LUCITY SECURITY. This manual covers managing users, groups, and permissions for Lucity. Version: 2017r2

Transcription

1 LUCITY SECURITY This manual covers managing users, groups, and permissions for Lucity. Version: 2017r2

2 CONTENTS SECURITY... 1 Security Program... 2 Getting Started... 3 Setting up a Security Admin User... 3 Accessing the Security System... 4 Permissions Setup...22 Groups Tab...23 Permission Controls...25 How To: Manage Permissions...32 Users/Groups Setup...39 Menu Options...40 User Management...41 User Grid Tools...43 User Record Fields...53 Group management...54 User Import...56 User Import Fields and Functions...57 User Information Grid...59 User Mapping Grid...60 Import Process...61 Permissions List...64 Authentication Types...85 Lucity Authentication - Password Security...94 Suggested Security Groups INDEX SECURITY Lucity's Security system allows an agency's system administrator to control access to Lucity programs by defining permissions for certain functions within the software suite.

3 Past Helpguide Versions Version 2016r2 ( Version 2016 ( Version 2015r2 ( Version 2015 ( Version 2014r2 ( Version 2014 ( Version 7.60 ( Version 7.50 ( Help File Version 2017r2 SECURITY PROGRAM The Lucity Security program allows administrators to manage the users, security groups, and assign permissions. This guide explains the tool as well as displays information about how to perform specific functions related to users, groups, and permission. 2

4 GETTING STARTED To access the Lucity Security Program, a user must have the Run permission for Security Admin (see "Setting up a Security Admin User" on page 3). If this is a new Lucity install, and no user has been granted this permission, any user who launches the Security Program will be prompted to enter database management system (DBMS) login credentials. If at least one user has the Run permission, the regular Lucity Administration Login prompt appears when the Security Program is launched: Should a Lucity administrator forget his or her password, or, if a Lucity administrator is unavailable or leaves an organization, another person with high-level DBMS credentials can access the Security Program by pressing CTRL-R at the Administration Login prompt. The login fields will change, allowing the user to enter a database system administrator login and password. SETTING UP A SECURITY ADMIN USER To set up the Lucity Security administrator: 1) Launch the Security Program. (See Accessing the Security System (on page 4) for instructions.) 2) Log in using DBMS authentication. 3) In the menu go to Security > Users/Groups Setup. 4) Click New Group to create a new group. 5) Called the new group Security Admin. 6) Select the user(s) you want to be security admin(s). Select the Security Admin group. Click the Associate button to assign the users to the Security Admin group. 7) In the Menu go to Security > Permissions Setup. 8) Select the Security Admin group. 9) Expand Admin in the Modules View tab. 3

5 10) Check the box next to Security Admin. 11) Select the Run permission from the list. 12) Click << Grant. ACCESSING THE SECURITY SYSTEM To access the Lucity Security Program, complete the following steps: 1) In the Start menu, select Programs > Lucity > Lucity Tools > Lucity Security. The Select a Client screen appears: 2) Select your client from the drop-down and click OK. The Security login screen appears: 4

6 3) Enter your User name and Password. The Security program opens: 5

7 4) Select Security>Permissions Setup. The Permission Assignments window appears: Note: The Permission Assignments window is the primary Security interface. It allows the user to add, edit, delete, and view various groups' permissions. HOW TOS MANAGE USERS AND GROUPS How To Add a new User 1) In Lucity Security select Security > Users/Groups Setup. 6

8 2) Click New User (under the Users grid). The following window appears. 3) In the User field, enter the username the employee will use to log in (required) to their account. 4) Complete other fields (described below) as desired. 7

9 5) Click OK. The following pop-up appears, prompting you to set a password for the new user: 6) Enter the new password and then re-enter it. o Click Show Password to see characters, rather than asterisks, while typing. Note: The minimum length of the password is set by the system administrator in the Lucity Administration Tool. The maximum password length is 20 characters. Passwords are case-sensitive, and can include any standard characters and symbols (UTF 8 characters). 7) Click Ok. The system creates the user record and sets the password. How To Edit a user 1) Select a user in the Users grid. 8

10 2) Click Edit User. The following window appears: 3) Modify the fields as desired. 4) Click OK to save edits and close the window. How To Delete a user Note: Instead of deleting a user you can deactivate them by editing their User record and unchecking the Enabled box. Deactivating a user stops them from using the system while retaining their information for later use. 1) Select a user in the Users grid. 9

11 2) Click Delete User. A confirmation request appears: 3) Click Yes to remove the user from the Users grid. Click No to cancel the action. ACCOUNT SECURITY How to Setup Windows Authentication for a User 1) To use the Windows Authentication portal for the Lucity Web and Lucity desktop applications, go to Security>Users/Groups Setup. 2) Select a user from the Users grid. 10

12 3) Click. The User Information dialog appears: 4) Select Add and enter the user's Windows account. 5) Click OK. 6) Click OK at the bottom of the User Information dialog. 11

13 How to unlock a locked account 1) Open Lucity Security and go to Security > Users/Groups Setup. 2) Find the locked out user in the Users grid. 3) Select the user and click Edit User. The following pop-up will appear: 4) Uncheck the Locked box. 5) Click OK. 12

14 MANAGE GROUPS How To Add a new group 1) Click New Group (under the Groups grid). The following window appears: 2) Enter a Group Name and click Ok. How To Delete a group 1) Highlight the group you wish to delete in the Groups grid. 2) Click Delete Group(s). A confirmation prompt appears: 3) Click Yes to remove the group from the Groups grid. Click No to cancel the action. USER/GROUP ASSOCIATION How to Associate users and groups 1) Select a User and a Group to associate. 2) Click Associate. The User now appears in the Associated Users and Associated Groups grids, and the group's permissions have been granted to the user. Note: This action can be performed on multiple users/groups at once. How To Disassociate users and groups 1) Highlight a User and a Group to disassociate. 13

15 2) Click Disassociate. The User is removed from the Associated Users and Associated Groups grids. The user no longer has the selected group's permissions. MANAGE PERMISSIONS How To Grant Permissions to Groups Modules View Method 1) In the Groups grid, select one or more groups to which to grant a permission. 2) In the Modules View tab, under Permission Controls, expand the module suite for which the permissions will be granted. 3) Check the box next to the desired modules within the suite. Note: To grant a group all of the permissions in the Park suite, check the box next to Park. system will check all modules underneath the root. The 4) Select one or more permissions in the Permissions grid. Note: Hold down the Shift or Ctrl keys while clicking to select multiple items. 5) When all desired permissions are selected, click the << Grant button. The system grants the selected permissions to the selected group(s). 14

