Specifying User Role Table and Field Access

You can configure user role access to apply a variety of table-level and field-level restrictions to all or selected tables in MRI.

MRI provides the following access options for tables:

▪ Full access—The role can add, modify, and delete all records in the table.

▪ View-only access—The role can access but not add, modify, or delete records in the table.

▪ Add access—The role can add records to the table.

▪ Update access—The role can update records in the table.

▪ Delete access—The role can delete records from the table.

▪ No access—The role cannot access records in the table.

Note

Any combination of Update, Add, or Delete access also implies Full access rights for a table.

MRI provides the following access options for the fields within a table:

▪ Full access—The role can add, modify, or delete the field.

▪ View-only access—The role can access but not add, modify, or delete the field.

▪ Hidden access—The role cannot access the field. The field is hidden from sight.

Note

You must have Modify Roles permissions to specify table and field access for a user role. Refer to Adding and Maintaining Users and Access Rights for more information.

Understanding Table and Field Access with Multiple Roles

A user belonging to multiple user roles has access to the most permissive combination of table and field rights. For more information and examples, refer to the Understanding Table and Field Access with Multiple Roles document.

Configuring Table and Field Access

To specify table and field access for a user role, follow these steps:

1. Go to Roles.

2. In the Database field, select the database that contains the role for which you want to specify table access.

Note

If you only have access to one database, it is selected by default.

3. In the left panel, select the role for which you want to specify table access.

4. In the right panel, click Tables.

5. Clear the Global Access check box.

6. To filter or sort the tables by access type, table name, description, or application, use the filter fields in the header row of the grid. For example, to work with General Ledger tables, enter GL in the Application ID filter field.

7. Use the information in the following list to continue.

Role Access Option	Action
Full access to all tables	In the header row, select the Full check box. The access type for all tables in the grid will be set to Full.
View-only access to all tables	In the header row, select the View only check box. The access type for all tables in the grid will be set to View Only.
Add access to all tables	In the header row, select the Add check box. The access type for all tables in the grid will be set to Add.
Update access to all tables	In the header row, select the Update check box. The access type for all tables in the grid will be set to Update.
Delete access to all tables	In the header row, select the Delete check box. The access type for all tables in the grid will be set to Delete.
Full access to a single table	Select the check box in the Full column for each table to which you want the role to have full access.
View-only access to a single table	Select the check box in the View Only column for each table to which you want the role to have view-only access.
Add access to a single table	Select the check box in the Add column for each table to which you want the role to have add access.
Update access to a single table	Select the check box in the Update column for each table to which you want the role to have update access.
Delete access to a single table	Select the check box in the Delete column for each table to which you want the role to have delete access.

8. To configure access to the fields within a table, follow these steps:

a. Ensure that the role has access to the table.

b. In the Field Access column for the table, click the plus sign to expand its fields.

Note

After field access has been set up, a circle appears around the plus sign .

c. To filter or sort the fields by name or description, use the filter fields in the header row of the grid.

d. Use the information in the following list to configure field access.

Note

If the role has view-only access to the table, only the View only and Hidden options will be available for its fields.

Role Access Option	Action
Full access to all fields	In the header row, select the Full check box. The system selects all check boxes in the Full column for all table fields.
View-only access to all fields	In the header row, select the View only check box. The system selects all check boxes in the Full column for all table fields.
No access to any fields	In the header row, select the Hidden check box. The system selects all check boxes in the Hidden column for all table fields.
Full access to selected fields	Select the check box in the Full column for each field to which you want the role to have full access.
View-only access to selected fields	Select the check box in the View only column for each field to which you want the role to have view-only access.
No access to selected fields	Select the check box in the Hidden column for each field to which you want the role to have hidden access.

9. Click Save.