Department Level Security uses Department Access Functions (DAF) to enhance your ability to control screen access security at the department level in the M5 System. Existing Department Groups are used to select the departments where you want to implement this additional security.
Three codes are enabled with Department Level Security: units, departments, and employees. The Department Access Function (DAF) Code Maintenance frame will determine the codes that are assigned to each frame that is enabled with Department Level Security. This frame works with the Department Group/DAF Maintenance frame to determine how each code will control the Update, Read Only and None access levels to particular department groups.
Configuration of Department Level Security
Department Groups
Department Groups allow for departments to be grouped together so that users can access each other's records. If the department is not in a user’s Department Group, the user will not be able to view employees, departments and units that belong to that department. The User tab on this frame shows which database users are allowed to access the Department Group.
Department Access Function Maintenance
The DAF Code Maintenance frame is used to create codes for functions related to system activity. The codes created on this screen will be assigned to the URL in Frame Maintenance that they are related to. For example, a code called Work Order can be assigned to all Work Order based frames that are department level security enabled; not all frames are. After the Department Level Security function code is created, its control on the Work Order function is configured on the Department Group Level Security page.
Dept Group/DAF Maintenance
The Dept Group/DAF Maintenance frame allows the Department Level Security codes to be configured for each department group according to Using and Owning departments. For example, a department group Housing can be restricted to updating only the vehicles belonging to their Using Department. If desired, you can set it so that Housing can't even view any other Using Department's vehicles.
Each Department Level Security code created will be listed and the choices for both Using and Owning departments are: update, read only or none.
Frame Maintenance
The Frame Maintenance frame has been modified to incorporate the Department Level Security codes. It can associate the DAF codes to the appropriate URL where the added department level security should reside. To add a Department Level Security Code, you may choose from the valid list of codes. Once Department Level Security has been added to the URL the additional security is in place. The DAF Enabled and Dept Access Function filters are available on the URL lookup screen.
Once a frame is enabled with Department Level Security, the user will receive this message if their access to a unit, employee or department is blocked by the department level security code.
Last Update: 06/10/2016
NOTE: To view a list of System Flags and Role Privileges that may impact this screen, hover over the screen title in M5 to display the bubble help/tooltip. At the bottom of the bubble help/tool tip, there is a Settings hyperlink. Click that hyperlink to display the list of flags and privileges.
Additional training and technical documents on this subject may be available in the Resource Files area.
