Create a security group

1. From Management, select Security Groups.

2. Under Tasks, click New Security Group.

3. In the Name and Description fields, enter information that uniquely identifies the security group to other users.

4. Under Allowed Access Time, establish the times during the day when users can access eTapestry. After you select the correct time zone for the users, select the checkbox under each hour of the day when they can log into the application.

5. Under Permission Types, select the checkbox in the row for each field to allow users to read, update, create, or delete the information in the database.

   • Read: Users can view the existing information.

   • Create: Users can add new the information.

   • Update: Users can change the existing information. If the Read checkbox is clear when you select Update, it selects automatically because users inherit the right to read data they can change.

   • Delete: Users can remove the information.

   When you select a checkbox and it is followed by dashes, the user inherits both rights. Review the following examples to understand how selecting or clearing a checkbox can automatically grant or deny other permissions when a dash appears.

   • User: Users can read and update, but cannot create or delete.

     Note: User permissions begin with dashes in the first two columns which grants read and update rights. To grant create and delete, you must manually select the checkboxes.

   • Persona: When Read is selected, users automatically inherit update, create, and delete rights. If you clear this checkbox, users do not have rights to the persona.

     Note: When you deny Read rights, users continue to view the data in some areas, such as the account header and in queries. To prevent this, implement the Advanced Security module. For more information, refer to Advanced Security.

   • Relationship: When the Update checkbox is clear, users can read and delete relationships, but cannot update or create them. The dash in the Create column means this right is automatically inherited by your Update checkbox selection. For example, if you select the Update checkbox, you grant update and create rights.

6. When you assign rights for the User Rights Admin permission, make sure you are aware of what each right grants the ability to do.

   Read:

   • View the list of approaches, campaigns, funds, letters, relationship types, and sticky note types in the defined field management area.

   • Use Defined Field Sets to create user defined fields.

   • Edit other user account preferences.

   • View the Rights page of other user accounts.

   • View security groups.

   Update:

   • Add and edit approaches, campaigns, funds, letters, relationship types, and sticky note types.

   • Use the Getting Started Wizard.

   • Edit or delete read only items.

   • Use Defined Field Sets to create user-defined fields.

   • Clone users.

   • Edit security queries.

   Read and Update:

   • Edit other user's Rights.

   • Update security groups.

     Note: If you select Read or Read and Update rights for the User Rights Admin permission and apply advanced security to security queries, the Read and Update rights are granted instead of the security query permissions.

   • Use the User Activity Report from Management, User Activity.

7. If you use the Advanced Security module, a section appears with Permission, Query, Grant, and Deny columns. To apply a security query to one of the account or journal permissions, click the drop down in the field to select the query. Next, select Grant to provide access to the data in the query or Deny to prevent access to it. For more information about security queries, refer to Advanced Security Queries.

   When you enable security codes, System Defined Fields, Security Rights also appears if you use the Advanced Security module. To provide users in the security group with access to data that uses the security code, select its checkbox. For more information about security codes, refer to Advanced Security Codes.

8. Under Home Tiles, you can grant access to any Home page tiles.

9. Under Home Page Tiles, you can grant access to any tile for account home pages.

10. To save the security group, under Tasks, click Save.