Permission

 

The Permission administration maintenance document is used to create new permissions or edit existing ones. The Permission Lookup allows you to search for and view existing permissions. You can view summarized information about the permission detail values as well as the roles that are currently associated with this permission.

The Permission Info section identifies the permissions with a unique system-assigned ID number, a template, namespace, name and description.

The Permission Details section identifies the permission values that KIM needs to make this permission function. These values vary greatly depending on the type of permission being created. It is highly recommended that users view similar permissions (those with the same Template ID) and discuss Permission Details with technical resources to ensure values are entered correctly.

caution.png

Extreme caution should be exercised when modifying existing permissions or adding new ones.  Even small changes can have application-wide consequences.  Changes should be made only after sufficient testing with your local configuration.  Typically, the Permission document does not route for approval and is only used by members of the System Manager or Technical Administrator roles to create new or modify existing records.

Document Layout

Figure 1476 Permission Administration Maintenance Document Example

 

Table 917 Permission Administration Maintenance Document – Permission Info & Details Sections - Field Descriptions

Field

Description

Permission Info

Permission Identifier

A numeric, system-assigned value that uniquely identifies the permission record in the database table.

Template Id

Select the Template this permission is associated with from the list.  Templates identify broad permission types.  Use the drop-down menu by clicking the down arrow to display the list, and then click on an item in the list to highlight and select it to populate the box with your selection.

Permission Namespace

Select the namespace option from the list to specify the associated module.  A namespace is an indicator that associates the permission with a particular application and module.  Use the drop-down menu by clicking the down arrow to display the list, and then click on an item in the list to highlight and select it to populate the box with your selection.

Permission Name

Enter a textual name for the permission as it is commonly referred to.

Permission Description

This may be the same as the Permission Name field.  It exists to allow for further explanation of the purpose of the permission.

Active Indicator

Required (defaults to 'Yes'). Change the default selection if you wish this permission to be inactive. Inactive permissions will be disregarded by KIM when doing permission checks. Select to make active, uncheck to deactivate.  Click within the checkbox to select the item.  A check mark appears within the checkbox to indicate the item is selected.  Click within the checkbox again to clear the mark and deselect the item.

Permission Details

Permission Details

The parameters associated with the permission (for example, sectionName=reviewComments).  Click within the text box (or press the tab  key from a previous field) to relocate the cursor to the field, and then type (or paste from virtual clipboard) to enter text in the box as necessary to provide the appropriate information.  Optional (though most permissions would require some details to be functional). Enter the permission details specific to this permission. Details should be entered as the name of the property followed by an '=' followed by the value of the property. When entering multiple details they should be separated by a hard return in the text box, such as:

componentName=IdentityManagementPersonDocument

 

Examples

Figure 1477 Permission Administration Maintenance Document Example Values

Common Features

This maintenance document includes the following features that are common to most KC maintenance documents:

Table 918 Links to Common Maintenance Document Component Instructions

Common Maintenance E-Doc Component

Cross-Reference Links To Usage Instructions

Document Header

link.png  For more information, see “Header Area in E-Doc Fundamentals.

Document Overview Section

link.png  For more information, see “Document Overview” on page 93 in Common E-Doc Tabbed Sections.

Notes and Attachments Section

link.png  For more information, see “Notes and Attachments” on page 94 in Common E-Doc Tabbed Sections.

Ad Hoc Recipients Section

link.png  For more information, see “Ad Hoc Recipients” on page 96 in Common E-Doc Tabbed Sections.

Route Log Section

link.png  For more information, see “Route Log” on page 97 in Common E-Doc Tabbed Sections.

Action Buttons

link.png  For more information, see  “Action Buttons” on page 71 in Selection, Entry and Action Tools.

Process

link.png

For information about searching for, initiating, editing, copying, submitting, saving, closing, canceling, and/or routing a maintenance document, see “Common Maintenance E-Doc Operations” in the Overview section.