About user access rights

To access Visma.net ERP, users must pass authentication to confirm their identity (see: About user accounts in Visma.net ERP).
Then users pass authorisation to determine their access rights to the system resources, such as workspaces and windows.
Users can access only the resources they are allowed to use and perform only the actions they are authorised to based on their access rights.

In this topic, user access rights in Visma.net ERP are described.

Configuration of user access rights

You need to perform the following steps to set up access rights to system resources for users in Visma.net ERP:

1. You create user roles in the User roles (SM201005) window according to the responsibilities of your organisation' employees who will work with Visma.net ERP.
   For details, see: About role-based access.
2. You set up access rights for user roles to Visma.net ERP resources, depending on the tasks performed by users with these user roles. For details, see: About access rights for roles.
3. You assign user roles with user accounts to provide users of your Visma.net ERP instance with access rights to system resources.
   You can do this in two ways:
   • To assign multiple users a selected role, use the User roles (SM201005) window.
     For example: You use this way when you have created a new role and want to assign it to existing users.
   • To assign multiple roles to a selected user, use the Users (SM201010) window.
     For example: You use this way when you have created a new user account and want to assign it existing roles.
     User account configuration is described in About user accounts in Visma.net ERP.
4. Optional: You use user types to simplify the assignment of user roles to users.
   

Ability to track access rights

You can track access rights to different objects by using the following windows:

• Access rights by window (SM65170S)
  Gives you the ability to build a report to view access rights by each system object (a workspace, and a window).
• Access rights by role (SM65150S)
  Gives you the ability to view access rights by each user role.
• Access rights by user (SM201060)
  Gives you the ability to view the access rights of each user to every system object.