Siebel Security Guide > Addendum for Siebel Financial Services > Basic Access Control for Siebel Financial Services >

Administration of Access-Group Access Control

This topic provides procedures for associating an access group with a catalog or category when you are using Siebel Financial Services applications.

Associating an Access Group with a Catalog

By associating an access group with a catalog of master data, you grant access to the data in the catalog to individual users in the access group.

NOTE:  For a catalog and all of its' categories to be visible only to the access groups associated with it, the catalog's Private flag must be set.

To associate an access group with a catalog

1. Navigate to the Administration - Catalog screen, then the Catalogs view.

   The Catalogs list appears.

2. Select a catalog.
3. Click the Access Groups view tab.

   The Access Groups list appears, which shows the access groups associated with this catalog.

4. In the Access Groups list, add a new record.

   A pop-up list appears that contains access groups.

5. Select an access group, and then click Add.

   The access group appears in the Access Groups list.

6. Complete the following fields for the access group you add, using the guidelines provided in the following table, and then step off of the access group record to save the record.

   Field	Guideline
   Admin	Set this flag to allow users in this access group to administer the catalog.
   Cascade	Set this flag to automatically associate this access group with the catalog's descendant categories (child, grandchild, and so on). The resulting behavior is that users in the access group have access to the data in the descendant categories.

You can disassociate an access group from a catalog similarly.

Associating an Access Group with a Category

By associating an access group with a category of master data, you grant access to the data in the category to individual users in the access group.

NOTE:  For a category and all of its subcategories to be visible only to the access groups associated with it, the category's Private flag must be set or the Private flag of the catalog or a category from which the category descends must be set.

To associate an access group with a category

1. Navigate to the Administration - Catalog screen, then the Catalogs view.

   The Catalogs list appears.

2. Drill down on a catalog name.

   The Categories list for the catalog appears.

3. Click the Access Groups view tab.
4. In the Access Groups list, add a new record.

   A multi-value group appears that lists access groups.

5. Select an access group, and then click Add.

   The access group appears in the Access Groups list.

6. Complete the following fields for the access group you add, using the guidelines provided, and then step off of the access group record to save the record.

   Field	Guideline
   Admin	Set this flag to allow users in this access group to administer this category.
   Cascade	Set this flag to automatically associate this access group with this category's descendant categories (child, grandchild, and so on). The resulting behavior is that users in the access group have access to the data in the descendant categories.

You can disassociate an access group from a category similarly. When an access group is disassociated from a category, it is automatically disassociated from all of the category's descendant categories.