Remove Permissions from Employees (tcsec1200m200)

Use this session to remove one or more permissions ( Authorization Policy, Authorization Role, and Assigned Rule) from a specific employee or employee groups.

Note: The value you select is based on the type of Permission that must be removed.

Field Information

Permissions

Remove Permissions of

Permission

The type of permissions you must set.

Allowed values

Authorization Role
Authorization Policy
Assigned Rule

Permission

The code of the policy, role, or rule.

Note: This value is based on the Type field.

Permission

The description or name of the code.

Remove Permissions From

If this check box is selected, you can remove permissions from a range of employee and employee group.

Users linked to AMS/Enterprise Modeler Roles

If this check box is selected, you can remove permissions from employee and employee group based on the related Authorization Management System/ Dynamic Enterprise Models roles.

For AMS roles

The employees defined with AMS role in the Role Assignments (ttams4120m000) session are considered.

For DEM roles

The employees defined with DEM role in the Employees by Role (tgbrg8120m000) session are considered. To determine the DEM employees, the actual (runtime) version of each user is used. For validating the role, LN performs a check for each user and based on the validation the user is added as an employee in the Remove Permissions from Employees (tcsec1200m200) session.

Based on the following, LN validates that one of the version is the actual version:
- If the selected user is defined in the User DEM settings session (tgbrg8163m000) with an existing Default Version, this user is added as employee.
- If a Run-Time Version is defined in the Runtime Version, Project Model and Optimization Phase (tgbrg0105m000) session for a company, which is also defined for this role in the authorization security session, this user is added as employee.
- If the Default for Companies Without Run-Time Project Models checkbox is selected in the Runtime Version, Project Model and Optimization Phase (tgbrg0105m000) session for a company with the Run-Time Version as one of the version for this user, this user is added as employee.

Note:

This field is enabled only if the Remove Permissions From field is selected.
If this check box is selected, the Employee, Employee Group, Employee Type, Department Type and Department fields are disabled.

Employee

The From and To fields define a range of: an employee.

Employee Group

The From and To fields define a range of: the employee groups.

Employee Type

The From and To fields define a range of: the Employee Type.

Department Type

The From and To fields define a range of: the Department type.

Department

The From and To fields define a range of: the departments.

Remove Option

Remove Option: If this check box is selected, the permissions are deactivated or deleted for the employee or employee groups.

Remove Permissions for

Contracts: If this check box is selected, permissions are removed from an employee or employee group for the contracts related processes.
Sales: If this check box is selected, permissions are removed from an employee or employee group for the sales related processes.
Warehousing: If this check box is selected, permissions are removed from an employee or employee group for the warehousing related processes.
Intercompany Trade: If this check box is selected, permissions are removed from an employee or employee group for the intercompany trade related processes.
Projects: If this check box is selected, permissions are removed from an employee or employee group for the projects related processes.
Production: If this check box is selected, permissions are removed from an employee or employee group for the production related processes.
Item: If this check box is selected, permissions are removed from an employee or employee group for the items related processes.
Invoicing: If this check box is selected, permissions are removed from an employee or employee group for the invoicing related processes.
Requisitions: If this check box is selected, permissions are removed from an employee or employee group for the requisitions related processes.
Service: If this check box is selected, permissions are removed from an employee or employee group for the service related processes.
Business Partner: If this check box is selected, permissions are removed from an employee or employee group for the business partner related processes.
Financials: If this check box is selected, permissions are removed from an employee or employee group for the financials related processes.
Procurement: If this check box is selected, permissions are removed from an employee or employee group for the procurement related processes.

Version Status after Removing

Version Status: The version status of the permissions.

Note: It is required to set the version status for a new permission to Active. By default, LN removes the permission and sets the version control to active in the Employee Authorization (tcsec1600m000) session. However, if the checkbox is cleared, you need to set the permission to active status manually.
Apply the Permissions: If this check box is selected, the permissions created are applied.

Note: This check box is enabled, if the Version Status field is set to Active.

Report

If this check box is selected, the permission report is printed.

Employees

Remove from Individual Employees

Remove from Individual Employees: If this check box is selected, permission can be removed from individual employees.
Employee: The code of the employee from whom the permission is removed.
Employee: The name of the employee.

Remove from Individual Groups

Remove from Individual Groups: If this check box is selected, permissions are removed from the individual employee groups.
Employee Groups: The employee group from which the permissions are removed.
Employee Groups: The description or name of the code.