as well. By default, a super user has no audit authorization.</Paragraph>
			<Paragraph class="Default">You must define audit authorizations only for users that need to perform actions, such as print or purge, on audit files.</Paragraph>
			<List><ListIntro>You can select different check boxes to indicate which actions the user is allowed to perform on the audit files of a table:</ListIntro>
				<ListItem>The <GUIRef href="/baanerp/tt/aad/ttaad4162s000#prnt" role="manual">Print</GUIRef> check box</ListItem>
				<ListItem>The <GUIRef href="/baanerp/tt/aad/ttaad4162s000#prge" role="manual">Purge</GUIRef> check box</ListItem>
				<ListItem>The <GUIRef href="/baanerp/tt/aad/ttaad4162s000#mntn" role="manual">Maintain</GUIRef> check box</ListItem>
			</List>
			<Note><SectionTitle>
                                    Note
                                 </SectionTitle>
				<Paragraph class="Default">These authorization levels are overruled by the security embedded in the audit files, which is defined in the <GUIRef href="/baanerp/tt/aud/ttaud3137m000" role="session">Audit Trail Security (ttaud3137m000)</GUIRef> session: users can only perform the actions they are authorized for, if these actions are allowed in the audit trail security settings.</Paragraph>
			</Note>
			<ExampleSection><SectionTitle>
                                    Example
                                 </SectionTitle>
				<Paragraph class="Default">A user is authorized to print the sequence files of all tables. In the audit trail security settings, printing is prohibited for table tccom000. As a result the user can not print the sequence files of this table.</Paragraph>
			</ExampleSection>
		</GeneralSection>
		<RelatedTopics><SectionTitle>
                                 Related topics
                              </SectionTitle>
			<RelTopic><Link href="/baanerp/basictasks/000006" role="manual">To use From and To fields</Link>
			</RelTopic>
		</RelatedTopics>
	</HelpTopic>
	<Fields><FieldHelp ID="ttaad462.user"><Header>
				<Title xmlns:HTML="http://www.w3.org/TR/REC-html40">User</Title>
			</Header>
			<FuncDesc>The user that you want to authorize for the sessions concerning audit.</FuncDesc>
		</FieldHelp>
		<FieldHelp ID="cpac"><Header>
				<Title xmlns:HTML="http://www.w3.org/TR/REC-html40">Package</Title>
			</Header>
			<FuncDesc>Specify how authorizations for <Link href="/baanerp/tt/glossary/glossary#000000000000008" role="glossary">packages</Link> will be assigned. Select one of the following from the list:</FuncDesc>
			<SimpleSection><List><ListItem><GUIRef href="/baanerp/tt/domains/aad.action#all" role="option">All</GUIRef>. To assign authorization for audit files in all packages.</ListItem>
					<ListItem><GUIRef href="/baanerp/tt/domains/aad.action#spec" role="option">Specified</GUIRef>. To assign authorization for audit files in one or more individual packages, e.g. "tc", "tp" and "wh". For each package, you must create a separate authorization record for the user and enter the desired package in the <GUIRef href="/baanerp/tt/aad/ttaad4162s000#ttaad462.cpac.f" role="manual">Package (From)</GUIRef> field.</ListItem>
					<ListItem><GUIRef href="/baanerp/tt/domains/aad.action#range" role="option">Range</GUIRef>. To assign authorization for audit files in a range of packages, e.g. "tc" - "tp". The range must be entered in the next fields.</ListItem>
				</List>
			</SimpleSection>
			<Note><SectionTitle>
                                    Note
                                 </SectionTitle>
				<Paragraph class="Default"><GUIRef href="/baanerp/tt/domains/aad.action#spec" role="option">Specified</GUIRef> authorizations take precedence over <GUIRef href="/baanerp/tt/domains/aad.action#range" role="option">Range</GUIRef> authorizations. You can use them to define exceptions to <GUIRef href="/baanerp/tt/domains/aad.action#range" role="option">Range</GUIRef> authorizations. For example: assume that user "Peter" has the following audit authorizations.</Paragraph>
				<TABLE border="1" borderstyle="default" space-and-orientation="indented-estimated"><THEAD><TR><TD rowspan="1" colspan="1">User</TD>
							<TD rowspan="1" colspan="1">Package</TD>
							<TD rowspan="1" colspan="1">Module</TD>
