Hi @FORBEE 

do you have an example for this case? Sometimes there exist dependencies between these screens. 

We were working on the shop floor workbench to make it view only and were getting the below errors.

When they got cleared and we reviewed the navigator a HR page had appeared where we could search for employee details.

This happens with different scenarios where access is being granted to screens we did not want.

I am hoping there is overview screen that would show any connections to the different screens or a way to hide them on the navigator. 

Thanks 

Where are you setting user permissions, we had to use IFS Enterprise Explorer to do this as couldn’t get the granularity needed in Aurena?  If you have access to IFS Enterprise Explorer it is still complex but you can at least see permissions at a lower level.  We were given access to some Technical Documentation that was somewhat helpful and if you are setting user permissions then IFS should provide you with the same;

Yes it is enterprise explorer he is using.

The consultant is not from IFS but we have an IFS rep on our project team. He says permissions are a minefield he does not touch as it is not his role. I think we have made a mistake by not contracting IFS to set the permissions and securities but that is well above my pay grade to make that decision. 

I will ask if they can supply any extra material or guides to help the consultant.

For example below you can see Purchase part is revoked. When it is granted it can grant access to other screens we don’t know until we search in the navigator. 

Thanks

Hi @FORBEE 

what you can do is to grant all these APIs in your permission set to prevent the error message. Because the screen you’ve granted need all these APIs to work.

But maybe you will get other error messages later.

For example:

When I was granting permission sets to a user the Technician told me to use the Projections tab for the granular detail, then assign the permissions set to the user (he was an IFS Tech and even he said it was a minefield but Projections are the lowest level of permission grants so you should be able to define permissions that don’t link to anything else there);

The projections are for Aurena. They shouldn’t have any impacts on IEE.

Did you try to grant the APIs? Without these APIs the permission set wouldn’t work.

Thanks for all the comments.

There does not seem to be a way to link what screens are opened automatically for access when a different one has been granted manually.

If we come across a solution I will post it.

Cheers