SYSPRO Ribbon bar > Setup > Operator Maintenance

Operator Maintenance

You use this program to maintain the list of people who require access to SYSPRO, as well as to define any restrictions applicable.

Amendment journals are created automatically for changes to operator settings. These journals can be viewed, printed and purged using the Operator Amendment Journal program.

Toolbar and menu

Field Description
Edit  
Copy Creates a new operator by copying the details from another operator code. You can view the last operator code copied during the current run of the program, once you copy at least one operator.
Contact If the Contact Management System is installed, then this creates a new contact for the operator, or enables you to maintain existing contact details.

Operators are available across all companies, while contacts are company-specific. For this reason, operators are created as contacts in all companies.

Contact Details Uses the Contacts program to maintain contact details for this operator in the Contact Management System. You will be prompted to create a link if one does not already exist.
Remove Contact Link Removes any link between the operator code and a CMS contact. Only the link is removed (i.e. you must use the Contacts program to delete contacts.
Password  
Set Password Uses the Password System program to assign a login password to this operator code. This enables you to prevent unauthorized usage of this code.
Set Alternate Password Enables you to assign an alternate password for the operator. This is used exclusively for the Electronic Signatures system, where against the eSignature Global Configuration you indicate whether to use the operator's primary or alternate password to secure the respective transactions.

Operator Details

Field Description
Personal  
Operator This indicates the operator code you entered.
Operator name

This indicates the descriptive name assigned to the operator.

Network user name

This indicates the name used by this operator to log in to the network.

If you enabled the option: Use network user name (System Setup) then SYSPRO assumes that the operator code is the same as the network user name and inserts the network user name automatically in this field when you save the operator settings.

You enter the network user name if you want the operating system to authenticate the operator.

Group

This indicates the primary group to which this operator belongs. This cannot be the same as a Subgroup already defined against the operator.

Groups enable you to categorize operators, selectively indicating modules and programs they are allowed to access. Groups are configured using the Groups program.

Subgroup Enables you to assign the operator to up to 200 subgroups, accommodating the need for certain operators to inherit the program access settings of a number of different groups, without you having to configure additional groups.

When establishing an operator's level of access to a program, the system allows access if any of the groups allow access to the program.

Access to a program is Denied only if all the groups to which the operator belongs deny access to that program (see Subgroup considerations in the Notes and warnings section).

Location This indicates the physical location of the operator.
Email This indicates the e-mail address of the operator.

This address can be used by the Event Management program when you define an event type as email and select the Notify user option or when you select the event Requisition routed to another user.

SQL Server authentication  
Login name

This indicates the name used to validate the operator's access to SYSPRO, if the company is defined as a SQL Server based company (Company Maintenance) and you indicated that you require SQL Server authentication (System Setup).

If you indicated that you require NT authentication (System Setup) then the operator login and password required to access SYSPRO is the network login id that is authenticated by Windows NT.

Password This indicates the password assigned to the Login name.

Options

Field Description
Date options  
Set accounting date to system date Indicates that the accounting date and time must be set to the operating system date when this operator accesses SYSPRO. Otherwise the SYSPRO company date is used.

In a client/server environment, setting the accounting date to the system date ensures that all clients connecting to the server use the same date and time (for those operators that have this option enabled).

Use client system date Bases the accounting date on the system date of the client workstation instead of the server (typically used if the geographic locations of the client and the server are in different time zones, which could affect dates).

When this option is enabled, the client date is used for business objects invoked by VBScripts run from the client machine.

[Note]

This option applies only to the date and has no effect on the transaction time.

All transactions are relative to the server time (i.e. all times on reports and transactions are always the server time).

Allow to change temporary company date Enables operators to use a specific default date for transactions which remains valid until the operator exits from SYSPRO, or selects a different date.
Allow to change company date Enables the operator to change the company date in SYSPRO and (providing the operator is allowed to change the temporary company date).
Login  
Allow concurrent use of this operator Enables more than one person to use the same operator code at the same time (e.g. several administrators sharing an account, or several operators using an account as a guest).
[Note]
  • Enabling this option prevents you from setting Report designer and Analytics viewer options for the operator, and vice versa.

  • This option does not apply to e.net Solutions as licensing for e.net is per operator code (i.e. you cannot allocate more than one session per operator code).

