IFS users and security roles

Standard security roles are provisioned automatically upon adding EPM Administration to Infor OS Portal and aligned with standard Infor EPM groups:

Infor OS security roles	Groups
Infor System Administrators	Administrators
BI Administrators	Administrators
BI Power Users	Power Users
BI Viewers	Viewers

A user with the BI Administrators role can administer all applications.

To assign a user administration permissions to individual applications, assign the user to one of these application roles in the applications they are to administer:

• MasterRole: Enables viewing and editing of all content and administration of permissions and databases. This role is assigned all OLAP permissions.
• AdministratorRole: Enables administration of permissions.
• ViewRole: Assign the ViewRole on the EPM Administration application.

This section summarizes recommended guidelines for managing security roles.

• In Infor OS Portal Security, ensure that Infor EPM users' email address are specified. Without an email address, users cannot access Infor EPM.
• Use Infor OS security roles to manage application role assignments and centralize access across Infor applications. Use pre-delivered standard security roles.

  For more information, see Using Infor OS security roles to grant users access to the EPM applications.

This section describes supported constraints and known restrictions in security roles.

• Assign users the minimum required security roles. Additional roles increase the amount of data transferred during sign-in.
• Avoid creating security roles for Infor EPM data roles, as Infor EPM may require a large number of them.