LN Normal User with limited company access

For normal LN users with limited access to companies in LN, these Infor Ming.le security roles are applicable:

  • Infor-SuiteUser - Access to Suite (mandatory)
  • LN-User - Access to LN icon and user data has User Type set to Normal User
  • DEFAULT _infor_ln - Basic access within LN, for example, change company
  • LN37X _infor_ln - Access to companies 370-375 (not a standard role)
  • LNBIRST-User - Access to LN Analytics icon
  • LNBIRST-Report Administrator - Access to all dashboards and reports withinLN Analytics

The LNBIRST-Report Administrator role can be used to see all content and to create dashboards and reports (allowing Modify Saved Expression and Edit Report Catalog).

To only see content, you can assign domain-specific roles, such as LNBIRST-Accounts Receivable, LNBIRST-General Ledger, LNBIRST-Job Shop, LNBIRST-Procurement, LNBIRST-Project, LNBIRST-Quality, LNBIRST-Sales, and LNBIRST-Service.

The TOOLS _infor_ln role is not required unless users must have access to tools sessions that are not covered by the DEFAULT _infor_ln role.

Role assignments in Infor Ming.le are synchronized to LN and result in users with the User Type set to Normal User in LN and these AMS assignments:

  • DEFAULT
  • LN37X

In company 0000, the users can access only these sessions, as determined by the DEFAULT role:

  • Companies (ttaad1100m000) (Display)
  • Sessions (ttadv2500m000) (Display)
  • ttdsk (Full Authorization with some exceptions)
  • ttstp (Full Authorization with some exceptions)

Users have Full Authorization for companies 370-375.

When changing companies in LN, only companies 0000 and 370-375 can be selected.

User access rights are displayed in the User AMS Companies (ttams4160m000) session, which LN Analytics uses to restrict access in Birst.

For normal users with limited access, these records are created in the User AMS Companies (ttams4160m000) session:

  • One record for company 0000 to start some basic tools sessions. The DEFAULT role enables users to start the Companies session and the Sessions session in company 0000.
  • One record for each company in which the user has rights to start sessions. The LN37X role allows users to start sessions in companies 370-375.
  • The related user AMS companies.