Notify ADMIN inbox if duplicate login Notifies the administrator (via the Message Inbox facility) when the operator code is used more than once at the same time (if concurrent use of the operator code is disabled).
Override when company logins prevented Allows an operator to log into a SYSPRO company despite logins being prevented for that company (Company Maintenance).

This is useful for operators who do not have system administrator privileges, but require access to resolve a problem (e.g. an automated task prevents operators from logging in until the task is complete, but the task fails and the operator needs to access the system).

Company access Indicate whether the list of companies refers to those the operator is denied/allowed to access.
Company list Indicates the SYSPRO companies to which the operator is allowed/denied access.
General  
Fax/mail integration required Allows the operator to fax documents (e.g. purchase orders, sales order and statements) from within the system, as well as email any SYSPRO report from within the system.

If this option is not enabled, the email option on the SRS Document Print Preview window is disabled.

If the Office Automation and Message module is not installed, then you can only bulk email/fax statements using the Statement Print program and fax/email SRS reports.

Tickover refreshes on reports/batches Indicates the rate at which the system must notify the operator of its progress when producing reports and running batch programs.

You can set the tickover according to a record count (i.e. the number of rows processed) or a time period (i.e. the number of minutes or seconds that have elapsed).

[Note]
  • The tickover is suppressed regardless of your setting here if a trigger is used to generate a customized report (see Trigger Program Setup).

  • In a client/server environment, setting a low tickover can compromise the performance of your system. Consider using SYSPRO's Print Preview facility to review the output from a report before actually printing the document.

Special language support This option is applicable only if you are using SYSPRO in Thai.

It affects the display of text in the Notepad Editor (Admin Notepad Editor (Rich Text)).

OptionDescription
DefaultUses the default language defined for your company (System Setup).
Chinese (simplified)No longer in use.
ThaiUses the Thai language. The font is set to Thaimono in the Admin Notepad Editor (Rich Text) program.

If you are using Thai and do not select this option, then the font is set to Courier new and Thai characters are not displayed correctly.

Access  
Report designer

Enables the operator to create new reports using SYSPRO Reporting Services (SYSPRO Reporting Services) and to design new SRS document templates (SRS Document Print Setup).

You cannot access this option if concurrent use of the operator code is enabled (the license conditions for the SRS Report designer requires that only specific operators can use the designer).

The number of report designers and the number of designer seats is used to determine the number of users who may access the Report Designer function of SYSPRO Reporting Services concurrently (i.e. if you are licenced for two Designer seats, then you can only select this option for two operators).

[Note]
  • If you enable this option, ensure that the Crystal Designer has been installed on the operator's client machine, otherwise the operator cannot design SRS reports.

  • Irrespective of the number of report designers licensed, only one SRS document format can be modified at a time.

    There is one XML document in BASE\ReportingCustomized\DocumentControl\Documents.XML that contains all the meta data on SRS document formats and XML does not support multiple edits to the same file.

    You can, however, maintain multiple SRS reports as each report has its own report control xml file.

Analytics administrator Enables the operator to access the SYSPRO Analytics Setup program as well as the Site Administration Menu within the SYSPRO Analytics Administration program.
Analytics viewer Enables the operator to access the Viewer Menu within the SYSPRO Analytics Administration program.

You cannot access this option if concurrent use of the operator code is enabled.

Role layout design

Enables the operator to define the layout of docking panes or configure list views and data grids (see Customization Management).

If this option is enabled for multiple users, only one operator at a time can access the Design UI Layouts function.

If this option is not enabled, you will only be able to create and copy Organization Lists within the SYSPRO Contact Management System for your own operator code.
[Note]

This option also determines whether SRS Menus, Templates and Forms can be defined, copied and saved by operator role.

Contact management user only Indicates the operator is licensed to only use the Contact Management System features of the SYSPRO application suite.

The option is disabled if the operator has administrator rights.

Only the licensed number of operators configured as 'CMS only' operators can access SYSPRO concurrently.

This cannot be enabled for operators with Administrator rights.

Point of sale user only Indicates the operator is licensed to only use the SYSPRO Point of Sales module.

The option is disabled if the operator has administrator rights.

Espresso license type
Full This indicates that each operator wanting to use SYSPRO Espresso requires an Espresso license on a per-seat (named user) basis (e.g. if you require 100 people to use Espresso in your organization, then you require a license for 100 Espresso seats).
Linked This indicates a SYSPRO concurrent user who also has access to SYSPRO Espresso.

