Business Roles represent an easy way to create and manage sets of standard roles and groups. With Business Roles you can achieve a uniform and easily manageable access policy.
For example, a Business Role can contain several admin roles for LPGs and a regional user group – all this can be assigned to one or more users in just one step. If these admins should have more responsibilities, it needs to be changed in only one place – here in the Business Role definition.
Setup
-
Create a new Business Role using the Add Role button. Note that the unique name of a Business Role cannot be changed after creation.
-
In the right-hand side pane, select which roles and user groups belong to this Business Role.
-
On the Users tab, assign this Business Role to one or more users.
Business Roles can be assigned in parallel to groups and roles. The effective access of a user is the superset of all directly assigned roles/groups and roles/groups coming from the business roles. -
Click Save.
Restrictions
Number of Licences
Pricefx licenses (optionally) limit the number of users per application module. This is controlled by the assigned roles (every role has a module assignment). A Business Role cannot be assigned to a user if the user would get access to a new module and that would exceed the number of available licences.
Adding Role to Existing Business Role
Generally, roles/groups can be added to a Business Role (or removed from it) also after creation. This permission change becomes active for all users that have this Business Role assigned. However due to the licencing implications, a role can only be added to a Business Role if at least one of these conditions is met:
-
The added role is of a module that is already assigned to the Business Role (via another role of same module).
-
If the added role is of a module that is not yet assigned to the Business Role then there must be no user limit for this module.
-
No users are assigned to this Business Role.
Assigning Admin Roles
The privilege escalation rules apply to assignment of Business Roles too:
-
General Admin has no limitations.
-
Other user admins can only assign a Business Role that contains only un-privileged roles or only privileged roles that the assigning user has.