Operator Maintenance

Exploring

Starting

Security

Configuring

The following configuration options in SYSPRO may affect processing within this program or feature, including whether certain fields and options are accessible.

Restrictions and Limits

If you are using the Contact Management System and you delete an operator code, only the link to the contact in CMS is removed not the contact itself.
When you delete an operator code, the operator name is no longer displayed in any SYSPRO program where it was previously visible, regardless of whether transaction details were captured before the operator was deleted.

This is because programs reference the operator table to retrieve the operator name (i.e. the operator name is not saved against a transaction).
You must assign a valid Job classification to the operator if your Numbering method for Jobs is defined by job classification and you use the Requirements Calculation program.
You can't create multiple operators with the same network user name, when SYSPRO is configured to login with network user names.
An operator can't be configured to use concurrent access and Multi-Factor Authentication simultaneously.

For example:

If an operator is enabled for Multi-Factor Authentication, they are not allowed to have concurrent logins.

Similarly, if an operator is configured to allow concurrent logins, they are not allowed to use Multi-Factor Authentication.

Solving

FAQs

Operator license consumption

What license types can be applied to a SYSPRO Cloud ERP user?

There are three types of licenses that can be applied to a SYSPRO Cloud ERP license:

Named User

This license type is for customer end users.
Service Accounts

This license type is for approved partners (i.e. active AD registered email address with SYSPRO) that require access to configure and implement the system.
e.Net

This license type is for using e.net related programs in the e.net Solutions module.

For license types 1 (i.e. Named User) and 2 (i.e. Service accounts):

When setting up your operators, you have the option of selecting either Named user or Service account.
If the operator requires access to the system, such as an official ISV partner user, then they must be configured as a Service account and must have a valid AD account with SYSPRO.

For license type 3 (i.e. e.Net):

When setting up your operators, leave both Named user and Service account disabled.

This ensures that the operator doesn't consume a named license meant for the customer.

Creating new operators

How do I generate SQL logins for SYSPRO operators?

As an administrator, you no longer have to create and configure SQL logins for SYSPRO operators using Microsoft SQL Server Management Studio before capturing the SQL login and password details against the operator in SYSPRO.

This is now possible from within SYSPRO, with functionality added to the System Setup and Operator Maintenance programs. The process creates the following for a SYSPRO operator:

SQL login
SQL user

This is used to access the relevant databases with the required permission access enabled (i.e. DataReader and DataWriter).

If you want SYSPRO to generate SQL logins for all new operators created in future, select the Use generated SQL user details option at the SQL Login preference field of the System Setup program.

Open the System Setup program (SYSPRO Ribbon bar > Setup > General Setup) and navigate to the Database tab.
Indicate whether you require the Generated SQL user prefix to be different from the default SYSPRO_.
Capture the following requirements for the SQL password that SYSPRO will generate:
- Minimum password length
- Maximum password length
- Minimum digits required
- Minimum letters required
- Minimum special characters required
Save and exit the program.
Open the Operator Maintenance program (SYSPRO Ribbon bar > Setup > Operators).
Depending on whether this is a new or existing operator:
- create a new SYSPRO operator and enter the required information, or
- maintain the operator for which you want to create a SQL login and SQL user.
Ensure that the SQL Server authentication section of the Operator Details pane is defined as Use generated SQL user details.
Save the operator.

A message is displayed prompting you to confirm the generation of a SQL login for this operator.

Once confirmed, the system creates the SQL login and SQL user. Those credentials are then populated against the SYSPRO operator.

You can view the SQL login details generated by querying the newly-created SYSPRO operator in the Operator Maintenance program.

Language translation

How do I translate the user interface of business objects into another language?

The English version of these files is shipped as standard. It is your responsibility to create the required language code files for business objects' exception messages.

Although you can dynamically override the default language code when using the login call method for SYSPRO, you must ensure that the necessary translation work has been completed before using a non-English code.

Translating the text output of business objects is accomplished using the following files:

A text-based dictionary file that contains translated captions.

Language dictionaries for supported languages reside in the \Base folder of your SYSPRO installation. Whereas, if you are using a non-supported language, you will use the language dictionary which you have translated.

An exception message file that contains translated error messages.

When an exception occurs within a business object, the system automatically retrieves the language code for the operator and attempts to open the appropriate message file. However, if the exception message for the language code can't be accessed, then the system automatically reverts back to EN (i.e. English).