Sample scenario: If a site is licensed for 80 concurrent users (80 SYSPRO concurrent user licenses) then enabling the Espresso Linked users option allows up to 80 selected operators to use Espresso. The cost of this licensing method is significantly lower than if each of the 80 operators required a full use (Espresso seats) license. If you required additional operators to use Espresso (e.g. 100) then the additional users (i.e. 20, in this example) will require a full use Espresso license.

[Note]

If a company uses Espresso Linked users, then the operator must be active on both SYSPRO Espresso and the core (i.e. desktop) version of SYSPRO at least once within 21 days. An operator who does not access SYSPRO at least once within 21 days will receive a warning message to login to SYSPRO. A grace period of 3 days is extended after which the operator will not be able to access SYSPRO Espresso.

External This indicates a customer to whom you have given limited access to queries and transaction posting applications.

When defined as an Espresso external user, you must select 02 - Customer at the Functional Role dropdown field on the E.net tab of the Operators program and assign a single customer code to the operator code.

Numeric formatting  
Override company setting Uses the decimal symbol for numeric values defined against the operator instead of at company level.
Decimal character Indicates the decimal symbol you want to use for numeric values for this operator. This affects every numeric field that contains decimals (e.g. values, costs, prices, quantities, unit of measure conversion factors, currency conversion factors, etc.).

Numeric fields output by the SYSPRO Report Writer will use the decimal character specified here.

SYSPRO graphs use the Decimal and Digit grouping symbols configured within your Region and Language settings to format the numbers displayed.

SYSPRO Analytics Viewer uses the Region and Language settings for currency values.

Variables have been added to the System Information section of all SRS reports to indicate the number of decimals to display (DecimalsToDisplay) and the decimal character to use (DecimalCharacter). This, in conjunction with the SeparatorToUse variable can be used to format reports to meet your requirements.

[Warning]

In a client/server environment, the character you indicate here must be the same as the one defined in your Region and Language settings, otherwise incorrect values may be saved when processing transactions in SYSPRO.

Use 1000 separator

Defines a delimiter for numeric values over 999.00 for this operator (e.g. a value of 123456789.12 is displayed as 123,456,789.12). This affects every numeric field (e.g. values, costs, prices, quantities, unit of measure conversion factors, currency conversion factors, etc.).

1000's separator character Indicates the character (symbol) that must be used as the 1000's separator for numeric values for this operator. This affects every numeric field (e.g. values, costs, prices, quantities, unit of measure conversion factors, currency conversion factors, etc.).
[Warning]

In a client/server environment, the character you indicate here must be the same as the one defined in your Region and Language settings, otherwise incorrect values may be saved when processing transactions in SYSPRO.

Number of digits after decimal

Indicates the number of decimals you want to use for numeric values for this operator.

An entry of zero removes decimals from values in entry and display/print fields.

Regardless of your setting here, values are always held to two decimal places.

Free-format stationery assumes a minimum of two decimals for any Price field, and three decimals for any Inventory Unit cost field.

The option: Maximum decimals to show for price/cost (System-wide Personalization) controls the number of decimal zeroes displayed in price and cost list view columns.

Defaults

Field Description
General  
Company Indicates the default company that must be used for this operator.
Requisition user

Indicates the default requisition user that must be used for this operator within the Requisition Entry, Requisition Create Purchase Orders and Requisition Stores Issues and Transfers programs.

You can use the eSignature PO Requisition change user (eSignature Setup) or the operator activity PO Req change user (Security Activities) to enforce the use of the default requisition user defined here.

See alsoRequisition System Introduction.

Buyer

Enter a default buyer.

The buyer will be added to the following programs, unless a buyer has already been specified:

  • Cost Centers

  • PO Creation

  • Stock Codes

  • Purchase Order Entry

  • Purchase Order Header Information

  • Contract Maintenance

  • Requisition Entry Maintenance

  • Non-stocked Codes

Counter sales  
Customer

Indicates the default counter sales customer that must be used for this operator within the Sales Order Entry and Point of Sale Entry programs.

If left blank, then the Counter sales Default customer (Sales Orders Setup) is used.

Cash drawer Indicates the default cash drawer that must be used for this operator (see Sales Orders Point of Sale Introduction).
Payment code Indicates the default payment type that must be used for this operator.
Access  
Bank Indicates the default bank that must be used for this operator.
Customer branch This is the default AR branch that must be used for this operator if the Default AR browse to operator branch setup option (Accounts Receivable Setup) is enabled, in which case the browse on customers defaults to displaying only those customers linked to this branch.
Supplier branch Indicates the default AP branch that must be used for this operator.
Job classification

Indicates the default job classification that must be used for this operator.

