Employee Access Control Settings
All users must be assigned one and only one role and at least one filter set. You can also set rights and privileges for users on an individual basis when creating or editing user records for your company’s employees, subcontractors or guests.
This section gives an overview of the available settings relevant to configuring access control. Go to Administration > Global Settings > Users > Employees > [select an Employee] to review the available settings. For example:
-
User Access Removal — Only employees marked as active employees have access to OpenAir. See User Access Removal.
-
Application Options — Options in the Demographic tab control certain user privileges for the different OpenAir applications. See Application Options Overview.
-
Application Access — The Access Control tab can be used to control user access to specific applications. See Access Control Overview.
-
Filter Hierarchy — The Primary Filter Set and Filter set fields on the Demographic form as well as the Filter sets tab define what the user can see in OpenAir. See Filters Hierarchy Overview.
-
User Proxy — User proxy enables an authorized employee to use OpenAir as another employee with no knowledge of that other employee’s password. See User Proxy Overview.
User Access Removal
Only employees marked as active employees have access to OpenAir. To remove access to OpenAir for a particular user, either temporarily or indefinitely, clear the Active employee box on the Demographic form for this employee.
Application Options Overview
Certain user privileges can be granted or revoked from the Employee Demographic form. Scroll through the Employee Demographic form to review the options available.
In particular, you may enable users to un-approve or un-export items within OpenAir such as timesheets, expense reports, invoices, booking requests, project recognition transactions, and proposals. If the item follows the approval process functionality, an optional check box is available in the Demographic form to grant un-approve as well as un-export permission to an employee for the item. These permissions are controlled at the employee level only on the Employee Demographic form. They cannot be granted to a role.
These settings control approval and data export capabilities. They are sensitive and are used to support integration in many cases.