Roles

 Previous  Top  Next

Configuration > Roles

A Role is a set of permissions that defines what operations a user can perform in CISPro Global. Roles are used to provide identical sets of permissions to multiple users without requiring an administrator to select individual permissions for each user account. Using Roles, an administrator can select a set of permissions, save it, and assign it to as many users as desired. Each of those users will have the same permissions.

Note: There should always be at least one role with the "All System Config Permissions (Global)" permission, because that permission allows configuring Roles & Permissions. See the table of permissions later in this topic.

Examples of Roles

The following are some examples of roles that are used to provide permission sets for common user types.

•Global Admin: has the ability to configure the system
•Site Admin: can configure the site to which the user belongs
•Receiver: can create containers
•Tester: can enter testing results
•Lot Approver/QA: can approve lots
•General User: can view materials and inventory, and dispense their own containers
•View Only: can view materials and inventory, but can not change data
•Dispenser: can dispense containers

The 'View Only' Role

The View Only role is intended for users who do not need to make changes to data, and who might log in with a shared account. Because of this, password expirations are ignored for any user whose role is named "View Only."

Configuring Roles

Role configuration consists of naming the role, selecting its type, setting a timeout value, and assigning permissions.

 

1.Log in as a global admin (a user with a role that has All System Config Permission)
2.Click the System Configuration link
3.Click the Roles link

Creating a New Role

1.Select Role > New Role from the page menu
2.Type a Name (required)
3.Type a Description (optional)
4.Select a Role Type*
5.Select the Only System Users Can Assign This Role check box if editing and assignment of this role should be available only to users who have the System permission (i.e., selecting this box prevents anybody without the System permission from modifying this role or granting it to a user)
6.Enter a Timeout in minutes

Timeout Settings The Timeout value is the number of minutes that a user's session can be idle before the user is logged out of CISPro Global. Timeout must be an integer of 1 to 4 digits. A timeout value of 0 will cause the session never to timeout.

7.Click Save

 

*There are two role types, Read and Write.  Read type users cannot perform any additions, modifications or deletions to the data (i.e., they are "view only" users).  Write type users may have very strictly constrained or very broad permissions, but can modify at least some aspects of the data.  Read type, Write type, and Total users are tracked separately in terms of the number allowed to be logged on concurrently.  (This is configured by your administrator).

 

Editing an existing Role

1.Click on the Role Name you wish to edit from the list at the left edge of the screen
2.Edit some fields (note that Role Type is not editable).
3.Click Save

 

Deleting an existing Role

Note that if the Role is currently assigned to a user, it can not be deleted (if the user attempts to delete a role that's in use, an error will be displayed).

1.Click on the Role Name you want to delete from the list at the left edge of the page
2.Click on the Role link at the top of the page to display a pull-down menu
3.Click Delete This Role
4.Click Yes at the Confirmation prompt

 

Assigning permissions to a Role

1.Click on a Role in the list at the left edge of the page
2.Click the Permissions link at the bottom of the page
3.Select all permissions to be granted to the role
4.Click Apply at the bottom of the page

Copying Roles

CISPro Global provides a large number of permissions to allow precise control over user access. Although this provides administrators with many options for determining who can perform specific functions, selecting all of the permission check boxes can be time consuming. To reduce the amount of duplicate work, CISPro Global can copy the permissions settings from one role to another.

1.On the Configure Roles page (System Configuration > Roles), select the role to which permissions will be copied
2.Click the Permissions link
3.From the drop-down list at the bottom of the page, select the role whose permissions will be copied to the current role.
4.Click the Copy from Role button

 

Note: The set of copied permissions will be effective when users assigned to the role log in.

Permissions

The following is a list of the permissions available in CISPro Global. Note that some permissions are On/Off type (Allow/Prohibit), while others have View/Create/Modify/Delete options. The difference is that Allow/Prohibit usually implies a workflow that is granted (for example, receiving is a "workflow," as it requires several steps to complete). View/Create/Modify/Delete implies that there are rows of data that can be edited individually (for example, editing the location or owner of a particular material container).