You must enter a valid job classification if your job numbering method is by job classification (Set Key Information) and you use the Requirements Calculation program.

Warehouse Indicates the default warehouse that must be used for this operator.

When this is not defined, the Default warehouse defined against the Company is used (Company Maintenance).

Whenever you add or change the default operator warehouse, you need to restart SYSPRO for your changes to become effective.

Timeout

Field Description
Settings  
Timeout required in menu and queries

Indicates whether a timeout facility is required for this operator against SYSPRO menus and Query programs.

This can be used to prevent the unauthorized usage of an operator's code when, for example, the operator is away from the computer.

Timeout action  
Ask operator password Requests the operator password for any mouse/keyboard activity that occurs after the timeout period is exceeded.
Logout from SYSPRO

Logs the operator out automatically when the timeout period is exceeded (providing the operator was not logged into a program from within another program - in which case the operator is returned to the calling program and not logged out of SYSPRO).

Timeout period Indicates a specific period of time where no keyboard/mouse activity has been detected after which the selection made at the Timeout action field is activated.
[Note]

If you are also using the KeepAlive timeout (minutes) option (System-wide Personalization) then you must set this period to be less than the KeepAlive timeout (minutes).

The system relies on 'no events occurring' for the operator timeout to take effect, but the KeepAlive system works by sending an 'event' to the system which causes the operator timeout to refresh.

Security

Field Description
Activities See Security Activities for a detailed explanation of the activities that can be configured within SYSPRO.

Review the Notes and warnings section for role-based considerations.

Selection
Option Description
Default Assigns default access to activities in SYSPRO for this operator. This is determined by a number that is assigned to each activity (this can be displayed using the Field Chooser function (see Hints and tips within the Security Activities topic).
  • If the activity number is in the range 001 to 600, then access to the activity defaults to Allowed.

  • If the activity number is in the range 601 - 999, then access to the activity defaults to Denied.

All Enables the operator access to all activities in SYSPRO.

Any new activity in SYSPRO is set to Allowed by default.

None Denies the operator access to all activities in SYSPRO.

Any new activity in SYSPRO is set to Denied by default.

List Enables you to define a list of activities for which the operator is allowed or denied access.
Configure Activities Select Edit to selectively configure the access level to activities for the operator.
Fields See Security Fields for a detailed explanation of the fields for which access control can be configured. Review the Notes and warnings section for role-based considerations.
Selection
Option Description
All Enables the operator access to all fields in SYSPRO.
None Denies the operator access to all fields listed.
List Enables you to define a list of fields to which the operator is allowed or denied access.
Configure fields Select Edit to view a list of available fields and configure the access level for this operator.
Menus  
Enable standard SYSPRO menus Indicates whether the operator is allowed to access the standard SYSPRO menus provided.
Password  
Number of login attempts

Indicates the number of times the operator can incorrectly enter the password before being locked out of the system. This defaults to unlimited, but can be between 1 and 9 failed login attempts. This does not apply to e.net Solutions.

Operator locked out

Indicates whether a lock has been set against the operator (i.e. the operator will be unable to load SYSPRO). Review the Notes and warnings section for deletion considerations.

Password never expires

Indicates you do not want the password for this operator to ever expire, regardless of any other password settings.

Last login Indicates the date and time that the operator code was last used to load SYSPRO.
Salesperson access control The access level defined here also applies to customer and account information Within the SYSPRO Contact Management System.
Assign salesperson to current operator Indicates that the operator is also a salesperson.
Salesperson Indicates the SYSPRO salesperson code of the operator.
Apply access control Limits the operator to being able to only edit their own data. The operator can, however, still view the data for other salespersons.
Filter reports and browses Prevents the operator from viewing the data of other salespersons in browses or reports.

E.net

Configuration

The E.net tab enables you to configure restrictions and preferences against an operator with regard to the customers they can access and is applied to business objects when sales orders are processed.

Settings
Field Description
Functional role

This indicates the role of the user who is linked to this operator code. It enables you to filter information returned by business objects according to the user's role.

Available roles that can be assigned include:

  • Employee
  • Customer
  • Supplier
Language

This indicates the language in which you want to display the user interface for business objects loaded by this operator.

You can choose a language from the drop-down menu, or select {custom} to enter a user-defined language code (only entries in the range 30 to 99 are allowed).

