Appendix B
Resource Privileges
This appendix contains information on the administrative privileges associated with the BuyerXpert/SellerXpert resources.
The following sections are contained in this appendix:
Membership Privilege Tablesorganizations, organizational units, users, user groups, locations
*Accounting Code Privilege Tablessegment definitions, values
*Commodity Code Privilege Tablessegment definitions, values
Business Rules Privilege Table
Additional Information Fields (AIFs) Privilege Table
Units of Measure Privilege Tablessystem, organizational
Pricing Privilege Tablesprice lists, price adjustments
Payment Privilege Tablestypes and subtypes, instruments, terms
*Approval Privilege Tablesapproval matrix, model, delegation table, case
Shipping Privilege Table
Note
|
An asterisk (*) at the beginning of a chapter name/heading or at the end of a line indicates that the material applies to BuyerXpert only.
|
Membership Privilege Tables
Membership privilege resources include:
Organizations
Organizational units
Users
User groups
Locations
Table B-1    Admin Privileges for Organizations
ROLE
|
Create
|
Read
|
Update
|
Delete
|
superadmin
|
True
|
True
|
True
|
True
|
orgadmin
|
False
|
True, if resource is the org of the orgadmin.
|
True, if resource is the org of the orgadmin.
|
False
|
selfadmin
|
False
|
False
|
False
|
False
|
Table B-2    Admin Privileges for Organizational Units
ROLE
|
Create
|
Read
|
Update
|
Delete
|
superadmin
|
True
|
True
|
True
|
True
|
orgadmin
|
True, if resource being created belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
selfadmin
|
False
|
True, if selfadmin is manager of this resource.
|
True, if selfadmin is manager of this resource.
|
False
|
Table B-3    PrivilegesUsers
ROLE
|
Create
|
Read
|
Update
|
Delete
|
superadmin
|
True
|
True
|
True
|
True
|
orgadmin
|
True, if resource being created belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
selfadmin
|
False
|
True, if resource is selfadmin.
|
True, if resource is selfadmin.
|
False
|
Table B-4    Admin Privileges for User Groups
ROLE
|
Create
|
Read
|
Update
|
Delete
|
superadmin
|
True
|
True
|
True
|
True
|
orgadmin
|
True, if resource being created belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
selfadmin
|
False
|
True, if selfadmin is manager of this resource.
|
True, if selfadmin is manager of this resource.
|
False
|
Table B-5    Admin Privileges for Locations
ROLE
|
Create
|
Read
|
Update
|
Delete
|
superadmin
|
True
|
True
|
True
|
True
|
orgadmin
|
True, if resource being created belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
selfadmin
|
False
|
False
|
False
|
False
|
*Accounting Code Privilege Tables
Accounting code tables include:
Accounting code segment definitions
Accounting code values
Table B-6    Admin Privileges for Accounting Code Segments
ROLE
|
Create
|
Read
|
Update
|
Delete
|
superadmin
|
True
|
True
|
True
|
True
|
orgadmin
|
False
|
True
|
False
|
False
|
selfadmin
|
False
|
False
|
False
|
False
|
Table B-7    Admin Privileges for Accounting Code Values
ROLE
|
Create
|
Read
|
Update
|
Delete
|
superadmin
|
True
|
True
|
True
|
True
|
orgadmin
|
True
|
True, if resource belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
selfadmin
|
False
|
False
|
False
|
False
|
*Commodity Code Privilege Tables
Commodity code tables include:
Commodity code segment definitions
Commodity code values
Table B-8    Admin Privileges for Commodity Code Segments
ROLE
|
Create
|
Read
|
Update
|
Delete
|
superadmin
|
True
|
True
|
True
|
True
|
orgadmin
|
True
|
True
|
True
|
True
|
selfadmin
|
False
|
False
|
False
|
False
|
.
Table B-9    Admin Privileges for Commodity Code Values
ROLE
|
Create
|
Read
|
Update
|
Delete
|
superadmin
|
True
|
True
|
True
|
True
|
orgadmin
|
True
|
True
|
True
|
True
|
selfadmin
|
False
|
False
|
False
|
False
|
Business Rules Privilege Table
Table B-10    Admin Privileges for Business Rules
ROLE
|
Create
|
Read
|
Update
|
Delete
|
superadmin
|
True
|
True
|
True
|
True
|
orgadmin
|
True, if resource being created belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
selfadmin
|
True, if resource being created is a preference resource for selfadmin.
|
True, if resource belongs to selfadmin.
|
True, if resource belongs to selfadmin.
|
True, if resource belongs to selfadmin.