There is also a set of duplicate permissions that refer to "GMP." GMP Materials are controlled by release criteria (Standards), a feature of the CISPro Global Material Qualification Module.

Note: Permissions marked with an asterisk use the Material Qualification Module.

Permission Name

Permission Code

Description

All System Config

Permissions (Global)

system

Allows system configuration access to global setup such as business units, sites, workunits, locations, methods

All System Config

Permissions (Site-based)

system_site

Allows system configuration to site-specific items such as locations for site, workunits at site

Allow Synonym Editing w. Appr. Vendors

alloweditsyn

Allow user to edit synonyms that have been used by approved vendors

Allows converting GMP containers to Basic*

cont_gmp_convert

Allows converting GMP containers to Basic

Constituent MIL Permissions

constituent_mil

Allows user to View/Create/Modify/Delete constituent mil records

Container Move Request Basic

move_request_basic

Allows a user to request a move for a basic container

Container Move Request GMP*

move_request_gmp

Allows a user to request a move for a GMP container

Container Move Request

Worklist Access

move_request_worklist

Allows a user to access the Container Move Request Worklist

Container Permissions Basic

cont_nongmp

Create permissions is what allows receivers to create containers. Other permissions allow access to containers in the system based on their position.

Container Permissions GMP*

cont_gmp

Same as basic but applies only to containers received under a GMP standard (this is how GMP containers are created).

Container Properties

cont_properties

Allows user to View/Create/Modify/Delete properties for individual containers.

Container Transfer Basic

cont_nongmp_xfer

Allows a user to access the inter-site transfer mechanism for basic containers

Container Transfer GMP*

cont_gmp_xfer

Allows a user to access the inter-site transfer mechanism for GMP containers

Dispense Container (direct)

cont_general_disp

Allows users to dispense quantities from containers located at non-central group locations.

Dispense Container*

(from self-serve requisition)

cont_self_disp

Allows users to dispense quantities from containers located within self-serve inventory group locations.

Dispense Containers*

(from central requisition)

cont_central_disp

Allows users to dispense quantities from containers located within central inventory group locations.

Document Permissions

docs

Allows changes to the documents tab for a material

Locations Config

locations

Allows changes to a site's locations

Lot Properties

lot_properties

Allows view, create, modify permissions for properties assigned to lots or batches.

Manage Constituent Materials

mat_const

Controls View/Create/Modify/Delete of constituent materials. Modify and Delete require the Manage Materials (Globally Assessed) permission set.

Manage Materials

(Local)

mat_local

View/Create/Modify/Delete materials that have Local status level and were created at the user's site

Manage Materials

(Globally Assessed)

mat_global

Similar to (Local) but for materials which are at Globally Assessed status level.

Manage Materials

(Site Reviewed)

mat_site

Similar to (Local) but for materials which are at Site Reviewed status level.

Manage Packages

packages

Allows user to view/create/modify/delete the packages defined for a material (Suppliers link on the Containers tab for a material).

Manage Vendors

vendors

Allows user to view/create/modify/delete vendors on the Vendor Configuration page. Create and Modify allow user access from the configure packages page.

Maximum Inventory Level

Settings

maxinv

Allows a user to set Maximum Inventory levels by location for materials.

Methods Permissions*

methods

Allows users to edit/create methods

Orders - Complete

order_complete

Allows a user to complete an order

Orders - Create Carts of Items

order_create

Allows a user to create and add items to a cart

Orders - Submit GMP*

from Self

order_submit_gmp_self

Allows a user to place orders for GMP materials from his own cart only

Orders - Submit GMP

from Work Unit*

order_submit_gmp

Allows a user to place orders for GMP materials from any cart in his workunit (including his own)

Orders - Submit non-GMP

from Self

order_submit_nongmp_self

Allows a user to place orders for basic materials from his own cart only

Orders - Submit non-GMP

from Work Unit

order_submit_nongmp

Allows a user to place orders for basic materials from any cart in his workunit (including his own)

Package Approval

package_approval

When the Package Approval module is in use, with this permission users have the ability to approve packages for receipt.