The business object retrieves the operator's language code automatically and returns the value as an XML attribute in the root element of the returned document (e.g. a language code of 07 is displayed as: <InvQuery Language="07"...>)

Translating the user interface of business objects is accomplished using two files:

  • An XML-based dictionary file (LANGUAGExx.XML where xx indicates the language code)

    This file contains the translated captions and is stored below the root folder of the e.net web applications folder (i.e. \Main\Language). The stylesheet file is stored in the \Main\Transform folder.

  • An error message file that contains translated error messages. Error messages are stored in four separate files:

    • MSGCOMxx.IMP (common messages)
    • MSGFINxx.IMP (financial messages)
    • MSGDISxx.IMP (distribution messages)
    • MSGMANxx.IMP (manufacturing messages)

    When an error occurs in a business object, the system automatically retrieves the language code for the operator and attempts to open the appropriate message file. If the error message for a specific language code cannot be accessed, then the system defaults to a language code of 05 (i.e MSGCOM05.IMP, MSGFIN05.IMP, MSGDIS05.IMP and MSGMAN05.IMP). The English version of the files is shipped as standard.

Date format

This indicates the format in which you want the user interface to display dates within business objects loaded by this operator.

The business object retrieves the operator's date format automatically, and returns the value as an XML attribute in the root element of the returned document (e.g. A date format of 05 is displayed as: <InvQuery DateFormat="05"Tgt;)

Select 08 - {custom} to define exactly how dates must be transformed if the predefined settings are not suitable. This is achieved using an XSLT stylesheet called format.xsl which is stored below the root folder of the e.net web applications folder (i.e. \Main\Transform). If you do not modify this stylesheet file then the format default to 01.

Decimal format

This indicates the format in which you want the user interface to display value, price and cost fields within business objects loaded by this operator.

The business object retrieves the operator's decimal format automatically, and returns the value as an XML attribute in the root element of the returned document (e.g. a decimal format of 02 is displayed as: <InvQuery DecFormat="02"Tgt;).

Select 03 - {custom} to define exactly how decimals must be transformed if the predefined settings are not suitable. This is achieved using an XSLT stylesheet called format.xsl which is stored below the root folder of the e.net web applications folder (i.e. \Main\Transform). If you do not modify this stylesheet file then the format default to 01.

Default supplier This indicates the primary supplier code that is associated with this operator profile.
Login
Option Description
Usage for e.net business objects This enables you to indicate how you want to control operator access to functional areas of e.net Solutions according to the terms of your software license agreement. These are apportioned using the e.net License Import Wizard program.
No access Indicates the operator code cannot be used as a login for the business objects of e.net Solutions.
Named user Indicates the operator code can be used as a single-user login to functional areas of e.net Solutions. If a second user accesses e.net Solutions using this operator login, then the first user is effectively logged out.

This enables you to selectively monitor the activities processed by the user.

Each named user effectively consumes one license, regardless of whether they are logged in. You would not use this option if you have a large number of users but only a few require access to the business objects at any one time.

Guest/anonymous user

Indicates the operator code can be used by a concurrent number of users as a login to functional areas of e.net Solutions (e.g. if your license caters for 10 concurrent users, then although any user can login using this operator code, only 10 can be logged in within a 30 minute period). This method can consume more licenses than necessary (e.g. a user who logs off and then logs back in within 30 minutes will consume two licenses).

You would typically use this option if you have a large number of users, but only a few require access to the business objects at any one time.

A benefit of this method is that you do not require a SYSPRO operator code for each person that needs the same access to the business objects of e.net Solutions.

However, because the users of this operator login are anonymous, you will be unable to place restrictions on individual users (i.e. all users of this operator login will have the same defaults and restrictions) and you will be unable to use job logging and journals to establish which user performed a specific task.

The Concurrent users field indicates the number of times that this operator code can be used as a login to the business objects of e.net Solutions within 30 minutes.

Access Control
Field Description
Customers
Option Description
Allow access to all customers belonging to This grants the operator access to all the customers associated with the salesperson code entered here.
Allow access to customers in list This enables you to define a list of customers that this operator is allowed to access.
Filter browse and fetch This enables you to restrict the display of customers in the browse to only those that this operator profile is allowed to access.
Customer order options

The Customer orders field enables you to configure settings for up to 100 customers who can enter orders using SYSPRO e.net Solutions, regardless of the salesperson to whom they are linked.