16 Permissions View Method 1) To grant a particular permission like the General-Edit permission for multiple modules in the Lucity program, select a group(s) in the Groups grid. 2) Open the Permissions View tab. 3) Select the desired Permission from the grid on the left. 4) Select the Modules to which to apply the permission and click the << Grant button. The system grants the permission(s) to the selected group(s). Note: Hold down the Shift or Ctrl keys while clicking to select multiple items. s How To Remove Permissions from Groups Modules View Method 1) In the Groups grid select one or more groups from which to remove a permission. 15

17 2) On the Modules View tab under Permission Controls, expand the module suite from which permissions should be removed. 3) Check the box next to the desired modules within the suite. Note: To remove all permissions in the Park suite for a group, check the box next to Park. system will check all modules underneath the root. The 4) Select one or more permissions in the Permissions grid. Note: Hold down the Shift or Ctrl keys while clicking to select multiple items. 5) When all desired permissions are selected, click the << Remove button. The system removes the selected permissions from the selected group(s). Permissions View Method 1) To remove a permission like the General-Edit permission applied to multiple modules in the Lucity program, select a group(s) in the Groups grid. 2) Open the Permissions View tab. 16

18 3) Select the desired Permission from the grid on the left. 4) Select the Modules from which to remove this permission and click the << Remove button. The system removes the permission(s) from the selected group(s). Note: Hold down the Shift or Ctrl keys while clicking to select multiple items. How To Deny Permissions to Groups Modules View Method 1) In the Groups grid, select one or more groups to which to deny a permission. 17

19 2) In the Modules View tab, under Permission Controls, expand the module suite for which the permissions will be denied. 3) Check the box next to the desired modules within the suite. Note: To deny a group all of the permissions in the Park suite, check the box next to Park. system will check all modules underneath the root. The 4) Select one or more permissions in the Permissions grid. Note: Hold down the Shift or Ctrl keys while clicking to select multiple items. 5) When all desired permissions are selected, click the << Deny button. The system denies the selected permissions from the selected group(s). Permissions View Method 1) To deny a particular permission like the General-Edit permission across multiple modules in the Lucity program, select a group(s) within the Groups grid. 2) Open the Permissions View tab. 18

20 3) Select the desired Permission from the grid on the left. 4) Select the Modules to which to deny the permission and click the << Deny button. The system denies the permission(s) from the selected group(s). Note: Hold down the Shift or Ctrl keys while clicking to select multiple items. CHANGE PASSWORDS How To Change a user's password 1) Select a user in the User grid. 19

21 2) Click Edit User. The Edit user dialog will appear: 3) Click the Change Password button. This popup will appear: 4) Enter the new password, and re-enter it. 20

22 o Click Show Password to see what is being typed. 5) Click Ok. The password is changed. 6) If you would like the user to be forced to change their password next time they login check the User must change password at next logon box. 7) The user can change the password after logging into Lucity Desktop ( or Lucity Web ( Password Requirements Length: A Lucity login password must have at least one character; however, an agency may require a specific minimum/maximum number of characters. Complexity: Depending on preferences configured in the Lucity Administration Tool, an agency may require that user passwords contain three of the following: o o o o an uppercase letter, a lowercase letter, a number, or a special character. Frequency: Some agencies may require users to update their Lucity passwords after a designated number of days. In such cases, the system automatically prompts users to change their passwords. Simple Passwords: User passwords may be denied because they: o o consist of repeated values , AAAAAA; consist of a common sequence , ABCDEFG; o supply user information - logon, first name, last name, address; or o include one of these easily guessed passwords - password, qwerty, abc123, iloveyou, admin, letmein, qwertyio, football, baseball, welcome, 1qaz2wsx, dragon, master, monkey, login, princess, qwertyiop, passw0rd, p@ssword, p@ssw0rd, starwars, lucity, gba. 21

23 PERMISSIONS SETUP The Permissions Assignments window enables administrators to assign permissions to groups. divided into two main sections: It is The left side of the screen displays three columns that show existing permissions. They consist of: 1) all Groups; 2) the Users in the selected group(s); 3) and those users' Assigned Permissions. The right side of the screen consists of two tabs that provide access to permission controls. There are several ways to navigate through the available permissions and assign them to groups. following topics will go over assigning permissions. The More information about permission definitions (see "Permissions List" on page 64) 22

24 GROUPS TAB The Groups tab allows administrators to select groups and apply permissions to them while providing information about their current permissions. 23

25 GROUPS TAB Groups grid Lists existing groups. Select one or more groups to see the related users and their permissions. Users In Group(s) grid * Identifies the users in the selected Group(s). Assigned Permissions * Displays the permissions assigned to the selected Group(s). Permissions are not displayed if more than one Group is selected. Three buttons used to apply or remove permissions are located in the center of the screen. PERMISSION CONTROL BUTTONS << Grant Grants the Permissions selected on the right to the Group(s) selected on the left. << Remove Removes a Grant or Deny already applied to the selected Permission from the selected Group(s). << Deny Denies the Permissions selected on the right to the Group(s) selected on the left. More information about permission definitions (see "Permissions List" on page 64) USERS TAB Older versions of Lucity (pre 2016) include a Users tab that enables administrators to assign permissions to an individual user. This function was removed in because checking individual permissions significantly slows down the system. As a result, Lucity Web no longer takes into account individual permissions. The Users tab appears only if there are still individual permissions assigned. Lucity administrators should create groups based on access needs and assign users to those groups. They should then remove any individual permissions a user might have. How to convert user permissions to group permissions >> ( 24

26 PERMISSION CONTROLS On the right side of the Permission Setup screen there are two tabs. Each contains grids that enable users to view all of Lucity's available permissions and assign them to the Group(s) selected on the left side of the screen. Modules View Modules View lets administrators establish permissions by module. When the admin checks one or more modules in the Modules grid, the related permissions appear in the adjoining Permissions grid. Then, he or she can select the desired Permissions and apply the changes to the selected Group(s) using the Grant, Remove, or Deny buttons. Note: The selected permissions changes are applied to all modules checked in the Modules grid. 25

27 Modules grid Lists modules, components, and programs within the Lucity system. Check a module in this grid to see related permissions in the Permissions grid. Permissions grid Lists permissions available for the module(s) selected in the Modules grid, which can be granted to, removed from, or denied from the selected group(s). The permissions displayed here are controlled by the module(s) checked in the Modules grid and the display option chosen at the bottom of the screen. 26

28 The Groups tab allows administrators to select groups and apply permissions to them while providing information about their current permissions. If more than one module is selected in the Modules grid, and this option is marked, the Permissions grid displays all permissions related to all selected modules. This is true even if a permission applies only to one of the modules. GROUPS TAB Grou ps grid User s In Grou p(s) grid * Assi gned Per missi ons * Lists existing groups. Select one or more groups to see the related users and their permissions. Identifies the users in the selected Group(s). Displays the permissions assigned to the selected Group(s). Permissions are not displayed if more than one Group is selected. 27 Three buttons used to

