Controlling User Visibility & Access Rights in ManagePro

Top Previous Next

 

Visibility and Editing rights are individually assigned to each user using the right-click menu option User Access found in the People and Meetings View.    User access rights are role-based and set up by the ManagePro Administrator for each user accessing the database.  The goal of role based user access rights is to provide your organization with the flexibility to manage who has visibility and capability to write to records in the ManagePro database.

In short, user access rights in ManagePro are defined by Visibility and Editing Rights, and are set up for each user by first highlighting that user in the People & Meetings tab, then selecting the right click “User Access” option, and then selecting from the drop down options under Visibility and Editing Rights in the larger User access window.  The Visibility drop down options establish a role governing what records are visibile to the user, and Editing Rights grants the level of editing rights to which the records the user has viewing or visibility rights.

In addition, the access to Primary Views and Record Details Views can also be specified for each user. This is addressed in the View Access Section of the User Access Dialog window and very useful when wanting to simplify the number of view options able to users.  The ability to hide or show views is also an Administrator function.

Before defining the specific Visibility and Editing Right roles, let’s review the fields found in the User Access Settings,

 

1.Enable Login:  No user access (visibility to records) is allowed without the Enabled Login box being checked.  Enter a password and confirm the password.  Note:  typically, the Administrator initially creates temporary passwords which can be changed once the User logs into ManagePro.   You can leave the password blank if no password is wanted, or if the password is reset, the program will automatically set the password to the word Pass.

 

2.Database Access:

 

EditingRights

Visibility:

Beyond viewing the records a user creates themselves, Visibility determines the user’s right to see records created by others.  To configure, first select one of the five User Access Visibility Roles which define what records the user will see or have visibility rights to (starting with just the records they create or are assigned to them, and can extend to the entire database).  Visibility roles include Administrator, Business Group, Direct Report,

DatabaseAccess

Enterprise and User.
 

In short, the Administrator role provides visibility to all records in the database, as well as the capability of configuring views and customizing the database (only available to the administrator role).
 
The Business Group role provides visibility to records the user created or is assigned to, as well as to all of the members of the business groups selected.
 
The Direct Report role provides visibility to records the user created or is assigned to, as well as to all of the individuals checked in the “Visibility on the following Users” grid.
 
The Enterprise role provides full visibility across the database, but no customization capability.
 
The User role provides visibility only to those records the user has created or is assigned to.

 
 
Editing Rights:
Next, assign Editing Rights for the user, given their visibility role (rights).  Editing rights to the records being viewed range from Read only, to Limited Editing to Full Editing rights. A quick definition of each Editing Right effect is listed below, followed by the effect of combining Visibility and Editing rights in the grid below.
 

 

Read-Only - all records are displayed in a read-only, no editing allowed format except where the user is the creator of the record.  Records in a read-only mode are displayed with a red lock in the far left column.   If a user with Read-only rights is assigned to a record, they only have read-only editing rights to existing data in that record, but they can add Progress Updates, To-dos, Documents, and Events as new input to the record.  If a user creates a new record, they have full editing rights to that record, as the Read-Only editing rights apply to only those records viewed by virtue of their role.

 

 

 

Limited Access – the limited access editing rights provides the ability to edit all fields for records the user has viewing rights, except for the title field and start and due date fields if they have been populated.  Limited access does not allow the user to delete a record or change its location in the outline hierarchy, nor promote, demote, copy, paste or import data into a record viewed with limited access.

 


Full Access – the Full Access editing rights provides the ability to edit, delete, and move all records viewed.  It essentially gives the user the same rights as if they were the original creator of the record.  Records in a Full Access mode are displayed with no lock in the far left column.  
 
Note that when users create their own record, they are granted full access rights to that record.  Limited access, like Read Only, applies to records viewed, but not created by the user.   Records in a limited access mode are displayed with a yellow lock in the far left column.

 

3. Visibility on the following Users:  This section is optional but enables visibility to selected users. Often times, organizations may want  Managers to have visibility to their Direct Reports, or an admin to have visibility to their manager’s records and calendar;  here the Administrator can make these assignments by clicking the checkbox in front of the name.  This area fits the Direct Report role best.

 

Visability

 

Business Groups:   If the Business Group role is selected for a user, this area is used to enable visibility to a selection of one or more business groups that have been defined in the database.  This provides visibility to all the records assigned to users that are members of that business group, and is useful when Managers function across multiple departments and require visibility to those records.

BusinessGroups

 

4.View Access: Controlling View access is as simple as expanding the + in front of the View name, and then checking or not checking the check boxes within the Primary Views Tab or Details View Tab to turn the display on or off for the selected user.

ViewAccess

 

Primary views are considered the main views visible throughout ManagePro just under the menu bar
The Details Views are visible when opening record (double-clicking), displays the record details

Note:  The Main Workspace or People & Meetings Primary views cannot be removed. These views require at least one sub-view selection. Sub-views are views accessible within the view.  Each Primary view has sub-views as shown in the example below the Main Workspace and sub-views.

ViewAccess1 ViewAccess2

 

To control Details Views,

Click the Details Tab
Uncheck the Detail Tabs you do not want visible
Click OK to Save the changes

 

ViewAccess3

 

Note: If Progress Updates, To-dos, and Events are unchecked, the user will not have access to the “User Data” icon on the Ribbon Control.
 
Active Directory:   If the Active Directory box is checked, ManagePro will upon launching check to see if the user has logged in via Active Directory.  If so, ManagPro will immediately launch the user into ManagePro without requiring a name and password entry.  Active Directory is a Microsoft product that allows organizations to centrally manage and share information on network resources and users while acting as the central authority for security. Active Directory logic will match up an MPro user with a Windows user and automatically login to the most recent database if found. See Active Directory for more information. 

ActiveDirectory

 

The table below defines the User Experience given the selection of Visibility roles and Editing Rights
 

Visibility

 

Administrator

Able to view all records in database, accept those marked private and not assigned to the Administrator

Enterprise Manager

Able to view all records in database, accept those marked private and not assigned to the Enterprise Manager

Business Group

Able to view all records assigned to members of the Business Groups for which the individual has been granted visibility as well as records to which the user is assigned or has created.

 

Direct Report

Able to view all records assigned to selected individuals, as well as records to which the user is assigned or has created.

User

 
Able to view records to which the user is assigned or has created.

Editing Rights

 

 

Full Access/Editing

1.Full Access editing rights provides the ability to edit any field, delete and move all records viewed.
2.Full import / export capability
3.Has full database utility and configuration management access (limited to Administrator role only)
4.Sees no red or yellow locks indicating restricted access (except those marked private)
5.All records created by a user are assigned Full Access editing rights, regardless of the overall visibility rights.
6.Cannot edit pre-existing progress records created by other users, unless they are the Administrator.

 

Limited Access/Editing

1.Able to edit any record’s field, except for the title or completed Start and Due Date fields.
2.Not able to change the position of records in the outline structure, nor delete a record that was not originally created by the user.
3.Records appear with a yellow lock, unless created by user (no lock).

 
 
Read-only Access/Editing  

1.Able to view or read records and their contents, but not able to edit existing data, delete or move a record.
2.If assigned to a record, has the added capability to add to the record by way of creating new progress updates, to-dos, events and documents, but cannot edit or add to existing records.
3.Records appear with a red lock, unless created by user (no lock).