Field Description
Warehouse selection  
Warehouses Enables you to indicate a list of warehouses for which the customer associated with this operator profile can create orders.
Access Control  
Product Classes by Customer Enables you to indicate the product classes for which the customer associated with this operator profile can create orders. You can select all product classes, or specify a list of up to 50 product classes.
Order creation  
Type of order Indicates the type of order that must be created when the customer associated with this operator profile places an order.
OptionDescription
Forward order (no allocations)Processes customer records that require stock allocations to be made at a future date.
Scheduled orderPlace blanket orders for the customer. The system automatically allocates the stock line if the current system date (together with the number of days within which scheduled orders are to be allocated) equals or is less than the line ship date.
Normal orderProcesses customer orders that can be delivered in full or part-delivered.
BillingProcesses customer orders immediately.
Inter-branch transferProcesses stock transfers between branches in your company.
Order status Indicates the specific status that you want to assign to the capture of scheduled orders by the customer associated with this operator profile.
StatusDescription
1Indicates that a delivery note must still be printed and the goods have not yet been picked from the warehouse.
4Indicates that the order is in the warehouse awaiting shipment to the customer.
8Indicates that the order has been shipped to the customer and is waiting to be invoiced.
Minimum number of days to ship Indicates the number of days it typically takes to package and prepare a shipment for the customer associated with this operator profile. The order ship date is calculated as today's date plus your entry made here.
Allow non-stocked items Indicates that the entry of an invalid stock code must be treated as if it were a non-stocked item.
Accept orders that fail credit check Indicates that orders must be placed into suspense if the customer's credit limit/terms are exceeded.
Message to send if credit check failed Indicates the message that must be sent if an order causes the credit limit/terms to be exceeded.
Operator to inform about new orders placed

Indicates the operator who must be notified of any new orders placed by the customer associated with this operator profile.

A message file (ADMMSG.DAT) is created by the order entry application in SYSPRO's working directory.

This message file will contain information about orders created over the web. You can view this file from the SYSPRO Ribbon bar (Query->Web and B2B->Sales Orders Created Externally). See Orders Created Externally.

User defined sales message Indicates user-defined text for this operator profile that will be displayed prominently within the sales order applet.

Access

Field Description
Access control This column displays the key fields for which you can configure operator access.
Warehouses Configures the level of warehouse access for this operator.

If you are editing your own warehouse restrictions, then you are only able to select those warehouses to which you have access.

[Note]
  • For security purposes, the Warehouse to use field on the Inventory record is not validated.

  • The warehouse access control does not apply when browsing on warehouses in the Dispatch Note Browse program or when printing dispatch notes using the Document Print program.

AR Branches Configures the level of Accounts Receivable branch information access for this operator.

The access level defined here also applies to customer and account information within the SYSPRO Contact Management System.

If you are editing your own AR branch restrictions, you are only able to select those branches to which you have access.

[Note]

Although operators are not prevented from processing an SCT in the Sales Order Entry program when they are denied access to the target warehouse branch, they are prevented from creating normal sales orders for a branch to which they are denied access.

AP Branches Configures the level of Accounts Payable branch information access for this operator.

The access level defined here also applies to supplier information within the SYSPRO Contact Management System.

If you are editing your own AP branch restrictions, you are only able to select those branches to which you have access.

Banks Configures the level of bank information access for this operator.

If you are editing your own bank restrictions, you are only able to select those banks to which you have access.

Job Classification Configures the level of access the operator will be given to jobs, based on the job classification (providing the job classification is not blank).

Operators who are denied access to a job classification will be unable to:

  • add, maintain or cancel jobs assigned that classification
  • change or cancel order lines attached to jobs assigned that classification
  • cancel orders for jobs assigned that classification.
  • attach hierarchical order lines to jobs assigned that classification.
Account type Configures access control to specific account types within the Contact Management System.

When defining a list of account types, you can configure up to 20 account types to be allowed/disallowed per operator. Review Security considerations within the Notes and warnings section.

Contact property Configures access control to specific contact properties within the Contact Management System.

Up to 20 account types can be allowed/disallowed per operator.

Contact class Configures access control to specific contact classes within the Contact Management System.

Up to 20 contact classes can be allowed/disallowed per operator.

Contact type Configures access control to specific contact types within the Contact Management System.

Up to 20 contact types can be allowed/disallowed per operator.

