Security Guide for Siebel eBusiness Applications > Addendum for Siebel Financial Services > Basic Access Control for Siebel Financial Services >

Administering Access-Group Access Control

Access-group access control is administered as documented in other sections of this guide with the following exceptions. The following sections augment the sections on administering various party types.

Associating Access Groups with Data

The procedures for associating an access group with a catalog or category differ from the documentation in other sections of this guide.

Associating an Access Group with a Catalog

By associating an access group with a catalog of master data, you grant access to the data in the catalog to individual users in the access group.

NOTE:  For a catalog and all of its categories to be visible only to the access groups associated with it, the catalog's Private flag must be set.

To associate an access group with a catalog

1. From the application-level menu, choose Navigate > Site Map > Administration - Catalog > Catalogs.

   The Catalogs list appears.

2. Select a catalog.
3. Click the Access Groups view tab.

   The Access Groups list appears, which shows the access groups associated with this catalog.

4. In the Access Groups list, add a new record.

   A pop-up list appears that contains access groups.

5. Select an access group, and then click Add.

   The access group appears in the Access Groups list.

6. Complete the following fields for the access group you add, using the guidelines provided in the following table, and then step off of the access group record to save the record.

   Field	Guideline
   Admin	Set this flag to allow users in this access group to administer the catalog.
   Cascade	Set this flag to automatically associate this access group with the catalog's descendant categories (child, grandchild, and so on). The resulting behavior is that users in the access group have access to the data in the descendant categories.

You can disassociate an access group from a catalog similarly.

Associating an Access Group with a Category

By associating an access group with a category of master data, you grant access to the data in the category to individual users in the access group.

NOTE:  For a category and all of its subcategories to be visible only to the access groups associated with it, the category's Private flag must be set or the Private flag of the catalog or a category from which the category descends must be set.

To associate an access group with a category

1. From the application-level menu, choose Navigate > Site Map > Administration - Catalog > Catalogs.

   The Catalogs list appears.

2. Drill down on a catalog name.

   The Categories list for the catalog appears.

3. Click the Access Groups view tab.
4. In the Access Groups list, add a new record.

   A multi-value group appears that lists access groups.

5. Select an access group, and then click Add.

   The access group appears in the Access Groups list.

6. Complete the following fields for the access group you add, using the guidelines provided, and then step off of the access group record to save the record.

   Field	Guideline
   Admin	Set this flag to allow users in this access group to administer this category.
   Cascade	Set this flag to automatically associate this access group with this category's descendant categories (child, grandchild, and so on). The resulting behavior is that users in the access group have access to the data in the descendant categories.

You can disassociate an access group from a category similarly. When an access group is disassociated from a category, it is automatically disassociated from all of the category's descendant categories.