Exception messages are stored in the following separate files within the \Base\Store folder (where ?? represents the two character language code):

Error message type	File name
Common messages	MSGCOM??.IMP
Financial messages	MSGFIN??.IMP
Distribution messages	MSGDIS??.IMP
Manufacturing messages	MSGMAN??.IMP
SYSPRO analytics messages	MSGSAN??.IMP

Service operators

What are service operators and what are they used for?

Service operators are created by SYSPRO and are used by SYSPRO services to obtain information about SYSPRO.

The service operator code starts with a double underscore to differentiate them from other operators. A default company code must be assigned to each service operator within the Operator Maintenance program, as we use the company code to log in the service operator via e.net .

The following is a list of service operators and their function within SYSPRO:

The __ADSYNC service operator is used by the SYSPRO 8 Active Directory Sync Service to push Microsoft Active Directory (AD) information into SYSPRO for Active Directory managed operators.
The __DFM service operator is used by the SYSPRO 8 Document Flow Manager Folder Poller and SYSPRO 8 Document Flow Manager Queue Poller to monitor folders, send files to the queue and process files.
The __ESP service operator is used by the following services:
- SYSPRO 8 Espresso Service,
- SYSPRO 8 Espresso Notification Service,
- SYSPRO Espresso Development Plugin and the
- SYSPRO Avanti Web Service to obtain information for the password reset and forgot password functionality.
The __POS service operator is used by the SYSPRO 8 Point of Sale Services to determine and validate the setup options and required credentials at start up, update the required databases and post to SYSPRO (if the Point of Sale operator doesn't have access to SYSPRO).
The __RUL service operator is used by the SYSPRO 8 Rules Engine Service and the SYSPRO 8 Rules Data Service.
The __SA service operator is used by the SYSPRO 8 Analytics service to make business object calls.
The __SAI service operator is used by the SYSPRO 8 Machine Learning service.
The __SRS service operator is used by the SYSPRO 8 Reporting Host Service and the SYSPRO 8 Cognitive Service to manage client-side report printing.

Only specific services use service operators to log in via e.net.
SYSPRO creates service operators by copying the ADMIN operator. If the ADMIN operator record doesn't exist (i.e. it may have been deleted), then the current operator is used when saving system details from the Setup Options program.

Using

Hints and Tips

Fields on a pane are sometimes removed by default. You can reinstate them using the Field Selector option from the context-sensitive menu (displayed by right-clicking any field in the pane). Select and drag the required fields onto the pane.The captions for fields are also sometimes hidden. You can select the Show Captions option from the context-sensitive menu to see a list of them. Click on the relevant caption to reinstate it to the form. If the Show Captions option is grayed out, it means no captions are hidden for that form.
Amendment journals are created automatically for any changes made to operator settings. These journals can be viewed, printed and purged using the Operator Amendment Journal program.
Because operators are available across all companies (while contacts are company-specific) operators are created as contacts in all companies.
Whenever you add or change the default operator warehouse, you need to restart SYSPRO for your changes to take effect.
If the Office Automation and Messaging module isn't installed, then you can only bulk email/fax statements using the AR Statement Print program and fax/email SRS reports.

Role-based considerations

Operator role settings for display and entry forms take precedence over any operator, group or company setting.
Global role configuration:
- If the Access control always by role option is enabled (Role Management) then no information is displayed in the Access list view if the operator belongs to a role. Access control must be defined against the role.
- If the Activities and fields always by role option is enabled (Role Management) then the Activities and Fields section of the Security pane is disabled and must be defined against the role.
- If the All operators must be assigned to a role option is enabled (Role Management) then you won't be able to save details for an operator until the operator is assigned to a role.
  
  This applies to any new operator added as well as any existing operator changed from the time this option is enabled.
If the Save docking layout when using roles operator activity is disabled, then changes to the personal view of an operator's role (e.g. pin and unpin panes and change splitter positions) are not saved when the operator exits the application.

Columns in a list view can be removed and repositioned when roles are in use. However, any changes made by the operator are not saved and the original list view layout for the current role is restored when next the application is launched.

Operator groups and subgroups

Groups enable you to categorize operators, selectively indicating modules and programs they are allowed to access.

Groups are configured using the Operator Groups program.
A group that has administrator rights cannot also be a subgroup.

If a list of subgroups is defined for an operator and the primary group is changed to be an administrator group, then that list of subgroups is removed from the operator.
The job logging setting for a program accessed by an operator belonging to multiple groups is taken from the first group/program where access is permitted.

The primary group is processed first, followed by the subgroups, in alphabetical order.

If an operator is allowed access to a program within either a primary or subgroup, then the operator has access to that program.

