Adbase Privileges/Permissions. best practices

Size: px

Start display at page:

Download "Adbase Privileges/Permissions. best practices"

Sharon Jones
6 years ago
Views:

1 best practices

2 This is coming right from the System Admin User Privilege Guide 2017 iconnectsolutions Conference NEWSCYCLE SOLUTIONS USER GROUP 2

3 - At the Star Tribune, we started out with a relatively small number of groups, to make it easier on our security team when setting up users. The main groups we had were: Background Process ** Contract Admin Finance Manager *** Finance User *** IT User LockAdmin Production User ** Sales Manager * Sales Rep * Sales Support * Security Admin System Admin * Sales/Order Groups ** Medialink/PGL *** Finance 2017 iconnectsolutions Conference NEWSCYCLE SOLUTIONS USER GROUP 3

4 2017 iconnectsolutions Conference NEWSCYCLE SOLUTIONS USER GROUP 4

5 2017 iconnectsolutions Conference NEWSCYCLE SOLUTIONS USER GROUP 5

6 ! We set up our Access List names differently than what you see in the book.! I ll show a snippet on the next screens, but basically the book shows an Access List named: Sys Admin.! Multiple Application Functions are then assigned to the same Access List (Sys Admin or SalesLink)! What we did is create a separate Access List name for each function we then assigned those Access Lists to different groups iconnectsolutions Conference NEWSCYCLE SOLUTIONS USER GROUP 6

7 This is from the manual 2017 iconnectsolutions Conference NEWSCYCLE SOLUTIONS USER GROUP 7

8 We did ours a little different. You can see the different Access list names iconnectsolutions Conference NEWSCYCLE SOLUTIONS USER GROUP 8

9 ! If you are going to set up the access lists as we did, Newscycle has a naming convention to help know which Access List item is for which application iconnectsolutions Conference NEWSCYCLE SOLUTIONS USER GROUP 9

10 AB AdBooker AL- MediaLink (Ad Link) AM - Adjustments Manager AN Adbase System Node? AO Adjustment Monitor APA Adbase Print Audit Tool APL Audit Planner AR Adbase AR AS App SeCngs Manager AT Assignment Tool AW Abase WebServer BB BlindBox Reply Manager BC Sequel BatchChecker BCFI BC Format Import BCM Broadcast Content Mgmt BCPP BC Post ProducMon BP BI Populator BSM Broadcast Space Mgmt CB Credit Balance UMlity CC Credit Card UMlity CM Customer Manager CO CollecMons CP Campaign Manager CR Cash Receipts CT Contract Manager CU Customer Status UMlity DD Direct Debit Tool DJB DJ Biz Play Tool?? DR Data Analysis Rep DT Data Analysis Tool DU DB Table UMlity DV DAV EA Expire Ads UMlity EI EPS Importer EL ExternalLogin ep eproofs EPSF EPS Purger FC Finance Charger FD Fielded Data Mod UMlity Fields FM Finance Manager GE Graphics Exporter GI Graphics Importer GLR GL Mapper 2017 iconnectsolutions Conference NEWSCYCLE SOLUTIONS USER GROUP 10

11 GM Graphics Manager (Browser) GO GalleyOut IA Invoice Auto Pay UMlity IE Importers/Exporters IG Invoice Generator IN ISN PDF XML Exporter LA Lock Admin LB Lock Box MP MacMve Planner OP Output OV OneView PA Parallel Approval PC Payment Cutoff UMlity PM Product Management (Product Define) PP PrePrint Count RC Remote Client RM Rate Management (AdRater) RT Report Tool RU Rep Update SA System Admin SC Schedule Admin SFC Scan Finance Charge SL Sales Link SN System Node Monitor SP SR Standard Report ST System Translator SU Sales Force Updater TF TillForbid Extender TM Traffic Manager TO TOT Tag Order Tool UT UMliMes WD Web Db Manager WE Web Exporter WF Workflow Manager WO WriteOff UMlity XM XML Web Export XMLTR XML Transport 2017 iconnectsolutions Conference NEWSCYCLE SOLUTIONS USER GROUP 11

12 ! Field privileges have the following permission levels: Invisible The field content is hidden, grayed out. Read Only The field content can be seen but not edited. Writable The field content can be edited iconnectsolutions Conference NEWSCYCLE SOLUTIONS USER GROUP 12

13 ! Not all applications have Field level permissions.! Not all fields can be assigned privileges. The applications that do allow field privileges are: Adbooker Adsales Customer Manager Graphics Browser Lock Box 2017 iconnectsolutions Conference NEWSCYCLE SOLUTIONS USER GROUP 13

14 2017 iconnectsolutions Conference NEWSCYCLE SOLUTIONS USER GROUP 14

15 ! There are multiple ways of finding out which functions are new using sql or looking through each application in privileges where you will see that the function is unassigned to an access list.! When new functions are added, you will probably need to create an access list or assign the function to an existing access list iconnectsolutions Conference NEWSCYCLE SOLUTIONS USER GROUP 15

16 select UsrAccessList.name, USRPROGFUNCTION2ACL.FUNCTIONGRPID AS "Application ID", UsrProgFunctionGrps.name AS "Application Name", USRPROGFUNCTION2ACL.NAME AS "Function Name", usraccesslist.name AS "Access List", USRPROGFUNCTION2ACL.DESCRIPTION AS "Description" from USRPROGFUNCTION2ACL left outer join usraccesslist on usraccesslist.id = USRPROGFUNCTION2ACL.ACCESSLISTID left outer join UsrProgFunctionGrps on usrprogfunction2acl.functiongrpid = UsrProgFunctionGrps.id where usraccesslist.name is null order by 2, iconnectsolutions Conference NEWSCYCLE SOLUTIONS USER GROUP 16

17 To create access lists, no ma/er which method you use: 2017 iconnectsolutions Conference NEWSCYCLE SOLUTIONS USER GROUP 17

18 2017 iconnectsolutions Conference NEWSCYCLE SOLUTIONS USER GROUP 18

19 2017 iconnectsolutions Conference NEWSCYCLE SOLUTIONS USER GROUP 19

20 What we have then done is we assigned the access lists to the group and then we make users members of the group iconnectsolutions Conference NEWSCYCLE SOLUTIONS USER GROUP 20

21 Assign groups to users iconnectsolutions Conference NEWSCYCLE SOLUTIONS USER GROUP 21

22 Some;mes you need to assign access at the user level iconnectsolutions Conference NEWSCYCLE SOLUTIONS USER GROUP 22

23 ! Sometimes it seems like the access list needs to be assigned directly to the user rather than to a group and then the group to the user. (MediaLink/AdLink seems to be that way)! Some are run only! Some are NOT (not allowed to do something)! Some are Other (other than the default)! Does not include all applications such as PGL! There is also a Priv Tool that can help you see how privileges are assigned iconnectsolutions Conference NEWSCYCLE SOLUTIONS USER GROUP 23

24 Questions? 2017 iconnectsolutions Conference NEWSCYCLE SOLUTIONS USER GROUP 24

Working with Open Items

1 Customers: Using CounterPoint Working with Open Items Overview Open items are individual documents showing individual transactions that have occurred for specific A/R charge customers. Open items can