29 Permissions applying to all selected modules If more than one module is selected in the Modules grid, and this option is marked, the Permissions grid displays only permissions that apply to all selected modules. Permissions that do not apply to all selected modules are hidden. Permissions View Permissions View allows users to view modules related to a particular permission. When an admin selects a permission in the Permissions grid, modules that offer that permission are displayed in the adjoining Modules grid. Then, he or she can select the desired Modules and Grant, Remove, or Deny those permissions to the selected Group(s). Note: The permissions changes for the selected Modules are applied to all selected Groups. 28

30 Permissions grid Lists all permissions available within the Lucity system. Check a permission in this grid to see all modules that implement that permission in the Modules grid. Modules grid Lists modules that use the permission(s) selected in the Permissions grid. Permissions can be granted to, removed from, or denied from the selected group(s). The modules displayed here are controlled by the permission(s) checked in the Permissions grid and the display option chosen at the bottom of the screen. 29

31 The Groups tab allows administrators to select groups and apply permissions to them while providing information about their current permissions. If more than one permission is selected in the Permissions grid, and this option is marked, the Modules grid displays all modules that use any of the selected permissions. This is true even if a permission applies to only one of the modules. GROUPS TAB Grou ps grid User s In Grou p(s) grid * Assi gned Per missi ons * Lists existing groups. Select one or more groups to see the related users and their permissions. Identifies the users in the selected Group(s). Displays the permissions assigned to the selected Group(s). Permissions are not displayed if more than one Group is selected. 30 Three buttons used to

32 Modules with al of the selected permissions If more than one permission is selected in the Permissions grid, and this option is marked, the Modules grid displays only modules that use all selected permissions. Modules that do not use all selected permissions are hidden. More information about permission definitions (see "Permissions List" on page 64) 31

33 HOW TO: MANAGE PERMISSIONS Lucity has a wide range of permissions. Permissions are assigned to Groups. Any of these permissions can either be Granted, Denied, or Neither. Users' permissions are inherited from the groups to which they belong. PERMISSION CONTROL BUTTONS << Grant Grants the Permissions selected on the right to the Group(s) selected on the left. << Remove Removes a Grant or Deny permission already applied to the selected Permission from the selected Group(s). << Deny Explicitly prevents the selected Permissions from being granted to the selected Group(s). Permission States Grant The group may access this function. Granted Deny The group cannot access this function. The permission appears in the Assigned Permissions list with the Key icon. A Deny setting overrules a Grant setting when a user is a member of two or more groups. That is, if a user belongs to one group that is denied access to a module function, and belongs to another group that is granted access to that function, he will be denied access. Denied The permission appears in the Assigned Permission list with the Lock icon. Neither Users in the group do not have access to this function; however, if a user is also assigned to another group that does have access to the function, the user can use that function. No permission specified The permission does not appear in the Assigned Permission list. The Question Mark icon appears next to a module name if a group has some permissions for the module, but does not have the Run permission for it. Examples 32

34 User A is is a member of two groups with settings for the Work Order Standard module's Run permission. The chart below illustrates how permissions would be applied to the user in three possible permission scenarios: Scenario 1 Scenario 2 Scenario 3 Group 1 Group 2 Final Result How To Grant Permissions to Groups Modules View Method 1) In the Groups grid, select one or more groups to which to grant a permission. 2) In the Modules View tab, under Permission Controls, expand the module suite for which the permissions will be granted. 3) Check the box next to the desired modules within the suite. 33

35 Note: To grant a group all of the permissions in the Park suite, check the box next to Park. system will check all modules underneath the root. The 4) Select one or more permissions in the Permissions grid. Note: Hold down the Shift or Ctrl keys while clicking to select multiple items. 5) When all desired permissions are selected, click the << Grant button. The system grants the selected permissions to the selected group(s). Permissions View Method 1) To grant a particular permission like the General-Edit permission for multiple modules in the Lucity program, select a group(s) in the Groups grid. 2) Open the Permissions View tab. 3) Select the desired Permission from the grid on the left. 4) Select the Modules to which to apply the permission and click the << Grant button. The system grants the permission(s) to the selected group(s). s 34

36 Note: Hold down the Shift or Ctrl keys while clicking to select multiple items. How To Remove Permissions from Groups Modules View Method 1) In the Groups grid select one or more groups from which to remove a permission. 2) On the Modules View tab under Permission Controls, expand the module suite from which permissions should be removed. 3) Check the box next to the desired modules within the suite. Note: To remove all permissions in the Park suite for a group, check the box next to Park. system will check all modules underneath the root. The 4) Select one or more permissions in the Permissions grid. Note: Hold down the Shift or Ctrl keys while clicking to select multiple items. 5) When all desired permissions are selected, click the << Remove button. The system removes the selected permissions from the selected group(s). Permissions View Method 1) To remove a permission like the General-Edit permission applied to multiple modules in the Lucity program, select a group(s) in the Groups grid. 35

37 2) Open the Permissions View tab. 3) Select the desired Permission from the grid on the left. 4) Select the Modules from which to remove this permission and click the << Remove button. The system removes the permission(s) from the selected group(s). Note: Hold down the Shift or Ctrl keys while clicking to select multiple items. How To Deny Permissions to Groups Modules View Method 1) In the Groups grid, select one or more groups to which to deny a permission. 36

38 2) In the Modules View tab, under Permission Controls, expand the module suite for which the permissions will be denied. 3) Check the box next to the desired modules within the suite. Note: To deny a group all of the permissions in the Park suite, check the box next to Park. system will check all modules underneath the root. The 4) Select one or more permissions in the Permissions grid. Note: Hold down the Shift or Ctrl keys while clicking to select multiple items. 5) When all desired permissions are selected, click the << Deny button. The system denies the selected permissions from the selected group(s). Permissions View Method 1) To deny a particular permission like the General-Edit permission across multiple modules in the Lucity program, select a group(s) within the Groups grid. 2) Open the Permissions View tab. 37

39 3) Select the desired Permission from the grid on the left. 4) Select the Modules to which to deny the permission and click the << Deny button. The system denies the permission(s) from the selected group(s). Note: Hold down the Shift or Ctrl keys while clicking to select multiple items. 38

40 USERS/GROUPS SETUP The Users/Group Setup screen lets administrators manage employees' Lucity user accounts and maintain groups for Lucity users. The grids on the left side of the screen provide information about Users, while the grids on the right display data on Groups. 39

