Entity and task restrictions setup

application database > User Rights > Restrictions > Entity and Task > Define link

IMPORTANT: the link is only active if the user has restricted rights

Purpose of window

In this window, you can configure detailed restrictions on Entities and their corresponding groupings (nodes).

Entity rights

Entity rights can be set on the page, divided into the following tabs:

Option	Description
Entity rights	The following attributes can be specified on each Entity: - Action type: include or exclude - Organization organization type Entity hierarchy nodes - Entity entity code - Insert data: enables data entry - Run submission tasks: - Generic list: Definition is done from the Generic Task List tab - Specific list - All - None - Run operational tasks: - Generic list: Definition is done from the Generic Task List tab - Specific list - All - None
Visibility	Specifies the Entities/nodes on which the user has view-only rights.
Contributor Node Rights and Consolidator Node Rights	Node type you can specify nodes and the level up to which the selected tasks should be applied - The current node - The node and all child nodes - Lowest children level - X-level children (levels 1 to 9) - All lowest elements - All child nodes - The node, all child nodes and all lowest elements Run operational tasks: - All users can perform all submission/approval tasks - Generic list In this case, the definition is made in the Generic Task list tab of the Entity and Task Rights definition window and is valid for all nodes with the generic list option active - Specific list in this case the definition is done via the Define link that appears next to the selection. This option allows you to restrict the user to specific tasks based on the node and/or the Entity - None none of the submission /approval tasks can be performed by the user. Run Submission tasks specifies whether the user is enabled to run submission tasks. Possible values are: - All users can perform all submission/approval tasks - Generic list In this case, the definition is made in the Generic Task list tab of the Entity and Task Rights definition window and is valid for all nodes with the generic list option active - Specific list in this case the definition is done via the Define link that appears next to the selection. This option allows you to restrict the user to specific tasks based on the node and/or the Entity - None none of the submission /approval tasks can be performed by the user

IMPORTANT: The system processes records in the same order in which they are entered. It is therefore important to pay attention to the sequence of entries and nodes—what is added later could invalidate what was entered earlier

Task rights: generic list and specific list

In Entity rights, task restrictions define which specific tasks within a business workflow a user is allowed to perform on the entities/nodes they are authorized for.

Task restrictions can be set as follows:

Option	Description
Run Submission tasks - All	The user can perform all submission and approval tasks
Run submission tasks - Generic list	The user can only perform certain submission and approval tasks defined in the generic task list tab.
Run submission tasks - Specific list	The user can only perform specific submission and approval tasks defined by the Define link, which appears next to the selection and allows the specific task list to be populated. This option allows you to restrict the user to specific tasks based on the node and/or the item.
Run submission tasks - None	The user cannot perform any submission and approval tasks.
Run operational tasks - All	The user can perform all operational, i.e. non-submission and approval tasks
Run operational tasks - Generic list	The user can only perform certain operational tasks defined in the generic task list tab , which can be configured via the *Define link.*
Run operational tasks - Specific list	The user can only perform specific operational tasks defined by the Define link that appears next to the selection and allows the specific task list to be populated. This option allows you to restrict the user to specific tasks based on the node and/or the item.
Run operational tasks - None	The user cannot perform any operational tasks.

Generic list definition methods

Two generic list definition methods are available:

Method	Description
By step	For each available Business Workflow, you can select the step, the entire task workflow, or the individual task the user is allowed to access.
By label	Different tasks, even across the different steps, can be grouped under a label. Thus, It is possible to select a specific label and restrict the user to the tasks associated with it.

Action buttons on this page

Method	Description
	Populates all tables in the database related to Entity rights as set in the window
Definition results	This window shows the list of configured restrictions. See Definition result