Update security roles for Configurable Features

After Configurable Features have been enabled through configuration parameter, the Configurable Features tab is enabled for each security role.

Before you start adding features to roles, it may be helpful to make a plan. You can generate a report or spreadsheet of all roles and their features using the Configurable Features By Role list. To access this list, open any role and select the Configurable Features tab. Click the View Configurable Features For All Roles link.

Note: 

With release 2025.04, you can use the Override Data Area action, to make configurable features for a role valid in the current data area only. Use of the Override Action is shown at step 10.

  1. Access security roles. In the Web UI, go to Security Administration > User Management > Role.
  2. Open a role record and select the Configurable Features tab.
  3. You can edit the Configurable Features for the current role on the Configurable Features tab. Select a feature to enable it or clear a feature to disable it for the role.
    or

    You can use the Configurable Features By Role list to enable or disable features for all roles in one view. For each feature, select its check box to enable it, or clear the check box to disable it for the role.

  4. Enable or disable configuration and personalization features.
    Security Configuration Enabled
    If enabled, the role can access the Configure Security console. This is the user interface only, so it doesn’t provide any access to the business classes, in other words, the actors still require the appropriate security roles and business classes. This does replace the SecurityConfigAccess_ST security class.
    Configuration
    If enabled, the role can access Configuration Console for application configurations. This replaces the GlobalUIConfigAccess_ST security class.
    Full Personalization
    If enabled, the role can access My Personalizations and the Personalize option and links in the Web UI. This replaces the PersonalizationAccess_ST security class.
    Limited List
    If enabled, the role can access the Personalize option on lists in the web user interface. This replaces the LimitedListPersonalization_ST security class.
    Landing Page
    If enabled, the role can create new landing pages using My Pages > Create New Page.
    Start Page
    If enabled, the role can see the Preferred Application field and set their own preferred default start page on User Settings. If disabled, the Preferred Application field is not visible to the user.
  5. Enable or disable data features.
    Export To CSV
    If enabled, the role can select the Export to CSV option on lists.
    Multithreaded Export To CSV
    If enabled, the Advanced tab is included in the Export to CSV actions.
    Export To PDF
    If enabled, the role can select the Export to PDF option on lists.
    Data Menu
    If enabled, the role can view the Landmark Data menu. Replaces the DataMenuAccess_ST security class.
    User Context Menu
    If enabled, the User Context option is enabled in the web UI. This feature allows users to switch enterprise group or organization. Most users do not need this functionality as they only work with one enterprise group or organization. However, this may be useful for administrators or power user roles. You must assign an actor to multiple enterprise groups or organizations in order for actor to switch between them.
    As Of Date
    If enabled, the role can set or clear As Of Date.
    Deleted and Future Records
    If enabled, deleted and future records can be viewed.
    Hide Search Field Options
    If enabled, the search field options, such as Equals, Contains, and Starts With, are hidden.
    AI Assisted Rich Text
    If enabled, the role can use the Rich Text Authoring feature on text editing forms.
    AI Summarization
    If enabled, the role can generate summaries of records in a list.
  6. Enable or disable reporting features.
    Create Report
    If enabled, the role can select the Create Report option on lists or in the user account menu.
    Share Reports
    If enabled, you can make reports or folders public or share them with an actor group. (Works with Create Report, Create Folder).
    Saved Searches
    If enabled, the feature to save searches is available.
  7. Enable or disable actions features.
    Actions On Inbasket
    If enabled, the role will see appropriate actions as actions on the toolbar of the Work Items list on Inbasket. If disabled, these actions do not display on the toolbar, so the role must open each work item in order to take action.
    Schedule Actions
    If enabled, the role will see the Schedule button for certain jobs and reports. This allows the user to create a scheduled action. Manage scheduled actions on My Actions.
  8. Enable or disable Spreadsheet Designer features.
    Query Data
    If enabled, the role can retrieve records using the Infor Spreadsheet Designer.
    Update Data
    If enabled, the role can update records using the Infor Spreadsheet Designer. If disabled, the role can query records only.
    Note: Update Data is only supported when Query Data is enabled. You cannot set Query Data to No and Update Data to Yes. While the system allows this configuration, Update Data without Query Data is not supported.
  9. If the changes you are making should be applied only to the role in the data area you are currently configuring, select Override Data Area.
  10. Save your changes.

    You and your users will have to log out and restart the user interface in order to see changes in configurable features.