41 MENU OPTIONS The Users/Groups Setup screen has two menu options. The View Menu controls how parts of the window appear. The Copy menu controls how the system responds when a group or user is copied. VIEW MENU Enables users to hide several of the grids that appear in the window. All grids are displayed by default. Turning off certain grids provides more room to display the Users and Groups grids and reduces processing time when adding or associating users or groups. Users Associated to Groups Group Permission Tree Groups Associated to Users User Permission Tree Hides the Associated Users grid under the Groups grid. Hides the Assigned Permissions grid under the Groups grid. Hides the Associated Groups grid under the Users grid. Hides the Effective Permissions grid under the Users grid. COPY MENU Enables users to control how the copy tools in the window work. Groups > Copy User Associations When a group is copied, adds all users in the original group to the new group. Groups > Copy Permission Associations Users > Copy Group Associations When a group is copied, adds all permissions granted to the original group to the new group. When a user is copied, adds the new user to all groups assigned to the original user. 40

42 USER MANAGEMENT User management grids, which administrators use to create new users, assign passwords and set up Windows authentication, are located on the left side of the the User and Group Assignments window. 41

43 Users grid Lists all users. The grid columns can be sorted, and the right-click menu allows administrators to sort and conduct bulk edits. New User Edit User(s) Enables one to search the user list. Creates a new, blank user record. Enables one to modify the records of selected users. Copy User Creates a new user based on the selected user. Preferences set in the Copy > Users menu dictate which data elements are copied. Delete User(s) Reset Password(s) Associated Groups grid * Destroys the record of the selected user. This button is no longer used. To reset a password, select Edit User. button to assign a new password. Then, use the Change Password Displays the Groups in which the selected user(s) is a member. Effective Permissions * Shows the permissions that the selected user has been granted. than one user is selected, permissions are not displayed. * These grids can be hidden using the View menu. If more 42

44 USER GRID TOOLS Selecting Columns Click on a column header to select a column. Click and drag the mouse to select multiple columns. Selecting Users Click on a User in the grid to select that record. Hold down the Shift or Ctrl keys while clicking to select multiple users. Right-click Menu Options 43

45 RIGHT CLICK CONTROLS Sort Ascending/Descending * Freeze Column(s) * Unfreeze All Column(s) Hide Columns(s) * Show All column(s) Filter For * Show Selected Only * Remove Filter Toggle Authentication * Set Default Rules Group * Sorts the selected column(s) data in ascending or descending order. Moves the selected column(s) to the left so it remains visible as the user scrolls left or right. Returns any frozen columns to the grid's default state. Temporarily removes the selected column from view within the grid. Displays all hidden columns. Provides a pop-up field that enables admins to enter a value for filtering the column. Hides all user records other than those the user has selected. Returns the user data to the unfiltered state. Switches the Allow Application Authentication field for selected users. Provides a pop-up field that enables the admin to select a Default Rules Group for the selected group of users. * Requires a column to be selected. * Requires one or more Users to be selected. How To Add a new user 1) In Lucity Security select Security > Users/Groups Setup. 44

46 2) Click New User (under the Users grid). The following window appears. 3) In the User field, enter the username the employee will use to log in (required) to their account. 4) Complete other fields (described below) as desired. 45

47 5) Click OK. The following pop-up appears, prompting you to set a password for the new user: 6) Enter the new password and then re-enter it. o Click Show Password to see characters, rather than asterisks, while typing. Note: The minimum length of the password is set by the system administrator in the Lucity Administration Tool. The maximum password length is 20 characters. Passwords are case-sensitive, and can include any standard characters and symbols (UTF 8 characters). 7) Click Ok. The system creates the user record and sets the password. How To Edit a user 1) Select a user in the Users grid. 46

48 2) Click Edit User. The following window appears: 3) Modify the fields as desired. 4) Click OK to save edits and close the window. How To Delete a user Note: Instead of deleting a user you can deactivate them by editing their User record and unchecking the Enabled box. Deactivating a user stops them from using the system while retaining their information for later use. 1) Select a user in the Users grid. 47

49 2) Click Delete User. A confirmation request appears: 3) Click Yes to remove the user from the Users grid. Click No to cancel the action. How To Change a user's password 1) Select a user in the User grid. 2) Click Edit User. The Edit user dialog will appear: 48

50 3) Click the Change Password button. This popup will appear: 4) Enter the new password, and re-enter it. o Click Show Password to see what is being typed. 5) Click Ok. The password is changed. 6) If you would like the user to be forced to change their password next time they login check the User must change password at next logon box. 7) The user can change the password after logging into Lucity Desktop ( or Lucity Web ( Password Requirements Length: A Lucity login password must have at least one character; however, an agency may require a specific minimum/maximum number of characters. Complexity: Depending on preferences configured in the Lucity Administration Tool, an agency may require that user passwords contain three of the following: o o o o an uppercase letter, a lowercase letter, a number, or a special character. Frequency: Some agencies may require users to update their Lucity passwords after a designated number of days. In such cases, the system automatically prompts users to change their passwords. Simple Passwords: User passwords may be denied because they: o o consist of repeated values , AAAAAA; consist of a common sequence , ABCDEFG; 49

51 o supply user information - logon, first name, last name, address; or o include one of these easily guessed passwords - password, qwerty, abc123, iloveyou, admin, letmein, qwertyio, football, baseball, welcome, 1qaz2wsx, dragon, master, monkey, login, princess, qwertyiop, passw0rd, p@ssword, p@ssw0rd, starwars, lucity, gba. How to Associate users and groups 1) Select a User and a Group to associate. 2) Click Associate. The User now appears in the Associated Users and Associated Groups grids, and the group's permissions have been granted to the user. Note: This action can be performed on multiple users/groups at once. How To Disassociate users and groups 1) Highlight a User and a Group to disassociate. 2) Click Disassociate. The User is removed from the Associated Users and Associated Groups grids. The user no longer has the selected group's permissions. How to Setup Windows Authentication for a User 1) To use the Windows Authentication portal for the Lucity Web and Lucity desktop applications, go to Security>Users/Groups Setup. 2) Select a user from the Users grid. 50

52 3) Click. The User Information dialog appears: 4) Select Add and enter the user's Windows account. 5) Click OK. 6) Click OK at the bottom of the User Information dialog. 51