							<TD rowspan="1" colspan="1">Table</TD>
							<TD rowspan="1" colspan="1">Company</TD>
							<TD rowspan="1" colspan="1">Security</TD>
						</TR>
					</THEAD>
					<TBODY><TR><TD rowspan="1" colspan="1">Peter</TD>
							<TD rowspan="1" colspan="1">Range, tc-tp</TD>
							<TD rowspan="1" colspan="1">All</TD>
							<TD rowspan="1" colspan="1">All</TD>
							<TD rowspan="1" colspan="1">All</TD>
							<TD rowspan="1" colspan="1">Print</TD>
						</TR>
					</TBODY>
				</TABLE>
				<Paragraph class="Default">Now you want to make an exception: user "peter" must be able to print <Emphasis>and purge</Emphasis> audit files belonging to package "tf". Add the following record:</Paragraph>
				<TABLE border="1" borderstyle="default" space-and-orientation="indented-estimated"><THEAD><TR><TD rowspan="1" colspan="1">User</TD>
							<TD rowspan="1" colspan="1">Package</TD>
							<TD rowspan="1" colspan="1">Module</TD>
							<TD rowspan="1" colspan="1">Table</TD>
							<TD rowspan="1" colspan="1">Company</TD>
							<TD rowspan="1" colspan="1">Security</TD>
						</TR>
					</THEAD>
					<TBODY><TR><TD rowspan="1" colspan="1">Peter</TD>
							<TD rowspan="1" colspan="1">Specified, tf</TD>
							<TD rowspan="1" colspan="1">All</TD>
							<TD rowspan="1" colspan="1">All</TD>
							<TD rowspan="1" colspan="1">All</TD>
							<TD rowspan="1" colspan="1">Print + Purge</TD>
						</TR>
					</TBODY>
				</TABLE>
			</Note>
		</FieldHelp>
		<FieldHelp ID="ttaad462.cpac.f"><Header>
				<Title xmlns:HTML="http://www.w3.org/TR/REC-html40">Package (From)</Title>
			</Header>
			<FuncDesc>This field contains one of the following:</FuncDesc>
			<SimpleSection><List><ListItem>The individual <Link href="/baanerp/tt/glossary/glossary#000000000000008" role="glossary">package</Link> for whose audit files the user is authorized ( <GUIRef href="/baanerp/tt/domains/aad.action#spec" role="option">Specified</GUIRef> authorizations).</ListItem>
					<ListItem>The first package in the range for which the user is authorized ( <GUIRef href="/baanerp/tt/domains/aad.action#range" role="option">Range</GUIRef> authorizations).</ListItem>
				</List>
			</SimpleSection>
		</FieldHelp>
		<FieldHelp ID="ttaad462.cpac.t"><Header>
				<Title xmlns:HTML="http://www.w3.org/TR/REC-html40">Package (To)</Title>
			</Header>
			<FuncDesc>The last <Link href="/baanerp/tt/glossary/glossary#000000000000008" role="glossary">package</Link> in the range for which the user is authorized ( <GUIRef href="/baanerp/tt/domains/aad.action#range" role="option">Range</GUIRef> authorizations).</FuncDesc>
		</FieldHelp>
		<FieldHelp ID="cmod"><Header>
				<Title xmlns:HTML="http://www.w3.org/TR/REC-html40">Module</Title>
			</Header>
			<FuncDesc>Specify how authorizations for <Link href="/baanerp/tt/glossary/glossary#100004" role="glossary">modules</Link> will be assigned. Select one of the following from the list:</FuncDesc>
			<SimpleSection><List><ListItem><GUIRef href="/baanerp/tt/domains/aad.action#all" role="option">All</GUIRef>. To assign authorization for audit files in all modules.</ListItem>
					<ListItem><GUIRef href="/baanerp/tt/domains/aad.action#spec" role="option">Specified</GUIRef>. To assign authorization for audit files in one or more individual modules, e.g. "com", "ibd" and "mcs". For each module, you must create a separate authorization record for the user and enter the desired module in the <GUIRef href="/baanerp/tt/aad/ttaad4162s000#ttaad462.cmod.f" role="manual">Module (From)</GUIRef> field.</ListItem>
					<ListItem><GUIRef href="/baanerp/tt/domains/aad.action#range" role="option">Range</GUIRef>. To assign authorization for audit files in a range of modules, e.g. "com" - "mcs". The range must be entered in the next fields.</ListItem>
				</List>
			</SimpleSection>
			<Note><SectionTitle>
                                    Note
                                 </SectionTitle>
				<Paragraph class="Default"><GUIRef href="/baanerp/tt/domains/aad.action#spec" role="option">Specified</GUIRef> authorizations take precedence over <GUIRef href="/baanerp/tt/domains/aad.action#range" role="option">Range</GUIRef> authorizations. You can use them to define exceptions to <GUIRef href="/baanerp/tt/domains/aad.action#range" role="option">Range</GUIRef> authorizations.</Paragraph>
