User group settings in M3 Graphical Lot Tracker

Regardless of the security method that is used in M3 Business Engine, the functions that are associated with the user in M3 Business Engine become the available user groups in the Application Settings panel. This way, application settings that control system behaviors in M3 Graphical Lot Tracker can be limited by user group, thus regulating user access.

For example, access to one or more reports is granted or denied based on the user’s group value. Additionally, the ability to perform specific searches, access to data, or the ability to update the trace line can be limited by user group.

These default user groups, which come from predefined roles in M3 Business Engine, are included in M3 Graphical Lot Tracker:

  • The GLTADMIN group is used for administrators.

    This role has full system access to M3 Graphical Lot Tracker. Users with this role in M3 Business Engine can copy and edit application settings for the other defined roles and can limit user access to the system as required.

  • The GLTCUST group is used for customers.

    This role has very limited access to M3 Graphical Lot Tracker. Customers with this role in M3 Business Engine can access functions such as predefined searches and reports in M3 Graphical Lot Tracker. By default, the other features in M3 Graphical Lot Tracker are disabled for this role.

    Users with the GLTADMIN role can revise other settings for the GLTCUST group as required.

To maintain user groups, use the Application Settings panel. To access this panel, select System Administration > Application Settings.

Note: A user in M3 Graphical Lot Tracker can belong to only one group. If a user belongs to several groups in M3 Business Engine, then the first group that is found is used. If no specific application setting is defined for a user group, then the default value is used for this setting.

Scenario for user groups

In this example, a user has the GLTSALES role in M3 Business Engine, but does not maintain any production-related data. Therefore, this user should not have access to the M3 Graphical Lot Tracker searches that are related to production. To restrict the user’s access to production search, complete these steps:

  1. For M3 Business Engine roles that are to be authorized in M3 Graphical Lot Tracker, set the .M3SYS:AuthorizationProgram application setting to SES400.
  2. For the .M3SYS:Function_Cat and .M3SYS:Function_Component_Group application settings, specify the values that match the M3 Business Engine values for the function that is associated with this user role.
    Note: All roles must have the same values for the function category in M3 Business Engine.

    For the component group, specify GLT, which corresponds to M3 Graphical Lot Tracker user groups.

  3. Associate the GLTSALES role with a function in M3 Business Engine whose function category and component group settings match the values that have been defined in the previous step.
  4. Upon update of the trace line, the new function is generated by M3 Graphical Lot Tracker as a new user group value.

    In the Application Settings list, the setting for the production search is .INTERFACE:SEARCH_PRODUCTION.

  5. Copy this setting from the default user group to the new group that is associated with the GLTSALES role.
  6. To set the Enabled/Disabled flag of the setting to Disabled, clear the Enabled/Disabled check box and confirm the copy.

    The next time the user logs in or refreshes the session, the user cannot select Search > Production in the menu pane anymore.