53 52

54 USER RECORD FIELDS USER FIELDS User The employee's login username. This is field can be edited only when adding a new user. First Name Last Name The employee's first name. The employee's surname. The employee's address. Lucity uses this address to send various system notifications. Default Rules Group Identifies the user's main security group. In some cases, Lucity Web displays information based on a user's security group. Because users may be members of multiple groups, it is important that administrators define a Default Rules Group for each user. Enabled Indicates that the employee is an active Lucity user. This option allows administrators to keep previous employees' user records in the system, but prohibit them from logging in. Locked (This field is currently not used.) Change Password Enables an administrator to change the user's password. Users must have a password to log into the program. Associated Windows Accounts Add Remove Allow Application Authentication Note: The minimum length of the password is set by the system administrator. The maximum password length is 20 characters. Passwords are case-sensitive, and can include any standard characters and symbols (UTF 8 characters). Identifies the user's Windows user account(s), which is required for Windows authentication. Adds a Windows user account to the Associated Windows Accounts grid. Deletes a Windows user account from the Associated Windows Accounts grid. Indicates whether the user can log in using a username and password (application authentication) or is required to use Windows authentication. Password Never Expires User must change password at next login Exempts the user from having his/her password reset on a regular interval. When an agency requires regular password resets, the interval is established in the Lucity Web > Admin Portal > Settings > System Settings > Security section under the Maximum password age setting. When checked forces the user to change their password the next time they login. When they change their password this becomes unchecked. This allows admins to set a temporary password for users, and force the change that password during their initial login. 53

55 Last Login Indicates the date that the user last logged into a Lucity program. GROUP MANAGEMENT Group management grids, which administrators use to create new groups, view group assignments and assign permissions to groups, are located on the right side of the User and Group Assignments window. 54

56 Groups grid New Group Lists all existing security Groups. Creates a new Group without any permissions. Copy Group Creates a new Group based on the one selected in the Groups grid. Preferences set in the Copy > Users menu dictate which data elements are copied. Delete Group(s) Deletes the Group(s) selected in the grid. Associated Users grid * Displays the Users who are members of the selected Group. Assigned Permissions * Shows the permissions granted to the selected Group. selected, no permissions are displayed. * These grids can be hidden using the View menu. If more than one group is How To Add a new group 1) Click New Group (under the Groups grid). The following window appears: 2) Enter a Group Name and click Ok. How To Delete a group 1) Highlight the group you wish to delete in the Groups grid. 2) Click Delete Group(s). A confirmation prompt appears: 3) Click Yes to remove the group from the Groups grid. Click No to cancel the action. 55

57 How To Associate users and groups 1) Select a User and a Group to associate. 2) Click Associate. The User now appears in the Associated Users and Associated Groups grids, and the group's permissions have been granted to the user. Note: This action can be performed on multiple users/groups at once. How To Disassociate users and groups 1) Highlight a User and a Group to disassociate. 2) Click Disassociate. The User is removed from the Associated Users and Associated Groups grids. The user no longer has the selected group's permissions. More information about suggested security groups (see "Suggested Security Groups" on page 100) USER IMPORT The User Import tool allows administrators to directly import new users into the Lucity Security program and associate existing Lucity users with Windows login accounts. User information can be imported from either an ASCII delimited text file or from a directory service, such as Active Directory. 56

58 Active Directory Integration There is another import tool that is designed to integrate Windows Active Directory and Lucity Security together. This allows IT to manage Lucity Users via Active Directory. More information about the Lucity User Import ( USER IMPORT FIELDS AND FUNCTIONS FIELD OR FUNCTION Import Source ASCII File Delimiter First Row Contains Header Data Provider Path Login DESCRIPTION Indicates the source format of the data to be imported. ASCII File - A delimited text file will be the source of the user information. Directory Service - A directory service, such as Active Directory, will be the source of the user information. Note: The option selected here determines which of the following fields are available for user input; therefore, some fields will be disabled. Indicates the path of the ASCII file. Enter the path name or click the button to browse to the file location. Specifies the ASCII file's delimiter: comma, pipe, tab, etc. delimiter is not shown, enter it manually. If the appropriate When marked, indicates that the first line in the file contains header information. If header information exists, the system references it when populating the User Information grid. Indicates the provider used to obtain the directory information. (The default is LDAP.) Specifies the path to the directory service. (By default: LDAP://<current user's Domain>). Admins may specify organizational units (OU) or containers in the path. User Import tool does not enumerate users in a security group. Examples: LDAP://OU=<organizational unit>, DC=<domain component>, DC=<domain component> LDAP://<domain> WinNT://<domain> Specifies the login used to connect to the directory service. If a login is not The 57

59 specified, the system attempts to connect using the current user's Windows account. Password Retrieve User Information User Mapping Import Specifies the password used to connect to the directory service. A password is necessary only when connecting with credentials other than those of the current Windows user account. Directs the system to retrieve user data from the ASCII file or directory service and populate Lucity's User Information grid. This button is enabled only when the Import Service has been selected and related data source fields have been and populated. Displays the information retrieved from the import source. More information on the User Information grid and its functions (see "User Information Grid" on page 59). Displays the user mapping for the import data. More information on the User Mapping grid and its functions (see "User Mapping Grid" on page 60). Directs the system to begin the import. This button is enabled when there is data in the User Information grid and the User Mapping grid has a "Column or Value" in the Login field. More information on the Import process (see "Import Process" on page 61). 58

60 USER INFORMATION GRID A sample User Information grid is displayed below with information retrieved from an Import Source. Administrators can edit data in the grid, delete rows, and add rows manually. The first column (Selected) indicates whether or not a record should be imported. To delete a row, highlight it and press the Delete key or deselect the checkbox at the beginning of the row. 59

61 USER MAPPING GRID A sample User Mapping grid is displayed below. It indicates how the import data should be mapped for a user. The table below identifies the Lucity user properties to which the import data can be assigned. PROPERTY Lucity Login First Name Last Name Windows Domain Windows Login Name DESCRIPTION The login name used to access Lucity. The user's first name. The user's surname. The domain to use when associating the Lucity user to a Windows login. The Windows login name. If data is mapped to this column, and the data already contains the domain name (e.g., Lucity\jsmith), then the system ignores the mapping indicated in the Windows Domain field. If the mapped data contains only the login name (e.g., jsmith), then the Windows Account will be a concatenation of the Windows Domain, a backslash (\), and the Windows Login Name. The "Column or Value" column allows you to specify a column from the User Information (see "User Information Grid" on page 59) grid that contains the data to import, or to specify a text value that should be used for each record that is imported. How to Specify a Column Name 1) Select a cell from the User Information grid corresponding to the desired column. 60

62 2) Drag and drop the User Information cell in the appropriate User Mapping cell, or select the corresponding User Mapping cell and press the Mapping button. IMPORT PROCESS Before the import process takes place, the User Import dialog should look similar to the one below: During the process, the User Import tool: 1) Checks whether each user specified in the import data already exists in Lucity (i.e., whether the user has a Lucity Login). o If the user does not exist, the tool creates a a new user. o If the user does exist, the tool proceeds to Step 2. 2) Associates the user (whether new or existing) to the appropriate Windows Login account if the account information is provided in the import data. 61