|
Additional Information Fields (AIFs) Privilege Table
Table B-11    Admin Privileges for AIFs
ROLE
|
Create
|
Read
|
Update
|
Delete
|
superadmin
|
True
|
True
|
True
|
True
|
orgadmin
|
False
|
True
|
False
|
False
|
selfadmin
|
False
|
False
|
False
|
False
|
Units of Measure Privilege Tables
Units of measure tables include:
System units of measure
Organization units of measure
Table B-12    Admin Privileges for System Units of Measure
ROLE
|
Create
|
Read
|
Update
|
Delete
|
superadmin
|
True
|
True
|
True
|
True
|
orgadmin
|
False
|
True
|
False
|
False
|
selfadmin
|
False
|
False
|
False
|
False
|
Table B-13    Admin Privileges for Organization Units of Measure
ROLE
|
Create
|
Read
|
Update
|
Delete
|
superadmin
|
True
|
True
|
True
|
True
|
orgadmin
|
True, if resource being created belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
selfadmin
|
False
|
False
|
False
|
False
|
Pricing Privilege Tables
Pricing tables include:
Price lists
Price adjustments
Table B-14    Admin Privileges for Price Lists
ROLE
|
Create
|
Read
|
Update
|
Delete
|
superadmin
|
True
|
True
|
True
|
True
|
orgadmin
|
True, if resource being created belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin, or if the org of the orgadmin is listed in the created for field.
|
True, if resource belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
selfadmin
|
False
|
False
|
False
|
False
|
Table B-15    Admin Privileges for Price Adjustments
ROLE
|
Create
|
Read
|
Update
|
Delete
|
superadmin
|
True
|
True
|
True
|
True
|
orgadmin
|
True, if resource being created belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin, or if the org of the orgadmin is listed in the created_for field.
|
True, if resource belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
selfadmin
|
False
|
False
|
False
|
False
|
Payment Privilege Tables
Payment tables include:
Payment types and subtypes
Payment instruments
Payment terms
Table B-16    Admin Privileges for Payment Types and Subtypes
ROLE
|
Create
|
Read
|
Update
|
Delete
|
superadmin
|
True
|
True
|
True
|
True
|
orgadmin
|
True, if resource being created belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
selfadmin
|
False
|
False
|
False
|
False
|
Table B-17    Admin Privileges for Payment Instruments
ROLE
|
Create
|
Read
|
Update
|
Delete
|
superadmin
|
True
|
True
|
True
|
True
|
orgadmin
|
True, if resource being created belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
selfadmin
|
True, if resource being created belongs to the org of the selfadmin.
|
True, if resource belongs to the selfadmin.
|
True, if resource belongs to the selfadmin.
|
True, if resource belongs to the selfadmin.
|
Table B-18    Admin Privileges for Payment Terms
ROLE
|
Create
|
Read
|
Update
|
Delete
|
superadmin
|
True
|
True
|
True
|
True
|
orgadmin
|
True, if resource being created belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
selfadmin
|
False
|
True, if resource belongs to system, or to selfadmin, or to orgadmin of selfadmin.
|
False
|
False
|
*Approval Privilege Tables
Approval resources include:
Approval matrix
Approval models
Approval delegation tables
Approval cases
.
Table B-19    Admin Privileges for Approval Matrix
ROLE
|
Create
|
Read
|
Update
|
Delete
|
superadmin
|
True
|
True
|
True
|
True
|
orgadmin
|
True, if resource being created belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin, or if the org of the orgadmin is listed in the created_for field.
|
True, if resource belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
selfadmin
|
False
|
False
|
False
|
False
|
.
Table B-20    Admin Privileges for Approval Model
ROLE
|
Create
|
Read
|
Update
|
Delete
|
superadmin
|
True
|
True
|
True
|
True
|
orgadmin
|
False
|
True, if resource name is associated with the org of the orgadmin.
|
False
|
False
|
selfadmin
|
False
|
False
|
False
|
False
|
Table B-21    Admin Privileges for Approval Delegation Table
ROLE
|
Create
|
Read
|
Update
|
Delete
|
superadmin
|
True
|
True
|
True
|
True
|
orgadmin
|
True, if resource being created belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin, or if the org of the orgadmin is listed in the created_for field.
|
True, if resource belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
selfadmin
|
False
|
False
|
False
|
False
|
Table B-22    Admin Privileges for Approval Cases
ROLE
|
Create
|
Read
|
Update
|
Delete
|
superadmin
|
False
|
True
|
False
|
True
|
orgadmin
|
False
|
True, if case belongs to the org of the orgadmin.
|
False
|
True, if case belongs to the org of the orgadmin.
|
selfadmin
|
False
|
False
|
False
|
False
|
Shipping Privilege Table
Table B-23    Admin Privileges for Shipping
ROLE
|
Create
|
Read
|
Update
|
Delete
|
superadmin
|
True
|
True
|
True
|
True
|
orgadmin
|
True, if resource being created belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
True, if resource belongs to the org of the orgadmin.
|
selfadmin
|
False
|
False
|
False
|
False
|