user manual access control model

11
Latest update: November 2021 User Manual Access Control Model

Upload: others

Post on 14-Jul-2022

7 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: User Manual Access Control Model

Latest update: November 2021

User Manual

Access Control Model

Page 2: User Manual Access Control Model

Page | 2

Table of contents

1 Introduction 3

2 Create a user 4

2.1 Simple rights 5 2.2 General / Feature Settings 6

3 Assign access rights 7

3.1 Standard access rights by module / theme 7 3.2 Standard access rights by matter type 7 3.3 Limited Access Rights 8 3.4 Copy right from another user 9 3.5 Save user 9

4 Manage existing users 10

4.1 Change access rights/details 10 4.2 Change personal information 10 4.3 Login Issues 11

Page 3: User Manual Access Control Model

Page | 3

1 Introduction Access Control Model has been recently improved to provide system administrators with the sufficient tools to independently create users and manage their access rights in a simple and flexible way. This manual will focus on all the features Access Control Model (ACM) offers and explain how to:

▪ Create users. ▪ Determine login role and general settings. ▪ Assign access rights by Module/Theme (e.g. Contracts). ▪ Assign access rights by specific matter types (e.g. NDA’s). ▪ Limit access rights based on criteria.

Page 4: User Manual Access Control Model

Page | 4

2 Create a user

Users are created and managed in the ‘Administration’ dedicated page which can be found under the user icon

after login.

Figure 1: Administration button

The following page provides an overview of all user accounts in the system. By default, only the active users are shown. However, you can click on the ‘Activated’ dropdown in the first filter to view all active or inactive users as well (figure 2). The other filters offer a search function which allows you to find existing users quickly when needed. Simply type a value in the filter search and the user will immediately appear. (figure 3)

Figure 2: Drop down for other statuses Figure 3: Type a value in any of the search columns

Page 5: User Manual Access Control Model

Page | 5

On the top right corner, you will find the ‘New user’ button to create new users. A new screen will appear to create a new user account.

Figure 4: Button to create a new user

Figure 6: New user pup-up

User accounts are linked to natural persons. Therefore, when creating a new user, a natural person is automatically created as well. First, fill in the main information of the person. Please make sure that all mandatory fields are filled in (marked with a red asterisk (*)). If left blank, you will not be able to proceed. It is good practice to use the email address of a user as their username. Experience has proven that users tend to forget usernames easily unless it is their email address.

Figure 6: Main information form

2.1 Simple rights You can then proceed with the simple rights. First, you need to choose the licence of the user. Legisway Essentials offers 3 levels of licence:

▪ Administrator: By definition users have access to all information, features, users’ management, and specify access for other users.

▪ Manager: Users can create, edit, view and delete matters, entities and features when granted specific access.

▪ Reader: User can view matters, entities and features when granted specific access.

Figure 7: Licences

Page 6: User Manual Access Control Model

Page | 6

2.2 General / Feature Settings According to the chosen license, additional fields will appear to set the according access rights for general and specific feature settings (figure 8). By default, all buttons will be disabled. The feature settings apply to other functionalities that may or may not be included in the license. Please contact your consultant in case you have any questions relating to these additional features.

Figure 8: General settings

Can edit group companies: By default, editors cannot amend group companies. In order to grant certain editors, the rights to edit group companies, this setting needs to be enabled. Document booker access: Allows access to the document booker via an icon displayed in the header of the application. Can save (new) default Org-Charts: Allows user to create new org-charts or to modify the existing org-chart. Is able to use the E-signatures: Allows users to sign documents electronically.

Page 7: User Manual Access Control Model

Page | 7

3 Assign access rights

3.1 Standard access rights by module / theme

A Legisway Essentials license may include several modules/themes such as Corporate, Contracts, Cases and so on. For each theme or module, you can easily decide between 8 types of standard access rights (figure 9): Create Rights – All: allows the user to create all matters within a module. Below the heading ‘Matter’ you will find an overview of all matters included in a certain theme. Create Rights – Limited: allows the user to create all matters within a module based on a certain limitation. More details and explanation on limitations in the next section. Read Rights – All: only allows the user to view all matters within a module. Below the heading ‘Matter’ you will find an overview of all matters included in a certain theme. Read Rights – Limited: only allows the user to view matters within a module. More details and explanation on limitations in the next section. Edit Rights – All: allows the user to edit all matters within a module. Below the heading ‘Matter’ you will find an overview of all matters included in a certain theme. Edit Rights – Limited: allows the user to edit all matters within a module based on a certain limitation. More details and explanation on limitations in the next section. Delete Rights – All: allows the user to delete all matters within a module. Below the heading ‘Matter’ you will find an overview of all matters included in a certain theme. Delete Rights – Limited: allows the user to delete all matters within a module based on a certain limitation. More details and explanation on limitations in the next section. If you do not select any of the before mentioned access rights, the module will not be visible to users.

