MDO Enterprise Data Platform / Roles and Users / Setting Up Role Permissions

Setting Up Role Permissions

MDO works on the principle of role-based ownership. Administrators can control what actions users can perform and what information a user can access by assigning authorizations/events to a users role. Events control the activity a user with specific role can perform in the application. For example, by assigning the create event you are authorizing a user to create data.

Note: The following prerequisites are required in order to set up role permissions. 

  • A module has been set up (Refer to the module creation document here 
  • The required roles have been created. 

To assign events/permissions to roles, follow these steps:

  1. Click on the Settings icon at the top right corner on the Home page. 
  2. Click on Modules from the left menu bar > Select the relevant module.   
  3. Click on Security. 
  4. Search for the role to which you want to assign the events. 
  5. Select the events by clicking on the Assign/Unassign button against each event. 

 

Below is the list of events that can be assigned to a role. 

Event Name  Description 
Create  Enabling this permission for a role allows users with the role to create records in the selected module. 
Delete  Enabling this permission for a role allows users with the role to delete already existing records in the selected module. 
Change  Enabling this permission for a role allows users with the role to change existing records in the selected module. 
Approve  Enabling this permission for a role allows users with the role to approve workflow requests. 
Save And Draft  Enabling this permission for a role enables draft functionality for the role for the selected module. 
Reject  Enabling this permission for a role allows users with the role to reject workflow requests. 
Change Log  Enabling this permission for a role enables users with the role to view the Change Log information. 
 Summary  Enabling this permission for a role enables users with the role to view the summary information of a record for the module. 
Extend  Enabling this permission for a role enables users with the role to view extend a record to multiple hierarchies. 

Eg. Extend a record to multiple plants/Company Codes 

Scenario – A user wants to create a spare part in Plant B but find out that the material already exists in Plant A. In this scenario instead of creating the same material again in plant B. He/She can extend the existing material to the new plant.

Copy  Enabling this permission for a role allows users with the role to copy all information related to the record into a new record.  
List View   Enabling this permission for a role enables users with the role to view the list page of the selected module. 
Duplicacy Check  Enabling this permission for a role activates the duplicate check functionality for the role.
Assumption: Duplicate check rules are configured and activated for the module. 
 Activate  Enabling this permission for a role enables users with the role to activate a deactivated record. 
Deactivate  Enabling this permission for a role enables users with the role to deactivate a record.
Deactivated records cannot be modified by users. 
Deletion Log  Enabling this permission for a role enables users to view the deletion log details for a module. 
Mass Upload  Enabling this permission for a role enables users to mass upload records to the selected module. 
Mass Extend  Enabling this permission for a role enables users with the role to extend a record to multiple hierarchies simultaneously for the selected module. 
Mass Change  Enabling this permission for a role enables users with the role assigned to mass change records of the selected module. 
Workflow Log  Enabling this permission for a role enables users to view the workflow log details for a record of the selected module. 
Integration Logs  Enabling this permission for a role enables users to view the integration log details for a record. 
Print PDF  Enabling this permission for a role enables users to get all information related to a record in a PDF format. 
Edit & Reprocess  Enabling this permission for a role enables users to edit and reprocess a record in error for the selected module. 

This is primarily used during System Integration Testing. This can also be enabled for emergency data fixing in a production environment.  

Print  Enabling this permission for a role enables users to prinout all information related to a record. 
Form Validation  Enabling this event allows users with the assigned role to call on external services (API’s or RFC’s etc.)  to access and process data from a partially filled record to fill additional information within the record before a record is saved/submitted. 
Email  Enabling this permission for a role enables users to email all information related to a record to a specified email address in a PDF format. 
Create Reference Object  Enabling this permission for a role enables users to create records of other modules from the selected module. 

Note: A module reference id field referring to the target module must be present in the layout. This permission activates an “Add New” button next to the module reference field which can be used by users to create new records. 

Hierarchy View  Enabling this permission for a role enables users to view the creation hierarchy for a record. 
Delete Attachment  Enabling this permission for a role enables users to delete uploaded attachments for a record. 
ReSubmit  Enabling this permission for a role enables users to edit and resubmit a record which is in draft status. 
Excel Connect  Enabling this permission for a role enables users to use the Excel Connect functionality to mass process records for the module. 
Load Sheet  Enabling this permission for a role enables users to use the load sheet functionality to mass process records for the module. 
Audit Trail  Enabling this permission for a role enables users to access and view the audit trail information for a module.