			</Note>
		</FieldHelp>
		<FieldHelp ID="ttaad462.cmod.f"><Header>
				<Title xmlns:HTML="http://www.w3.org/TR/REC-html40">Module (From)</Title>
			</Header>
			<FuncDesc>This field contains one of the following:</FuncDesc>
			<SimpleSection><List><ListItem>The individual <Link href="/baanerp/tt/glossary/glossary#100004" role="glossary">module</Link> for whose audit files the user is authorized ( <GUIRef href="/baanerp/tt/domains/aad.action#spec" role="option">Specified</GUIRef> authorizations).</ListItem>
					<ListItem>The first module in the range for which the user is authorized ( <GUIRef href="/baanerp/tt/domains/aad.action#range" role="option">Range</GUIRef> authorizations).</ListItem>
				</List>
			</SimpleSection>
		</FieldHelp>
		<FieldHelp ID="ttaad462.cmod.t"><Header>
				<Title xmlns:HTML="http://www.w3.org/TR/REC-html40">Module (To)</Title>
			</Header>
			<FuncDesc>The last <Link href="/baanerp/tt/glossary/glossary#100004" role="glossary">module</Link> in the range for which the user is authorized ( <GUIRef href="/baanerp/tt/domains/aad.action#range" role="option">Range</GUIRef> authorizations).</FuncDesc>
		</FieldHelp>
		<FieldHelp ID="tabl"><Header>
				<Title xmlns:HTML="http://www.w3.org/TR/REC-html40">Table</Title>
			</Header>
			<FuncDesc>Specify how authorizations for <Link href="/baanerp/tt/glossary/glossary#table.tt" role="glossary">tables</Link> will be assigned. Select one of the following from the list:</FuncDesc>
			<SimpleSection><List><ListItem><GUIRef href="/baanerp/tt/domains/aad.action#all" role="option">All</GUIRef>. To assign authorization for audit files belonging to all tables.</ListItem>
					<ListItem><GUIRef href="/baanerp/tt/domains/aad.action#spec" role="option">Specified</GUIRef>. To assign authorization for audit files belonging to one or more individual tables. For each table, you must create a separate authorization record for the user and enter the desired table in the <GUIRef href="/baanerp/tt/aad/ttaad4162s000#ttaad462.tabl.f" role="manual">Table (From)</GUIRef> field.</ListItem>
					<ListItem><GUIRef href="/baanerp/tt/domains/aad.action#range" role="option">Range</GUIRef>. To assign authorization for audit files belonging to a range of tables. The range must be entered in the next fields.</ListItem>
				</List>
			</SimpleSection>
			<Note><SectionTitle>
                                    Note
                                 </SectionTitle>
				<Paragraph class="Default"><GUIRef href="/baanerp/tt/domains/aad.action#spec" role="option">Specified</GUIRef> authorizations take precedence over <GUIRef href="/baanerp/tt/domains/aad.action#range" role="option">Range</GUIRef> authorizations. You can use them to define exceptions to <GUIRef href="/baanerp/tt/domains/aad.action#range" role="option">Range</GUIRef> authorizations.</Paragraph>
			</Note>
		</FieldHelp>
		<FieldHelp ID="ttaad462.tabl.f"><Header>
				<Title xmlns:HTML="http://www.w3.org/TR/REC-html40">Table (From)</Title>
			</Header>
			<FuncDesc>This field contains one of the following:</FuncDesc>
			<SimpleSection><List><ListItem>The individual <Link href="/baanerp/tt/glossary/glossary#table.tt" role="glossary">table</Link> for whose audit files the user is authorized ( <GUIRef href="/baanerp/tt/domains/aad.action#spec" role="option">Specified</GUIRef> authorizations).</ListItem>
					<ListItem>The first table in the range for which the user is authorized ( <GUIRef href="/baanerp/tt/domains/aad.action#range" role="option">Range</GUIRef> authorizations).</ListItem>
				</List>
			</SimpleSection>
		</FieldHelp>
		<FieldHelp ID="ttaad462.tabl.t"><Header>
				<Title xmlns:HTML="http://www.w3.org/TR/REC-html40">Table (To)</Title>
			</Header>
			<FuncDesc>The last <Link href="/baanerp/tt/glossary/glossary#table.tt" role="glossary">table</Link> in the range for which the user is authorized ( <GUIRef href="/baanerp/tt/domains/aad.action#range" role="option">Range</GUIRef> authorizations).</FuncDesc>
		</FieldHelp>
		<FieldHelp ID="comp"><Header>
				<Title xmlns:HTML="http://www.w3.org/TR/REC-html40">Company</Title>
			</Header>
			<FuncDesc>Specify how authorizations for <Link href="/baanerp/tt/glossary/glossary#000023" role="glossary">companies</Link> will be assigned. Select one of the following from the list:</FuncDesc>