Contact category Configures access control to specific contact categories within the Contact Management System.

Up to 20 contact categories can be allowed/disallowed per operator.

Contact territory Configures access control to specific contact territories within the Contact Management System.

Up to 20 contact territories can be allowed/disallowed per operator.

Access type This indicates the level of access granted to the operator for the key field.
All Grants the operator access to all values for the key field.
None Denies the operator access to all values for the key field.
Allowed List Defines a list of values for the key field to which the operator has access.
Denied List Defines a list of values for the key field to which the operator does not have access.
Filter reports and browses Prevents the operator from viewing the data for the key field in browses or reports.
[Note]
  • No filtering/validation is performed on supplier codes on stock records (e.g. the supplier code stored on the stock record is not used to validate the AP branch on the supplier record), or on any stock report where the supplier code is used.

  • Filtering of transactions is based on the bank field as stored on the transaction only.

Roles

Field Description
Add Roles Uses the Roles program to maintain role descriptors.
Organogram Uses the Role Organogram Maintenance program to view and manipulate the hierarchy of roles (organogram) for your organization.
Column 1

A tick in this column indicates the operator has been assigned to the role.

If more than one role is enabled for an operator, then the operator can switch between these roles using the Switch Role option from the SYSPRO Desktop (SYSPRO Ribbon bar->Home).

Role This indicates the role descriptor which usually matches the job description or job function assigned to an operator. SYSPRO operators can be assigned up to five roles, enabling them to switch between assigned roles as required.
Primary role

A tick in this column indicates that this is the primary role for the operator.

The Primary Role is the default role used when the operator logs in to SYSPRO.

Web-based Applications

This pane configures settings for operators who will access your SYSPRO database using SYSPRO's Internet applications.

Field Description
Cascading stylesheets  
Style Indicates the theme that must be applied to web pages generated by the SYSPRO Internet applications.
OptionDescription
Default styleUses the default theme defined against the cascading style sheet for the relevant xml file.
Company styleUses the company theme defined against the cascading style sheet for the relevant xml file.
Operator styleIndicates a theme specific to the operator.
Apply theme

Indicates the theme that must be applied to web pages generated by the SYSPRO Internet applications for this operator.

Style suffix This defaults to the style suffix for the selected theme.
Login  
Usage for web-based applications Indicates how you want to control operator access to functional areas of the web-based applications. These must be defined according to the terms of your software license agreement. They are apportioned using the e.net License Import Wizard program.
OptionDescription
No accessIndicates that the operator cannot be used as a login for the business objects of web-based applications.
Named userIndicates that the operator can be used as a single-user login to functional areas of the Web-based Applications. If a second user accesses the Web-based Applications using this operator login, then the first user is effectively logged out.

Because only one user can use this operator code as a login, you can selectively monitor the activities processed by the user.

Each named user effectively consumes one license, regardless of whether they are logged in. For this reason, you would typically not use this option if you have a large number of users but only a few require access to the business objects at any one time.

Guest/anonymous userIndicates that this operator can be used by a concurrent number of users as a login to functional areas of the Web-based Applications. For example: If your license caters for 10 concurrent users, then although any user can login using this operator code, only 10 can be logged in within a 30 minute period.

You would typically use this option if you have a large number of users, but only a few require access to the business objects at any one time. Another benefit of this method of licensing is that you do not require a SYSPRO operator code for each person that needs the same access to the business objects of the Web-based Applications.

Because the users of this operator login are anonymous, you will be unable to place restrictions on individual users (i.e. all users of this operator login will have the same defaults and restrictions).

You will also be unable to use job logging and journals to establish which user performed a specific task.

It is possible that this method of licensing can use up more licenses than necessary. For example: A user who logs off and then logs back in within 30 minutes will consume two licenses.

Class

Indicates that this operator's access to the functional areas of the Web-based Applications is determined by the class to which the operator is assigned.

When apportioning the access to functional areas for a class, the class consumes the same number of licenses as the class allows concurrent users. The number of concurrent users is the maximum number of members of this class allowed to use a web-based functional area at any one time.

Classes enable you to use less than one license per operator code. The administrator can set the number of concurrent users as well as a timeout value. In addition, the administrator can track what tasks individual users have performed as well as limit the functions an individual user can perform.

[Note]
  • Class licensing is only available for the Web-based Applications.

  • A SYSPRO operator can only belong to a single class, but a class can comprise a number of operators.

