<?xml version="1.0" encoding="utf-8"?>
<ManualTopic ID="/baanerp/tt/onlinemanual/000052" xml:lang="en">
	<Header>
		<Title xmlns:HTML="http://www.w3.org/TR/REC-html40">To define authorizations</Title>
		<Keyword ContextSensitive="No"><Level1>User authorizations</Level1>
		</Keyword>
		<Keyword ContextSensitive="No"><Level1>Roles</Level1>
		</Keyword>
	</Header>
	<GeneralSection><Paragraph class="Default">The restricted authorizations are defined for normal users for the use of <GUIRef href="/baanerp/tt" role="package">Tools</GUIRef> sessions, databases, and libraries. Super users do not have any restictions. In addition, authorizations for the use of data in different companies are defined. The result of this procedure is that users have authorizations relevant to the software and data that they need.</Paragraph>
		<Paragraph class="Default">The authorizations are defined by using the Authorization Management System (AMS), which is an integrated part of the User Management module.</Paragraph>
		<List><ListIntro>The system manager can use the AMS module to:</ListIntro>
			<ListItem>Define <Link href="/baanerp/tt/glossary/glossary#000017" role="glossary">roles</Link> and subroles.</ListItem>
			<ListItem>Connect a user to roles.</ListItem>
			<ListItem>Define the various types of authorizations, for example, <Link href="/baanerp/tt/glossary/glossary#100000" role="glossary">session authorizations</Link>, <Link href="/baanerp/tt/glossary/glossary#100002" role="glossary">database</Link> authorizations, text group authorizations, and <Link href="/baanerp/tt/glossary/glossary#100003" role="glossary">library</Link> authorizations.</ListItem>
			<ListItem>Connect the various authorizations to roles.</ListItem>
			<ListItem>Group some of the user data by using <Link href="/baanerp/tt/glossary/glossary#000018" role="glossary">templates</Link>.</ListItem>
		</List>
		<Paragraph class="Default">This makes it possible to define the authorizations for a group of related users that are identified by their role in an organization. The users can be connected to more than one role and a role can have subroles. For example, the manager of a department must have the same authorizations as his employees, but also needs additional authorizations.</Paragraph>
		<Paragraph class="Default">The roles are defined in the <GUIRef href="/baanerp/tt/ams/ttams2100m000" role="session">Role Data (ttams2100m000)</GUIRef> session. You can define the several authorizations by using the appropriate commands on the <GUIRef href="" role="menu">Specific</GUIRef> menu in this session.</Paragraph>
		<Paragraph class="Default">If the mandatory data is entered, a conversion to the run-time <Link href="/baanerp/tt/glossary/glossary#100005" role="glossary">data dictionary</Link> must take place to activate the new or revised authorizations.</Paragraph>
	</GeneralSection>
	<RelatedTopics><SectionTitle>
                              Related topics
                           </SectionTitle>
		<RelTopic><Link href="/baanerp/tt/onlinemanual/000051" role="manual">To create an ERP LN user</Link>
		</RelTopic>
	</RelatedTopics>
</ManualTopic>
