About operations with restriction groups

You create a restriction group to restrict the visibility of some system entities. You do the following:

1. You open one of the forms in the Manage node of the Row-level security workspace, which you can use to create restriction groups with the particular system entities you want to add.
   For the list of entities, see: About restriction groups in Visma.net ERP.
2. You enter a group name that reflects what the group limits visibility to.
3. You select the group type.
   
   For information about the types of restriction groups, see: About types of restriction groups.
4. If the group includes users, on the Users tab, you select the users that will be included in the group.
5. On the tab with the list of entities, you select the values of the entity that should be included in the group.
   
   (For example: If the entity is warehouses, you select the particular warehouses you want to include in the group.)
   
   Repeat this step for each entity type that you want to include in the group.
6. You save your changes.

If you do not want to apply the restrictions of some group to the system entities included in the group, you do the following:

1. You open the Restriction groups (SM201030) window.
2. In the Selection area, you select the restriction group you want to edit.
3. You clear the Active check box.
4. You save your changes.

   Restrictions configured in the group are no longer applied to the entities.

To ease the addition of new supplier and customers to restriction groups, you can specify a default restriction group for a supplier or customer class, so that suppliers and customers of the selected class will be included in the restriction group automatically.

You specify a default restriction group for a supplier class by using the Supplier classes (AP201000) window and for a customer class by using the Customer classes (AR201000) window.

You perform the following steps to specify a default restriction group for a supplier class:

1. In the Class ID field, you select the supplier class for which you want to specify the default restriction group.
2. In the Default restriction group field of the Default general settings section on the General settings tab, you select the default restriction group that will be used for the selected supplier class.
3. You click Apply restriction settings to all suppliers to include all entities of the class in the default restriction group.
4. You save your changes.

You perform similar steps in the Customer classes (AR201000) window when you want to specify a default restriction group for a customer class.

If you want to cancel the visibility restriction for entities of a supplier class, you can remove all class entities from a default restriction group as follows:

1. You open the Supplier classes (AP201000) window.
2. In the Default general settings section on the General settings tab, you clear the value in the Default restriction group field.
3. You click Apply restriction settings to all suppliers.
4. You save your changes.

In the Customer classes (AR201000) window, you can perform similar steps to remove customers of a class from the default restriction group.

\While addressing your everyday tasks, you may need to add users and entities to restriction groups that you have created and configured previously.

For example: Suppose that a new employee of your organisation should use accounts with limited visibility, or that new stock items have been added to the system and should be in a particular restriction group.

When you need to add an entity to an existing group, you perform the following steps:

1. In the Explore node of the Row-level security workspace, you open the window that displays restriction groups for the entity you want to add to the restriction group. For example: For a user, you open the Restriction groups by user (SM201035) window.
2. In the top part, you select the entity that you want to add to a restriction group.
   
   For example: In the Login field, you select Todd bloom.
3. In the table with the list of restriction groups, you select the unlabelled Included check box for each group in which you want to include the selected entity.
4. You save your changes.

After you have included the entity in the restriction groups, the system applies the visibility limitations to the entity.

Similarly, you can remove entities from a restriction group by clearing the Included check box for this group.