			<SimpleSection><List><ListItem><GUIRef href="/baanerp/tt/domains/aad.action#all" role="option">All</GUIRef>. To assign authorization for audit files belonging to all companies.</ListItem>
					<ListItem><GUIRef href="/baanerp/tt/domains/aad.action#spec" role="option">Specified</GUIRef>. To assign authorization for audit files belonging to one or more individual companies. For each company, you must create a separate authorization record for the user and enter the desired company in the <GUIRef href="/baanerp/tt/aad/ttaad4162s000#ttaad462.comp.f" role="manual">Company (From)</GUIRef> field.</ListItem>
					<ListItem><GUIRef href="/baanerp/tt/domains/aad.action#range" role="option">Range</GUIRef>. To assign authorization for audit files belonging to a range of companies. The range must be entered in the next fields.</ListItem>
				</List>
			</SimpleSection>
			<Note><SectionTitle>
                                    Note
                                 </SectionTitle>
				<Paragraph class="Default"><GUIRef href="/baanerp/tt/domains/aad.action#spec" role="option">Specified</GUIRef> authorizations take precedence over <GUIRef href="/baanerp/tt/domains/aad.action#range" role="option">Range</GUIRef> authorizations. You can use them to define exceptions to <GUIRef href="/baanerp/tt/domains/aad.action#range" role="option">Range</GUIRef> authorizations.</Paragraph>
			</Note>
		</FieldHelp>
		<FieldHelp ID="ttaad462.comp.f"><Header>
				<Title xmlns:HTML="http://www.w3.org/TR/REC-html40">Company (From)</Title>
			</Header>
			<FuncDesc>This field contains one of the following:</FuncDesc>
			<SimpleSection><List><ListItem>The individual <Link href="/baanerp/tt/glossary/glossary#000023" role="glossary">company</Link> for whose audit files the user is authorized ( <GUIRef href="/baanerp/tt/domains/aad.action#spec" role="option">Specified</GUIRef> authorizations).</ListItem>
					<ListItem>The first company in the range for which the user is authorized ( <GUIRef href="/baanerp/tt/domains/aad.action#range" role="option">Range</GUIRef> authorizations).</ListItem>
				</List>
			</SimpleSection>
		</FieldHelp>
		<FieldHelp ID="ttaad462.comp.t"><Header>
				<Title xmlns:HTML="http://www.w3.org/TR/REC-html40">Company (To)</Title>
			</Header>
			<FuncDesc>The last <Link href="/baanerp/tt/glossary/glossary#000023" role="glossary">company</Link> in the range for which the user is authorized ( <GUIRef href="/baanerp/tt/domains/aad.action#range" role="option">Range</GUIRef> authorizations).</FuncDesc>
		</FieldHelp>
		<FieldHelp ID="prnt"><Header>
				<Title xmlns:HTML="http://www.w3.org/TR/REC-html40">Print</Title>
			</Header>
			<FuncDesc> 
                                 If this check box is selected, the user can</FuncDesc>
			<SimpleSection><List><ListItem>print the content of sequence files in the <GUIRef href="/baanerp/tt/aad/ttaad4461m000" role="session">Print Range of Audit Files (ttaad4461m000)</GUIRef> and the <GUIRef href="/baanerp/tt/aad/ttaad4463m000" role="session">Print Range of Audit Files (Multi Lines) (ttaad4463m000)</GUIRef> sessions.</ListItem>
					<ListItem>display technical information on audit sequences, such as maximum file size and termination status, in the <GUIRef href="/baanerp/tt/aad/ttaad4560s000" role="session">Display Audit Sequences (ttaad4560s000)</GUIRef> session.</ListItem>
				</List>
			</SimpleSection>
		</FieldHelp>
		<FieldHelp ID="prge"><Header>
				<Title xmlns:HTML="http://www.w3.org/TR/REC-html40">Purge</Title>
			</Header>
			<FuncDesc> 
                                 If this check box is selected, the user can purge audit-sequence files in the <GUIRef href="/baanerp/tt/aad/ttaad4261m000" role="session">Purge Audit Files (ttaad4261m000)</GUIRef> session.</FuncDesc>
		</FieldHelp>
		<FieldHelp ID="mntn"><Header>
				<Title xmlns:HTML="http://www.w3.org/TR/REC-html40">Maintain</Title>
			</Header>
			<FuncDesc> 
                                 If this check box is selected, the user can terminate open audit-sequence files in the <GUIRef href="/baanerp/tt/aad/ttaad4560s000" role="session">Display Audit Sequences (ttaad4560s000)</GUIRef> session.</FuncDesc>
		</FieldHelp>
	</Fields>
</Session>