63 When the import is complete, one of the following messages appears: The Import Successful message identifies : how many new users the tool created, the number of Windows Accounts that were added to Lucity, and how many users were associated with new Windows accounts. 62

64 The Invalid Records message identifies the number of user records that could not be imported. It also identifies : how many new users the tool created, the number of Windows Accounts that were added to Lucity, and how many users were associated with new Windows accounts. If invalid records exist, the User Information grid identifies them with this symbol: cursor over the warning symbol to see the reason why the record failed to import.. Hover the 63

65 PERMISSIONS LIST The types of security permissions found in the Lucity suite fall into the following categories (use the links to explore each in greater depth): Standard Permissions (see "Standard Module Permissions" on page 65) are applied to multiple modules throughout the Lucity Security system. These permissions have the same general purpose in each module. Module-Specific Permissions (on page 69) are only applicable to certain modules. They allow users to access special functions available in select modules. Administration Permissions (on page 75) control users' access to and use of the Lucity Administration and Lucity Security tools. Lucity App Permissions (see "Lucity Apps Permissions" on page 79) control users' access to and modification of Lucity Web applications. GIS Permissions (on page 81) control users' access to a number of Lucity GIS tools. Mobile Permissions (on page 83) control users' access to the Lucity Mobile platforms. Each of these permissions control access to one or more Lucity program. program(s) the permissions affect. Icons indicate which Lucity Desktop Web GIS Mobile for Android Mobile for ios Administration Tool Security Note: Some users may notice permissions in the Security program that do not appear in this guide. Such permissions are no longer used. 64

66 STANDARD MODULE PERMISSIONS Standard permissions available in most modules. The platforms that support each permission type are indicated on the right. If a platform is not listed, it most likely does not support the stated functionality. SETTING NAME FUNCTION WHEN TURNED ON PLATFORM Allow Edits to Restricted Fields Allow View of Secure Fields Browse - Exporting Allows users to edit restricted fields. Allows users to view fields that contain sensitive data. secure fields. Example: Employee pay rates Administrators can define restricted fields in the field properties. This permission only applies to modules that contain Allows users to export parameters for Browse function to a text file (Microsoft Excel or Lotus Notes). Change Help URL Field Definition Field Properties Filter - Advanced Filter/Browse - Delete Allows users to change the location to which a module's Help button points. Allows users to edit field definitions. Allows users to edit field properties. Allows users to create advanced filters. Allows users to delete any previously saved Filter or Browse. Filter/Browse - Delete My Own Allows a user to delete any Filter or Browse that he or she created. Filter/Browse - Edit Others Allows a user to edit any Filter or Browse created by another employee. General - Add Allows users to add records to a specific module. General - Delete Allows users to delete records from a specific module. General - Edit Allows users to edit records in a specific module.

67 Global Browse Allows users to make a saved Browse accessible to all users. Global Edits Allows users to mass-populate fields within a specific module without having to edit each record individually. Note: This functionality is available only in certain fields. Documents - Add Allows users to add a link between a Lucity record and image/movie/document files. Also allows allows users to upload a copy of a file to the Lucity Document Server and then create a link between the Lucity record and the copied file. Note: To attach a file in Lucity Web without uploading it a user must also have the Lucity Apps > All > Documents - Add Without Upload permission. Documents - Delete Allows users to remove the link between the Lucity record and an image/movie/document file. This does not delete the file. Documents - Delete File Allows users to remove the link between the Lucity record and an image/movie/document file. The file is deleted if it was uploaded to the Lucity Document Server. Popup Lists - Add Allows users to add new codes to the pop-up lists within a module. Popup Lists - Caption Popup Lists - Delete Popup Lists - Edit Allows users to change the captions on fields within a module. Note: This capability applies to all fields, not just pop-up lists. Allows users to delete codes from pop-up lists within modules. Allows users to edit the description for codes in pop-up lists within modules. Recalculate Allows users to run the Recalc tool within a module. Recalc is a special program that updates calculations in various modules. Note: The Recalc tool is available in Lucity Desktop and Web only. Rename Tabs Allows users to change the tab names in the modules. 66

68 Reports - Add Allows users to add custom reports. Reports - Delete Reports - Exporting Run Allows users to delete reports from the report list. Allows users to export a report to a disk file, exchange folder, etc. Allows users to open the module. Show In Map Subset - Edit/Delete Subset - Edit/Delete My Own Allows users to use the Show in Map button, which opens GIS, zooms in on the map, and highlights the selected feature. Allows a user to edit subsets created by other employees. Allows users to delete only those subsets that he or she created. 67

69

70 MODULE-SPECIFIC PERMISSIONS Module-specific permissions apply to only a select number of modules. General SETTING NAME FUNCTION WHEN TURNED ON AFFECTED SECURITY MODULE PLATFORMS Street Name List - Add Allows users to add streets to the Street Name list. Street List Street Name List - Delete Allows users to delete streets from the Street Name list. Street List Street Name List - Edit Allows users to edit streets in the Street Name list. Street List Inventory Manual Part Adjustment Allows users to use the Manual Parts Adjustment right-click tools and toolkits. Parts Sewer Recalc - Building Insp. Allows users to recalculate Building Inspections fields when using the Sewer Recalculate All tool. Sewer Recalc All Modules Recalc - Flow Isolation Allows users to recalculate Flow Isolation fields when using the Sewer Recalculate All tool. Sewer Recalc All Modules Recalc - Joint Testing Allows users to recalculate Joint Testing fields when using the Sewer Recalculate All tool. Sewer Recalc All Modules Recalc - Line Lamping Allows users to recalculate Line Lamping fields when using the Sewer Recalculate All tool. Sewer Recalc All Modules Recalc - MH Inspections Allows users to recalculate Manhole Inspections fields when using the Sewer Recalculate All tool. Sewer Recalc All Modules Recalc - MH Inventory Allows users to recalculate Manhole Inventory fields when using the Sewer Recalculate All tool. Sewer Recalc All Modules Recalc - Pipes Allows users to recalculate Pipe fields when using the Sewer Recalculate All tool. Sewer Recalc All Modules

71 Recalc - Service Lateral Insp. Allows users to recalculate Service Lateral Inspection fields when using the Sewer Recalculate All tool. Sewer Recalc All Modules Sewer Service Lateral Inspections Recalc - Smoke Testing Allows users to recalculate Smoke Testing fields when using the Sewer Recalculate All tool. Sewer Recalc All Modules Recalc - TV Inspections Allows users to recalculate TV Inspections fields when using the Sewer Recalculate All tool. Sewer Recalc All Modules Water Run Notification Update Tool Allows users to use the Notification Update Tool in the Water Backflow Prevention module. Water Backflow Prevention This is a special tool that allows users to update the Notice History, including Status and Status Date, for all Backflow Preventer records in the current filter. Work Ability to Associate Allows users to associate Employees, Equipment, Materials, Problems, Causes, Supervisors, Crews, and Actions to Categories while in the related modules. Daily Work Entries PM/Work Templates Work Category Setup Work Order Lite Work Orders Work Requests Ability to Hard Lock WO Allows users to lock a Work Order so that it cannot be edited. Work Orders 70

