Authorization refers to what users can access. Authorization to use the Unifier application is based on permissions. You also have super-user, the Administrator. Grant authorization carefully to all appropriate Primavera Unifier users.
Administrators: There are different types, or levels, of Administrators in Unifier, their responsibility vary from (but not limited to) end-to-end administration of the Unifier to administration the company functions. See Administrators in Unifier.
Permissions: Unifier offers a flexible yet powerful permission-based security system, as opposed to role-based security. Role-based security by definition limits the user to a fixed set of functions or tasks. With permission-based security, access to all modules, functions and tasks in Unifier is controlled by granting each user any combination of permissions. These permissions consist of the ability to access specific Unifier tasks, and to perform specific actions within those tasks, such as create, modify, and view. See Permission-Based Security in Unifier and Managing permissions and access control. See Permission-Based Security in Unifier and Managing Permissions and Access Control.
Groups: Security groups make it easier for administrators to assign permission sets to multiple users at the same time. User groups can be used to group users who will be using the same functionality in Primavera Unifier and assigned the same Permissions. Anytime a new person comes onto the project or shell, administrator can assign them to the appropriate groups and their permissions will be set automatically. See User Administration.
For more information on user authorization, refer to the Unifier Security Guide for On-Premises.