The User Master-Role is a table (md_user_role) in the User Management System (UMS). This table defines the roles that a user is assigned. The roles determine the views a user can access. For example, if a user requires access to the AP, AR, and GL views, then this user is assigned the AP, AR and GL roles in the User Master-Role table. Note: The system combines the existing permissions for a resource. For example, if one role contains a resource without Update permission and another role contains the same resource with Update permission, and both roles are assigned to the same user, the user will inherit the update Permission.

When a new user is created, the user is automatically assigned 2 roles:

1. Personal role
2. ums_user role

The Personal role includes the following:

• The system creates a record in the 'User Master-Role' and 'Role Master' tables to associate the Personal role to the user. Note: Personal roles cannot be modified or deleted in the User Master-Role or Role Master modules.

• The Role name is the same as the User Name assigned in the User Master.

• When the user record is deleted through the User Master module, the system automatically deletes the Personal role.
  • Records in the User Master-Role table and Role Master table are deleted.

• When Personalization is used to create a view, the view is assigned to the user through the Personal role.

• Each user has an associated personal user menu, the My Views folder.
  • When a user record is created, the system automatically creates the user's My Views folder.
  • When a user record is deleted, the associated My Views folder is also deleted.

The ums_user role includes the following information:

• The ums_user role provides limited UMS access to all users. For details on the UMS access provided by this ums_user role, click here.

• The ums_user role can be deleted from the user by the system administrator. In the same way, the ums_user role can be manually added to the user (if it was deleted). Caution: Although you have the ability to delete the ums_user role, you should NOT do this as the user will lose access to their menu system.

• The system administrator can modify the permissions associated with the ums_user role using the Role Master-Permission module.

During the deployment of PointForce iTopia, the specialized user 'system' is created. This user has the following roles:

• ibis_administrator - full access to all views, full access to the UMS modules and limited access to the Metadata Administration functions.
• ums_user - limited access to the UMS and Metadata Administration modules.
• system - personal view created automatically by the system (with the role name being the same as the user's name)

PointForce iTopia offers 'pre-canned' roles for all other users. A listing of these roles is available in the Role Master-Permission module, with details of each role available in the Role Master-Permission Summary module.

• The 'pre-canned' roles include the following examples:
  • ibis_ap
  • ibis_ar
  • ibis_gl
    ... etc.

• You can also get a listing of these roles from the "users_roles_licenses_attributes" Excel spread sheet provided by PointForce on the 'Role Contents' and 'Permission Grid' tabs.

The following fields are available on the User Master-Role page and are based on the order in which they appear in the grid on the search page:

• User Name - displays the user's name that is logged into iTopia.

• Full Name - displays the user's full name.

• Role Name - displays the roles assigned to the user.

• Description - the description of the role for the current record.

• Is Personal - if the role is a Personal role, this field displays a Yes value. If the role is not a Personal role, this field displays a No value.

For information on the functionality of each button on the User Master-Role Search Criteria Results/Grid page, click here.

User Master-Role Details Page

The following information displays on the detail page of the User Master-Role:

• In the Main Context (header) section:
  • User Name - displays the User Name associated with the detail record selected.

  • Role Name - displays the Role name associated with the detail record selected.

  Note: You cannot modify information on the Detail page. You must delete the record and then create a new record with the correct user name/role name information.

  Note: If you open the details page for a personal role, the following message displays: "A Personal Role cannot be modified." The Delete button is not available.

The Related section at the bottom of the page contains links to related resources for the current record. The following links are available:

• User Master
• License
• Attribute
• Restriction
• Permissions Summary

For information on the functionality of each button on the User Master-Role Details page, click here.