Figure 9: Assign rights per module/theme

3.2 Standard access rights by matter type

Each module/theme consists in several matter types. For instance, the Contract theme may consist in Business contracts, NDA contracts and Purchase contracts. In addition to setting access rights for modules, you can grant access per matter type, allowing you to set slightly more complex rules such as: *Editor XYZ can edit all Contract matters, except for NDA’s. In this section we will examine how to set these distinct rules. Create Rights – All: allows the user to create dossiers of a specific matter type. Create Rights – Limited: allows the user to create dossiers of a specific matter type based on a certain limitation. More details and explanation on limitations in the next section. Read Rights – All: only allows the user to view dossiers of a specific matter type.

Page 8: User Manual Access Control Model

Page | 8

Read Rights – Limited: only allows the user to view dossiers of a specific matter type. More details and explanation on limitations in the next section. Edit Rights – All: allows the user to edit dossiers of a specific matter type. Edit Rights – Limited: allows the user to edit dossiers of a specific matter type based on a certain limitation. More details and explanation on limitations in the next section. Delete Rights – All: allows the user to delete dossiers of a specific matter type. Delete Rights – Limited: allows the user to delete dossiers of a specific matter type based on a certain limitation. More details and explanation on limitations in the next section. If any of the before mentioned access rights are selected, the matter type will not be visible to the user. In figure 10 ‘all’ rights are selected for one specific matter: Business Contracts. Within the Contracts theme, no other rights have been assigned. Subsequently, with the knowledge we obtained thus far, we can conclude that this user can create, edit, read and delete all business agreements, but cannot view nor edit NDA’s or Purchase contracts.

Figure 10: All access rights based on the matter type

With the additional access rights assigned in figure 11, this user has received limited create, read, edit and delete rights for NDA’s or Purchase contracts.

Figure 11: Limited access rights based on the matter type

3.3 Limited Access Rights

When you choose a limited access, the fields ‘Areas’ and ‘Limitations’ become available. (Figure 12)

The granted rights can be limited based on group company, departments, countries or business units. If you have

limited rights based on a certain department, the user will exclusively be able to create / read / edit / delete

matters that relate to that specific department. Please note you can select multiple departments or entities

(group company, country or business unit) of the same type as shown in figure 13. However, it is not possible to

limit rights based on a combination of different entities. (e.g.: limit access based on department AND group

company)

Figure 12: Limited access

Figure 13: Multiple entities selection

Page 9: User Manual Access Control Model

Page | 9

3.4 Copy right from another user

Some access rights apply to multiple users. A quick and easy way to apply the same access rights on several users

is to use the button ‘Copy rights from another user’ (figure 14). By definition, this functionality copies the rights

of another user into the current user’s rights.

Figure 14: Copy rights from another user

Figure 15: User selection

3.5 Save user

Once you have entered all details and chosen all settings, click on the [Save] button at the top. The user

will automatically receive an email notification from the system with a link to set a password (figure 16).

PLEASE NOTE: This link is only valid for 5 days.

Figure 16: Invitation to Legisway Essentials Legal Management Platform

Page 10: User Manual Access Control Model

Page | 10

4 Manage existing users

It is quite common within organisations that one’s role/function or an employee’s address changes. When similar situations occur, access rights or personal details need to be amended as a result.

4.1 Change access rights/details

To change access rights (login, email, rights…), navigate to the Users dashboard to find the right user (figure 17).

Click on the user to view and amend their details through the edit button on the top right (figure 18).

Figure 17: Users overview

Figure 18: User edition

4.2 Change personal information

To change personal information (address, phone number…), navigate to the ‘Natural persons’ dashboard (figure

19) in the Master data module to find the right person. Click on the person to view and amend their details

through the edit button on the top right (figure 20).

Page 11: User Manual Access Control Model

Page | 11

Figure 19: Natural persons dashboard

Figure 20: Natural person edition

4.3 Login Issues

Whenever users report a login issue, please navigate to their account to define a password:

Figure 21: Define password

Figure 22: Define password pop-up