Security Roles Used by Road Rager
After participating in the analysis that resulted in knowing what system access users needed and designing the security model, the Infor Lawson consultants and Road Rager's security administrators had a number of tasks to perform. These tasks are described in the following subsections.
Delivered roles
Road Rager security administrators worked with Infor Lawson technical consultants to determine if Road Rager could make use of Infor Lawson-delivered roles. A few of the roles were able to be used as delivered.
Name of delivered role | Gives access to |
---|---|
BATCH |
A role that provides access to data and utilities that batch users need. At Road Rager all power users were assigned this role. Infor Lawson system administrators who did not get assigned full security access will also be assigned the BATCH role. Access to batch jobs data and utilities is included in the delivered role, SuperAdminRole. In addition, all batch users must be assigned to at least one user group. You can, for example, create one group for all batch users or create multiple groups for batch users who work together. |
SuperAdminRole | A role that provides full access to the Infor Lawson Security Administrator. At Road Rager, this role is assigned to administrators who have the title Security Administrator, not Assistant Security Administrator. |
RMADMIN |
A role that gives access to the Resource Management Administrator. At Road Rager, this role is assigned to administrators who have the title Security Administrator and Assistant Security Administrator. |
Bookmark | Role that gives access to LOGAN product line data that all Lawson Portal users (and administrators) need. |
Custom roles
In the analysis phase of implementation, Infor Lawson technical consultants recommended that Road Rager create the custom roles shown in the table.
The security administrator created these using the Resource Management Administrator tool. He did this before he added users which enabled him to assign the roles to the users at the same time he added them to the system.
Name of custom role | Gives access to |
---|---|
OpMgr | This role includes classes to open up all of IT and AP. |
APMgr | This role includes classes to open up all of AP. |
APClkBiloxi | This role includes classes to open up AP to clerks who work in Biloxi. |
APClkBrown | This role includes classes to open up AP to clerks who work in Brownsville. |
ITDir | This role includes classes to open up all aspects of the system required for system administrators. (The Director needs access to everything workers in the department do.) |
SecurityAdmin | This role includes classes to open up all aspects of the system required for system administrators. |
AsstSecurityAdmin | This role includes classes to open the Resource Management administrator in order to add users. |
SysMaintEng | Needs wide-open access to system utilities to be able to run backups, install patches, perform database reorganizations, and so on. |
SWDev | This role includes classes to open up necessary AP data for reports. |
LawsonQueryToolsRole | This role gives access to GEN tables that users of Infor Lawson query products, like Lawson Add-ins for Microsoft Office need. At Road Rager, power users and managers, including those who do not use other Infor Lawson products, use Add-ins and have this role. |