Remove UR administrator role from system administrator

To secure your information from undue access, after system configuration, ensure that only the Universal Request (UR) administrator [sn_uni_req.ur_admin] role has access to sensitive information.

Antes de Iniciar

Role required: admin with sn_uni_req.ur_admin

Por Que e Quando Desempenhar Esta Tarefa

By default, a System Administrator also has a UR admin role and can access the UR information. Add UR Admin role to specific users who would work on the UR configuration for their respective services. The user with this role can make another user a UR admin based on the roles and responsibilities. After this step is complete, to secure your application, remove the UR administrator role [sn_uni_req.ur_admin] from the System Administrator [admin] role.

By doing so, you prevent the user with a default System Administrator [admin] role from viewing all the Universal Request information.

Nota:

Ensure that you have at least two users with the UR administrator role. If you assign only one person with the role and that person is deactivated, you no longer will have a user that can perform the UR admin duties.

Also, ensure that the same users have the System Administrator [admin] role to access the UR modules.

Procedimento

1. Log in as admin.
2. From User Administration, go to Roles (left navigation menu).
3. Click admin.
4. On the Contains Roles tab, click Edit.
   Nota:

   If you do not see the Edit button, change the Application scope to Global.
5. From the Contains Roles List column, highlight and move sn_uni_req.ur_admin to the Collection column.
6. Click Save.
7. Log out.