FeneVision Permissions restrict users from performing actions they are not authorized to do and prevent them from seeing information they are not authorized to see. In order to configure, change, or revoke permissions, the user must belong to the FeneVision administrator group.
FeneVision Core
In the upper left corner of FeneVision Core, the user can modify system permissions across all screens using Security - Permissions.
The Permissions screen consists of three sections. Application Selection - List of all FeneVision applications with permissions. Users or Groups - List of the individual users who have been set up in the system and the groups to which particular users can belong. Permissions - List of permissions corresponding to the selected screen.
- Explicit Tab – This tab allows a permission to be explicitly enabled or disabled. Some permissions can also be ‘Hidden’, which hides the indicated field from this user. Only certain permissions that are directly tied to a field can be ‘Hidden’.
-
Effective tab – Shows the result of combining explicit permissions for the user and all groups to which the user belongs (available for users only). The precedence for combining permissions is: Group Permissions – Lowest privilege groups up to highest privilege groups. User Permissions - If set, user permission takes precedence over group permissions.
For example, if a user is in ‘Truck Driver’ group, and the ‘Truck Driver’ group does not have permission to access 'Order Entry' (but the specific user has it enabled) the effective permission for this user would show ‘Enabled’. However, if the user has no permission specified on the explicit tab, then it would fall back to the group permission; therefore, the effective permission for this user would be disabled.
Expand the CORE node in the Permissions screen to select individual screens for permission modification. Notice the CORE Shell node. If you don't find a permission in the screen you expect, then look through CORE Shell. Within individual screens, look for the icon to modify permissions for just that screen.
To change permissions, complete the following:
- Highlight the application on the left side of the screen.
- Select the user or group to be adjusted in the ‘Users’ or ‘Groups’ section of the screen.
- Select the ‘Explicit’ tab.
- Select the checkbox of each item to be enabled in the ‘Enabled’ column.
- Select the checkbox for each item to be disabled in the ‘Disabled’ column. By default, the ‘Administrator group has permissions to everything and everyone else will have all permissions disabled.
- Select the checkbox of each item to be hidden in the ‘Hidden’ column. Hidden items will clear the text and disable the field.
- The user must exit and reopen Core to refresh the permission changes.
FeneVision Opti
Users can modify permissions in Opti by selecting Settings - Permissions. The ‘Permissions’ screen consists of three sections. Left side of the screen – List of the screens within FeneVision Opti applications that have permissions. Users or Groups – List of the individual users who have been set up in the system and the groups to which users can belong. Permissions – List of permissions corresponding to the selected screen.
- Explicit Tab – This tab allows a permission to be to explicitly enable or disabled.
-
Effective tab – Shows the result of combining explicit permissions for the user and all groups to which the user belongs (available for users only). The precedence for combining permissions is: Group Permissions – Lowest privilege groups up to highest privilege groups. User Permissions – If set, user permission takes precedence over group permissions.
For example, if a user is in ‘Supervisor’ group, and the ‘Supervisor’ group does not have permission to access ‘Remakes’ (but the specific user has it enabled) the effective permission for this user would show ‘Enabled’. However, if the user has no permission specified on the explicit tab, then it would fall back to the group permission; therefore, the effective permission for this user would be disabled.
To change permissions, complete the following:
- Highlight the menu on the left side of the screen.
- Select the user or group to be adjusted in the ‘Users or Groups’ section of the screen.
- Select the ‘Explicit’ tab.
- Select the checkbox of each item to be enabled in the ‘Enabled’ column.
- Select the checkbox for each item to be disabled in the ‘Disabled’ column. By default, the Administrator group has permissions to everything and everyone else will have all permissions disabled.
- The user must exit and reopen Opti to refresh the permission changes.
Tips
- Initial Configuration: When configuring system permissions, it is useful to first configure user group permissions, and second configure individual user permission overrides.
- Groups: Utilize groups when you have a group of users that need the same permissions, for example the Truck Driver group. It is possible to customize FeneVision user security groups, however the task must be done by FeneTech Cyncly.
- Restart After Permission Changes: Restart the application after making changes to permissions.
- Precedence: The precedence for combining permissions is: Group Permissions – Lowest privilege groups up to highest privilege groups. User Permissions - If set, user permission takes precedence over group permissions.
- CORE Shell: Along with individual screens, don't forget to look in CORE Shell for permissions. Sometimes you can only control access to a particular screen (all or nothing), rather than controlling a specific button or action. Other screens like Order Entry have more robust permissions.
-
Permission Reports: By selecting the print icon in the top left corner of the Core - Security - Permissions screen, along with a group or employee selected, users also have the ability to view three reports.
- Group Members – The user can view the employees assigned to the specified group.
- Group Permissions – The user can view the permissions assigned to the specified group.
- Employee Permissions – The user can view the permissions assigned to the specific employee.
- Order Level Hold Policies: Can be used to filter in order maintenance when applied to orders, however customer level holds will not show in order maintenance. Customer level holds are only evaluated during the acknowledge process and no “customer hold applied” record is stored with the order to be used for filtering.
-
Individual Screens: Within individual screens, look for the
icon to modify permissions for just that screen.
-
Employee Setup: In Employee Setup, you can assign employees to security groups and assign individual permissions.
- Report Permissions: See Modifying Report Permissions
-
System Defaults: There are also system defaults that allow you to specify the behavior of the software. This is accessed in the upper left corner of FeneVision Core, using Security - Defaults
Examples
User Cannot Approve an Order Hold: In the Permissions screen, verify the following items.
Under Core - Policies, verify the policies the user must approve are enabled.
Under Core - System Permissions, verify the appropriate Approve Order Exceptions types are enabled.
Under Core - Order Entry, verify the user has the Add/Edit or Edit Only permission.
Enable Access to OptiGlass Stores: In OptiGlass - Settings - Permissions, enable the Settings\Stores permission.
User Cannot Unrelease in RMA Receipt Entry: Under Core - RMA Receipt Entry, verify the user has the Cancel permission.
User Cannot Remove Order Deposit Not Met Hold: Under Core - Policies, verify the user has Ack deposit threshold not met permission.
User Cannot Approve Shipping Hold Policy: In this case the hold was "Transfer shipment is required for order" when trying to ship a Truck. Verify the user has the following three permissions checked. Permissions - CORE - Order Entry - Ship To Location; Permissions - Policies - Transfer Shipment Required - Release route; Permissions - Policies - Transfer Shipment Required - Ship route
User Cannot Access CRM Screens: How can I give someone access to the contacts, companies and budget tabs on the CRM screen? Verify the user has CRM\Budgets, CRM\Companies, CRM\Contacts, CRM\Reports permissions under Core - Core Shell.
