<?xml version="1.0" encoding="utf-8"?>
<ManualTopic ID="/baanerp/dm/admin/ad000220" xml:lang="en">
   <Header>
      <Title>User Roles</Title>
      <Keyword type="header" order="d1e250099">
         <Level1>User roles</Level1>
      </Keyword>
   </Header>
   <GeneralSection>
      <Paragraph>The ODM administrator is responsible for creating Object Data
		Management roles and for assigning these roles to users.</Paragraph>
   </GeneralSection>
   <GeneralSection>
      <SectionTitle>To maintain the list of ODM user roles</SectionTitle>
      <Keyword type="section" order="d1e250108">
         <Level1>User roles</Level1>
         <Level2>maintain list</Level2>
      </Keyword>
      <Paragraph>To maintain the list of Object Data Management user roles, on
		the <GUIRef href="" role="manual">Object Data Management</GUIRef> menu, double-click <GUIRef>
            <GUIRef href="" role="manual">ODM Configuration</GUIRef> &gt;   &gt; <GUIRef href="" role="manual">Authorizations</GUIRef> &gt;   &gt; <GUIRef href="" role="manual">Roles</GUIRef>
         </GUIRef>. The <GUIRef href="/baanerp/tc/ppl/tcppl0160m000" role="session">Roles (tcppl0160m000)</GUIRef> session appears with the list of all roles already
		defined:</Paragraph>
      <Figure space-and-orientation="indented-estimated">
         <HTML:IMG xmlns:HTML="http://www.w3.org/TR/REC-html40" height="187" width="496"
                   SRC="images/tr_screen_ad000220_1.png"
                   alt="[...]"/>
      </Figure>
      <Paragraph>Roles with a high authorization role have unrestricted access to
		all objects in ODM. Only LN super users have the authorizations to make or create a
		high authorization role and to assign objects and their associated actions to
		this high authorization role.</Paragraph>
      <ProcedureList>
         <ListIntro>To add the new role in the <GUIRef href="/baanerp/tc/ppl/tcppl0160m000" role="session">Roles (tcppl0160m000)</GUIRef> session, take the following steps:</ListIntro>
         <ListItem>Click <GUIRef href="" role="manual">New</GUIRef> on the <GUIRef href="" role="manual">File</GUIRef> menu. A
		  new record appears.</ListItem>
         <ListItem>Enter a name for the new role, and optionally, a
		  description.</ListItem>
      </ProcedureList>
   </GeneralSection>
   <GeneralSection>
      <SectionTitle>To assign roles to users</SectionTitle>
      <Keyword type="section" order="d1e250154">
         <Level1>User roles</Level1>
         <Level2>assign</Level2>
      </Keyword>
      <Keyword type="section" order="d1e250159">
         <Level1>Roles</Level1>
         <Level2>assign to users</Level2>
      </Keyword>
      <Paragraph>To assign roles to users, on the <GUIRef href="" role="manual">Object Data Management</GUIRef> menu, double-click <GUIRef>
            <GUIRef href="" role="manual">ODM Configuration</GUIRef> &gt;   &gt; <GUIRef href="" role="manual">Authorizations</GUIRef> &gt;   &gt; <GUIRef href="" role="manual">Roles by Employee</GUIRef>
         </GUIRef>.</Paragraph>
      <Paragraph>The <GUIRef href="/baanerp/tc/ppl/tcppl0170m000" role="session">Roles by Employee (tcppl0170m000)</GUIRef> session appears which
		provides the list of all roles that are assigned to the user whose employee
		code appears in the upper part of the session:</Paragraph>
      <Figure space-and-orientation="indented-estimated">
         <HTML:IMG xmlns:HTML="http://www.w3.org/TR/REC-html40" height="194" width="539"
                   SRC="images/tr_screen_ad000220_2.png"
                   alt="[...]"/>
      </Figure>
      <ProcedureList>
         <ListIntro>To assign the additional role to the displayed employee, take
		  the following steps:</ListIntro>
         <ListItem>In the <GUIRef href="/baanerp/tc/ppl/tcppl0170m000" role="session">Roles by Employee (tcppl0170m000)</GUIRef> session, on the <GUIRef href="" role="manual">File</GUIRef> menu, click <GUIRef href="" role="manual">New</GUIRef>. A new record appears.</ListItem>
         <ListItem>Use the browse arrow to open the <GUIRef href="/baanerp/tc/ppl/tcppl0160m000" role="session">Roles (tcppl0160m000)</GUIRef> session and either select an existing role or create a
		  new role. Only LN super users have the authorizations to add or remove high
		  authorization roles.</ListItem>
         <ListItem>List and assign roles for a separate employee: in the <GUIRef href="/baanerp/tc/ppl/tcppl0170m000" role="session">Roles by Employee (tcppl0170m000)</GUIRef> session, click <GUIRef href="" role="manual">Next Group</GUIRef> and <GUIRef href="" role="manual">Previous Group</GUIRef>, or click <GUIRef href="" role="manual">Find</GUIRef> to locate the
		  required employee.</ListItem>
         <ListItem>Assign roles to an employee to whom no roles have been
		  assigned: click <GUIRef href="" role="manual">New Group</GUIRef> in the <GUIRef href="/baanerp/tc/ppl/tcppl0170m000" role="session">Roles by Employee (tcppl0170m000)</GUIRef> session, and click the browse arrow to select the
		  required employee.</ListItem>
      </ProcedureList>
   </GeneralSection>
</ManualTopic>