Concurrent users Indicates the number of times that this operator code can be used as a login to the business objects of web-based applications within a 30 minute time period.
Class Indicates the class to which this operator belongs (see e.net Classes).

Notes and warnings

Security considerations

  • Although denying an operator access to a CMS Account type prevents the operator from accessing that Account type, the security does not cascade down from Account security (i.e. the operator can still access contact information for an Account).

    One reason for this is that a contact can be linked to multiple Accounts, Customers and Suppliers. In this case the access control for the organization is handled by Customer, Supplier and Account and the access control against a Contact is handled at the Contact level.

    To restrict operators from viewing contacts for an Account you should use one or more of the Contact security settings (e.g. Contact property, classification, type, category or territory) to prevent access to the Contact information.

Subgroup considerations

  • A group that has administrator rights cannot also be a subgroup. If a list of subgroups is defined for an operator and the primary group is changed to be an administrator group, then that list of subgroups is removed from the operator.
  • The job logging setting for a program accessed by an operator belonging to multiple groups is taken from the first group/program where access is permitted. The primary group is processed first, followed by the subgroups, in alphabetical order.
  • If an operator is allowed access to a program within either a primary or subgroup, then the operator has access to that program.

    In the following example, where an operator belongs to three groups, the operator's security level is equivalent to Allowed for the programs listed:

    Program Primary Group Subgroup1 Subgroup2
    Asset Group Maintenance Denied Browse only Allowed
    A/P Period end Denied Allowed Denied
    GIT Transactions Browse only Allowed Browse only

Role-based considerations

  • If the global role configuration option: Access control always by role is enabled (Roles) then no information is displayed in the Access list view if the operator belongs to a role. Access control must be defined against the role (see Role Access Control Maintenance).

  • If the global role configuration option: Activities and fields always by role is enabled (Roles) then the Activities and Fields section of the Security pane is disabled and must be defined against the role (see Role Activities and Fields Maintenance).

  • If the global role configuration option: All operators must be assigned to a role (Roles) is enabled, then you will be unable to save details for an operator until the operator is assigned to a role. This applies to any new operator added as well as any existing operator changed from the time this option is enabled. Changes made will only take effect once the operator logs back into SYSPRO.

  • Operator role settings for display and entry forms takes precedence over any operator or group or company setting.

  • If the activity: Save docking layout when using roles is disabled, then changes to the personal view of an operator's role (e.g. pin and unpin panes and change splitter positions) are not saved when the operator exits the application.

    Columns in a list view can be removed and repositioned when roles are in use. However, any changes made by the operator are not saved and the original list view layout for the current role is restored when next the application is launched.

Deletion considerations

  • If you are using the Contact Management System then, when deleting an operator code, only the link to the contact in CMS is removed not the contact itself.

  • When you delete an operator code, the operator name is no longer displayed in any SYSPRO program where it was previously visible, regardless of whether transaction details were captured before the operator was deleted.

    The reason for this is that programs reference the Operator table/file to retrieve the operator name (i.e. the operator name is not saved against a transaction).

    Instead of deleting the operator, you could prevent the operator code from being used by enabling the option: Operator locked out (Operators).

SQL Server authentication

If you need to change the sa password in SQL, then you should change it against all the operators first and then only change it in SQL.

When you change the sa password in SQL first, none of the operators will be able to log in, which means you cannot change the operators' password at the SQL server authentication - Password field.

If you have done this, then create a dummy C-Isam company to log in to SYSPRO and change the operators' sa password to the new sa password in SQL.

Hints and tips

Custom form fields

  • You can add custom form fields to this pane by right clicking on a caption and selecting the Field Selector option (see Custom Forms Entry).

Inserting Application Help

You would typically follow this procedure to display help for the current program in a customized pane that can be pinned to the program window.

Information includes step-by-step instructions for the various functions available within the program, including a brief overview of what the program does, what setup options are required and how to personalize the program.

  1. Open the program for which you want to insert application help into a customized pane.

    This functionality is only available for a program that has panes.

  2. Right-click any form field.

    You can also click the triangle menu icon that appears in the title area of a pane.

  3. Select Insert Application Help from the context-sensitive menu.

    The application help appears in a pane within your program. You can reposition the pane using the docking stickers or pin it to the program window.

Removing the Application Help pane

If you no longer want to display application help in a pane for your current program, you can simply remove it.

  1. Select the Close icon in the right-hand corner of the application help pane.

  2. Confirm that you want to delete the pane.