# Role Concept

## How to create a Job Function

| ### What to do:
| In this example, a job is created and a user with a role and a project are assigned to this job!
| Select Manager > Permissions > Role Model > Job Functions. The Job Function mask is opened.
| Switch to Insert mode with the button .
| In the Identifier field, enter DOKU-DESIGNER.
| In the Description field, enter Access rights of USER1 as design engineer of the FastViper project.
| Change to the to User field.
| Click the button . The User list (No Insert) is opened.
| Select the USER1 entry and select the Take entry option of the context menu.
| If USER1 is has not yet been created in the system (user is unknown), create the user or select one of the test users.
| Please note that instead of a user it is also possible to assign a job function to a group (or Group field)!
| Change to the with Role field.
| Click the button . The Roles list is opened.
| Select the DOKU-USER entry and select Take entry from the context menu.
| Filling the or Group field and the with Role field of the Job Function mask is the only way to assign a role to a group!
| In the Valid from field the current date will be set automatically. In the Valid until field the date will be set to: 01/01/3000 00:00:00. Both dates can be modified, but make sure the date in the Valid until field is later than in the Valid from field. Otherwise the system will throw out an error message. Since the job function of USER1 in this example is to be restricted to the FastViper project, you need to specify several additional parameters. Restrictions to a specific project are not evaluated unless the EDB-ROL-ACTIVE configuration parameter is set to 2.
| Change to the Project field.
| Click the button . The Project list is opened.
| Select the FastViper entry and select Take entry from the context menu.
| If the FastViper project is not yet available, you may wish to define it in this mask.
| To save the entry click the button .
| Select Reload from the context menu to activate the settings.
| Please note, that it is generally possible to create a job function without a project assignment. Since in this case a user has access to all objects, project independent working is enabled. In order to prevent project independent working, e.g. for security reasons, the settings necessary can be customized!
| Deactivating project independent working
| Additionally or alternatively, you may restrict the job position to a specific department. To restrict the job position in this way click in the or Organization field and select an organization from the Companies/Departments list.
| Restricting a Job Function