Projects

projects

Allows user access to project configuration (requires the Projects module).

Properties

(for materials)

props

Allows users to define/change properties assigned to materials (material Properties tab)

Properties Config

props_config

Allows users to define what properties are available in the system (globally).

Receipt Lots (basic) Permissions

lots_nongmp

View/Create/Modify/Delete receipt lots created using research standards

Receipt Lots (gmp) Approval*

approval_gmp

Allows user to do first approval of receipt lot created using GMP standard

Receipt Lots (gmp) Permissions*

lots_gmp

View/Create/Modify/Delete receipt lots created using GMP standards

Receipt Lots (gmp) Reapproval*

reapproval_gmp

Allows user to do re-approval of receipt lot created using GMP standard

Receiving Basic Containers

rcvng_nongmp

Allows receiving (creating containers) without standards and with research standards

Receiving GMP Containers*

rcvng_gmp

Allows receiving (creating containers) with GMP standards

Reconciliation Collect

rec_collect

Allows a user to create a reconciliation and load the Reconcile Container Locations program onto a Videx.

Reconciliation Complete

rec_complete

Allows a user to close or cancel an existing reconciliation

Reports Permissions

reports

Allows access to configuring reports

Requisitions Permissions*

reqs

Allows user to create requisitions

Results Entry*

results_entry

Allows user to enter results for their workunit

Results Verification*

results_verify

Allows user to verify entered results for their workunit

Samples and Results

Modify/Cancel*

samples_edit

Allows a user to modify and/or cancel samples waiting to be collected, and to cancel results awaiting approval on the Results for Receipt Lot worklist

Samples Collect*

samples_collect

Allows user to collect samples for their workunit

Samples Deliver (Submit)*

samples_submit

Allows user to deliver samples for their workunit

Standards Approval GMP*

stand_gmp_aprv

User can approve GMP standards at own site

Standards Research*

stand_nongmp

User can View/Create/Modify/Delete Research standards

Standards Global*

stand_global

Allows user to View/Create/Modify/Delete Global Standards.

Standards GMP*

stand_gmp

User can View/Create/Modify/Delete GMP standards

Standards Properties*

std_properties

User can View/Create/Modify/Delete properties for standards.

Standards Regulatory

Information Drafting*

stand_sri_draft

The stand_sri_draft permission allows a user to view/create/modify/delete SRI records whose status is 'Draft,' or to change their status from Missing to Draft, but not to change their status to Reviewed.

 

With stand_sri_draft View, user sees 'SRI to Review' in home page task list.

 

With stand_sri_draft Modify, user can change set SRI status to/from Obsolete.

 

(Any user that had the stand_sri_draft permission in earlier versions of CISPro now has all four permissions.)

Standards Regulatory Information

Reviewing*

stand_sri_review

Allows the user to change the status of SRI records from Draft to Reviewed and back. Includes 'SRI to Review' in home page task list.

Standards Regulatory Information

Review Group Configuration*

stand_sri_reviewgroup

Allows access to SRI review group membership configuration.

Transfer/Dispose

For All Users At Site

transferdisposeall

With the Transfer/Dispose worklist, user can transfer and filter to all users at site

Transfer/Dispose

For All Users At Workunit

transferdisposewu

With the Transfer/Dispose worklist, user can transfer and filter to all users in workunit

Transfer/Dispose

For Self

transferdisposeme

With the Transfer/Dispose worklist, user can filter to worklist current user (self), and dispose only

View Waste Container Worklist

waste_list

Available only when the Waste Manager module is enabled.
Allows user to view Waste Containers Worklist

Waste Container Permissions

waste_cont

Available only when the Waste Manager module is enabled.
User can View/Create/Modify/Delete waste materials and containers

Work Unit Config

workunits

User can configure own workunit

Dispense containers "from Requisition"

cont_disp

Allow user to dispense from requisitions

Manage Asset Materials

mat_asset

View/Create/Modify/Delete Asset type materials

Merge Materials

mat_merge

Allow user to merge materials

Requisitioning in basic

reqsb

Allow user to create and manage requisitions