Skip to main content

I am still in the implementation of IFS APPS 10, with a planned go live in January.  The security system is extremely over compilated.  I am hoping that someone has built a group of generic Permission Sets by job role (CSR, AP Clerk, etc.) or by job function (order entry, receiving, shipping, etc.) that they would share or sell.  Every manufacturing company has very similar job roles, granted the responsibilities of each role is likely to vary from company to company, and tweaks would need to be made to generic permission sets, but tweaking is far more manageable than recreating the entire company from scratch.  Please let me know if anything exists in the market place. 

Hi @WFIDMORRISON ,

 

You didn’t mention which user interface you will be utilizing at your company.  Are you planning on using the web interface Aurena or desktop interface IFS Enterprise Explorer?   I ask because the permission sets are different between them.

 

We found it took us about 6 weeks to create permission sets for each department and assign them to users.  We took the approach of just  going into permission sets and granting read/write or read only permissions from the Presentation Objects By Navigator tab.  By doing this we were able to define permissions pretty quickly so users could start using the test environment and we’d have department heads send us tickets with what access was missing or needed to be removed.  

 

I’ve attached a sample of the permission set we defined for our customer service.  You’ll only want to try importing this in our development or test environment.  You will get errors because you’ll be missing custom fields, menus, enumerations and logical units we’ve created but I think it will still import just skip those areas.

 

We have  created about 285 permission sets in total between end user and functional role to give you an ideal.   We anticipate having to create just as many permission sets when we start creating permission sets to support IFS Aurena interface using projections.  We decided to separate the permission sets so when we upgrade to the next release of IFS which is Aurena interface only we just move the projection permissions.

 

Let us know if we can assist you further.

 

Regards,

William Klotz


Hi William, thank you for the CSR sample and the explanation of your approach.  We will have some power users using IEE, but the general population of users will be using Aurena.  Since we are new to IFS and they told us IEE would not be supported in the next release, we decided rolling our Aurena to the general users made the most sense.