72 Allow Closing of Record Allows users to close Work records (set status to > 950). Work Order Lite Allow Edit of Closed Record Allow Edit of Locked Record Allow View of Contact Data Work Orders Work Requests Allows users to edit Work Orders with a status > 950. Daily Work Entries Work Order Lite Work Orders Work Requests Work Schedules Allows users to edit records with the Record Locked field marked. Daily Inspections Allows users to access the Contact Info tab in the Work Employee Setup module. Work Employee Setup Allowed to Approve and Lock Timesheets Allows users to access the Timesheet Overview and both approve and lock timesheets. Timesheet Overview Allowed to Approve Timesheets Allows users to access the timesheet Overview and approve timesheets, but not lock them. Timesheet Overview Allowed to Create and Assign Timesheet Forms Allows users to add/edit timesheets and control who timesheets are assigned to. Timesheet Allowed to Edit Pay Periods Allows users to access the Pay Period Management tool and add/modify pay periods. Pay Period Management 71

73 Edit Own Record Allows a user to edit Work records that he or she created. Daily Work Entries Show All Enabled Allows users to pick any Work Flow Setup items from the associated pick-list instead of being limited to the Valid Item list. TimeSheets Work Order Lite Work Orders Work Schedules Daily Work Entries PM/Work Templates Work Order Lite Work Orders Work Requests Toolkit - Recalc Costs Allows users to run toolkits that recalculate costs. Work Orders Toolkit - Update Filterset Allows users to run toolkits that update entire filtersets. Work Order Lite Work Orders Toolkit - Update Units Allows users to run toolkits that update task units. Work Orders Update from Financials This permission is relevant only to third-party developers who are writing applications that need to update the "Imported to Financials" flags in: Work Orders for accounts receivable, and Work Resources for imports to payroll, general ledger, and third-party parts inventory applications. Setting or revoking this permission has no effect on end-users of the Web and Desktop applications. Inventory managers who use the Eden/Lucity inventory integration feature may need to set this permission to use Eden's In Forum Gold to update Material units on existing resources. Work Orders 72

74 Street Accident - Verify Allows users to flag accidents as verified. Street Accident Data Management Add/Remove Subs from Super Split/Merge Subsegments Allows users to: add subsegments to a supersegment or remove subsegments from a supersegment.. Allows users to split and/or merge subsegments in the Transportation system. Street Segment Networks Subsegments Super Segments Street Segment Networks Subsegments 73

75

76 ADMINISTRATION PERMISSIONS Administration permissions control various administrative tasks. Activations SETTING NAME FUNCTION WHEN TURNED ON PLATFORMS General - Edit Run Data Quality Allows user to delete/manipulate activation records in the System > Activation Manager section of the Administration Tool. Allows user to access the System > Activation Manager section of the Administration Tool. Run Allows user to access the Data Quality Tool. Import and Update Run General - Add General - Delete General - Edit Allows user to access the Import and Update tool. Add an Import Configuration. Delete an Import Configuration. Edit an Import Configuration. Lucity App Admin Run * Lucity Web Admin Portal Security Tokens Client Licenses User Licenses Manager System Settings - Any settings that have to do with how the application appears or behaves. Timesheet - Design Mode

77 Lucity IT Admin Run * Dashboard - Design Mode (except for deleting shared tabs) Admin Tool System Settings - Any settings that have to do with how the application appears or behaves. Navigation Forms GIS Security Desktop Allows user to access ActiveX/OCX Controls under the System > Configuration. Lucity Web Admin Portal Security Tokens Client Licenses User Licenses Manager System Settings - Any settings that have to do with how the application appears or behaves. Admin Tool Allows user to log into the Lucity Administration Tool and access: System Settings - Any settings that have to do with how the system operates behind the scenes. This includes URLs and file paths. Clear All Site Caches Manage Website Caches 76

78 Manage Public Website Caches Manage Mobile Server Caches Object Lock Manager User License Manager Background Tasks Active User Manager View Request Log Client Maintenance Security Security Admin Allows user to login to the Lucity Security program. However, he or she can only modify users that have the Lucity IT Admin > Run permission. Run * Allows user to log into the Lucity Security program and modify users, groups, and permissions. However, he or she cannot assign the Lucity IT Admin > Run permission, or modify any users that have that permission. * When a user is granted, revoked, or denied these permissions, Lucity logs the action in the rolling.log file and in the Windows Event Viewer. A notification is also sent to the addresses specified in the Lucity Web > Admin Portal > Settings > System Settings > > List of addresses for system health notifications setting. Reports - Administrative These are reports that show up in Lucity Web > Admin Portal > Reports > Admin. Admin to access the Admin Portal. Users must also have either Lucity App Admin or Lucity IT Reports - Add Reports - Delete Allows users to add custom admin reports. Allows users to delete custom admin reports from the report list. 77

79 Run Allows users to access the admin reports section. Reports - Security These are reports that show up in Lucity Web > Admin Portal > Reports > Security. Admin to access the Admin Portal. Users must also have either Lucity App Admin or Lucity IT Reports - Add Reports - Delete Run Allows users to add custom security reports. Allows users to delete custom security reports from the report list. Allows users to access the security reports section. 78

80 LUCITY APPS PERMISSIONS Lucity Apps permissions give users access to or the ability to modify different parts of the Lucity Web application. Dashboard SETTING NAME FUNCTION WHEN TURNED ON PLATFORMS Allowed to Configure Plugin with URL Delete Shared Tabs Edit Own Record Allows users to add or edit a URL plugin. Allows users to permanently delete a shared tab. Allows users to edit their own dashboard within Lucity Web. General - Edit Allows users to edit any dashboard within Lucity Web. Lucity Mobile SETTING NAME FUNCTION WHEN TURNED ON PLATFORMS Configure Location Tracking Lucity Web Allows users to turn on/off location tracking in the Lucity Mobile applications. SETTING NAME FUNCTION WHEN TURNED ON PLATFORMS Allow Access to Beta Features Allow Inline Editing Allows users to launch beta features within Lucity Web. Allows users to use the Editable Grid option. Allowed to Broadcast Messages Change Default Application Colors Configure External Allows users to use the Broadcast Message tool within the Lucity Web Admin Portal. Allows users to change the application colors using the Customization tool in Lucity Web. Allows users to add/edit/delete links within the External Document Links tool.

81 Document Links Documents - Add Without Upload Rolling Log Run View Module List Allows users to attach documents to a record from its current location without uploading it to the Lucity Document Server. Note: Users must also have the Documents - Add permission for a module to attach any document. Allows users to Lucity Web's rolling log from within Lucity Web. Allows users to log in to Lucity Web. Allows users to see the Module tab in Lucity Web. 80

82 GIS PERMISSIONS GIS permissions control the use and configuration of map features across Lucity platforms. Admin Connection Strings SETTING NAME FUNCTION WHEN TURNED ON PLATFORMS General - Add Allows users to add new GIS connection strings. General - Delete Allows users to delete GIS connection strings. General - Edit Allows users to modify GIS connection strings. This permission is also required to access the Geodatabase Configuration tool in ArcCatalog. Run Admin Map Services Allows users to access the GIS > Connection Strings section of the Administration Tool. General - Add General - Delete General - Edit Run Allows users to add new GIS map services. Allows users to delete GIS map services. Allows users to modify GIS map services. Allows users to access the GIS > Map Services section of the Administration Tool. Admin Map Setup General - Add General - Delete General - Edit Run Allows users to add GIS maps. Allows users to delete GIS maps. Allows users to modify GIS maps. Allows users to access the GIS > Map Setup section of the Administration Tool. GIS System Configuration Run Allows users to use the Geodatabase Configuration, Show in Map Configuration, Update Geodatabase Value, Default Fields Setup, and Update Show In Map Flag tools in ArcCatalog.

83 GIS Viewer Run Allows users to run the Lucity GIS Viewer. GIS Web Map Run Allows users to run the Lucity Web Map. Lucity GIS Run Allows users to use the Lucity GIS tools in ArcMap. 82

84 MOBILE PERMISSIONS Mobile permissions control the use and configuration of several of Lucity's mobile and field applications. Android Tablet Product SETTING NAME FUNCTION WHEN TURNED ON PLATFORMS Run Allows users to activate and log into the Lucity Mobile application on an Android tablet. ios Mobile Run Allows users to activate and log into the Lucity Mobile application on an ios tablet or phone. Mobile Configuration Configure Location Tracking Mobile Offline Caching Setup Allows users to deactivate Location Tracking for themselves in Lucity Mobile. Allow Edits to Restricted Fields Browse - Exporting Change Help URL Field Definition Field Properties Filter - Advanced Filter/Browse - Delete Allows users to edit restricted fields. Administrators can define restricted fields in the field properties. Allows users to export parameters for a Browse function to a text file (Microsoft Excel or Lotus Notes). Allows users to change the location to which a module's Help button points. Allows users to edit field definitions. Allows users to edit field properties. Allows users to create advanced filters. Allows users to delete any previously saved Filter or Browse. Filter/Browse - Delete My Own Allows a user to delete any Filter or Browse that he or she created. Filter/Browse - Edit Others Allows a user to edit any Filter or Browse created by another employee.

85 General - Edit Global Browse Global Edits Popup Lists - Add Popup Lists - Caption Popup Lists - Delete Popup Lists - Edit Allows users to edit records in a specific module. Allows users to make a saved Browse accessible to all users. Allows users to mass-populate fields within a specific module without having to edit each record individually. Note: This functionality is available only in certain fields. Allows users to add new codes to the pop-up lists within a module. Allows users to change the captions on fields within a module. Note: This capability applies to all fields, not just pop-up lists. Allows users to delete codes from pop-up lists within modules. Allows users to edit the description for codes in pop-up lists within modules. Recalculate Allows users to run the Recalc tool within a module. Recalc is a special program that updates calculations in various modules. Rename Tabs Allows users to change the tab names in the modules. Reports - Add Reports - Delete Reports - Exporting Run Allows users to add custom reports. Allows users to delete reports from the report list. Allows users to export a report to a disk file, exchange folder, etc. Allows users to open the module. PDA Barcode Setup Run PDA Barcode Sync Allows users to launch the Mobile > Barcode Setup module in Lucity Desktop. This is a standard module in Lucity Desktop. All of the related permissions are explained on the Standard Module Permissions (on page 65) page. 84

86 Run Allows users to launch the Mobile > Barcode Synchronize process in Lucity Desktop. Work Orders for Android Run Allows users to activate and log into the Lucity Mobile Work application on an Android phone. AUTHENTICATION TYPES Lucity supports several ways for users to log into the Lucity system. authentication. Lucity Authentication Windows Authentication ArcGIS Authentication The following Lucity Applications support the following types of 85

87 Lucity Web Lucity Desktop Lucity Mobile Import & Update Lucity Tools in ArcMap Lucity Tools in ArcGIS Pro Lucity Admin Lucity Security Lucity Authentication This type of authentication is based on a Lucity Login and a password set and stored inside of Lucity. Lucity has built in password security features to maintain the integrity of your system. It is supported by all Lucity Applications. More information about Password Security (see "Lucity Authentication - Password Security" on page 94) How to Change a password in Lucity Security 1) Select a user in the User grid. 86

88 2) Click Edit User. The Edit user dialog will appear: 87

89 3) Click the Change Password button. This popup will appear: 4) Enter the new password, and re-enter it. o Click Show Password to see what is being typed. 5) Click Ok. The password is changed. 6) If you would like the user to be forced to change their password next time they login check the User must change password at next logon box. 7) The user can change the password after logging into Lucity Desktop ( or Lucity Web ( 88

90 Password Requirements Length: A Lucity login password must have at least one character; however, an agency may require a specific minimum/maximum number of characters. Complexity: Depending on preferences configured in the Lucity Administration Tool, an agency may require that user passwords contain three of the following: o o o o an uppercase letter, a lowercase letter, a number, or a special character. Frequency: Some agencies may require users to update their Lucity passwords after a designated number of days. In such cases, the system automatically prompts users to change their passwords. Simple Passwords: User passwords may be denied because they: o o consist of repeated values , AAAAAA; consist of a common sequence , ABCDEFG; o supply user information - logon, first name, last name, address; or o include one of these easily guessed passwords - password, qwerty, abc123, iloveyou, admin, letmein, qwertyio, football, baseball, welcome, 1qaz2wsx, dragon, master, monkey, login, princess, qwertyiop, passw0rd, p@ssword, p@ssw0rd, starwars, lucity, gba. 89

91 How to Change a Password in Lucity Web 1) Click the username drop-down in the top-right corner of the screen and select Change Password. The following pop-up appears: 2) Enter the Current Password. 3) Enter the New Password and enter it again in the Confirm New Password field. o Check the Show Passwords box to view what you're typing. 4) Click OK. The password is changed. 90