In the following example, where an operator belongs to three groups, the operator's security level is equivalent to Allowed for the programs listed:

Program	Primary Group	Subgroup1	Subgroup2
Asset Group Maintenance	Denied	Browse only	Allowed
A/P Period end	Denied	Allowed	Denied
GIT Transactions	Browse only	Allowed	Browse only

Report designer access

You can allow an operator to create new reports (SYSPRO Reporting Services) and design new SRS document templates (SRS Document Print Setup) by enabling the Report designer option in the Options pane for the operator required.

You cannot access this option if concurrent use of the operator code is enabled, as the license conditions for the SRS Report designer requires that only specific operators can use the designer.
The number of report designers and the number of designer seats is used to determine the number of users who may access the Report Designer function of SYSPRO Reporting Services concurrently.

For example: If you are licensed for two designer seats, then you can only select this option for two operators.
If you enable this option, ensure that the Crystal Designer has been installed on the operator's client machine, otherwise the operator cannot design SRS reports.
Regardless of the number of report designers licensed, only one SRS document format can be modified at a time.

There is one XML document in \BASE\ReportingCustomized\DocumentControl\Documents.XML that contains all the meta data on SRS document formats.

XML does not support multiple edits to the same file. You can, however, maintain multiple SRS reports as each report has its own report control XML file.

Referencing

Menu and Toolbar

Field	Description
File
Save	This saves the details you entered or changed.
Save and Close	This saves the details you entered or changed and returns to the previous screen.
Close	This returns you to the previous screen.
Edit
New	This adds a new data record.
Delete	This deletes the data record currently displayed. If you delete an operator that is defined with Use operator-specific SQL user details against the SQL Login option, the SQL user details are not automatically deleted. The automatic deletion only applies if the SQL Login option is defined as Use generated SQL user details.
Copy	This creates a new operator by copying the details from another operator code. You can view the last operator code copied during the current run of the program, once you copy at least one operator. You can't create a new operator with the same network user name as an existing operator, when SYSPRO is configured to login with network user names.
Contact	These options are only applicable if the Contact Management System is installed. Operators are available across all companies, while contacts are company-specific. For this reason, operators are created as contacts in all companies.
Contact Details	This uses the Contacts program to maintain contact details for this operator in the Contact Management System. If a link if one does not exist, you will be prompted to create one.
Remove Contact Link	Remove any link between the operator code and a CMS contact. Only the link is removed (i.e. you must use the Contacts program to delete contacts.
Password
Set Password	This lets you use the Admin Password System program to assign a login password to this operator code. This enables you to prevent unauthorized usage of this code.
Set Alternate Password	This lets you assign an alternate password for the operator. This is used exclusively for the Electronic Signatures system, where against the eSignature Global Configuration you indicate whether to use the operator's primary or alternate password to secure the respective transactions.
New	This creates a new operator code.
Delete	This deletes the current operator code.
Copy	This creates a new operator by copying the details from another operator code. You can view the last operator code copied during the current run of the program, once you copy at least one operator.
Operator	Indicate the operator code you want to maintain or add.
Notepad	This loads the Admin Notepad Editor (Rich Text) program to add notes against the operator code.
Printers	This loads the Printers per Operator program to allocate printer access for the operator.
Contact	If the Contact Management System is installed, then this creates a new contact for the operator, or enables you to maintain existing contact details.

Operator Details

Field	Description
Personal
Operator	This indicates the operator code entered.
Operator name	This field is disabled for AD Managed operators. This indicates the descriptive name assigned to the operator.
Network user name	This field is disabled for AD Managed operators. This indicates the name used by this operator to log in to the network. You typically enter a network user name if you want the operating system to authenticate the operator. If you selected Network user name at the User name represents system setup option then SYSPRO assumes that the operator code is the same as the network user name and inserts the network user name automatically in this field when you save the operator settings. Ensure that the network user name is unique for all operators before opting to use this option. You won't be allowed to select the Network user name option if the system detects that there are operators with duplicate network user names.
Operator Group	This indicates the primary group to which this operator belongs. This cannot be the same as a subgroup already defined against the operator.
Subgroup	Assign the operator to up to 200 subgroups. This accommodates the need for certain operators to inherit the program access settings of a number of different groups, without you having to configure additional groups.
Location	This indicates the physical location of the operator.
Email	This field is disabled for AD Managed operators. This indicates the e-mail address of the operator. It is used to email the operator in various situations, such as: When an operator selects the Forgot Password option. When Multi-Factor Authentication is enabled for the operator and they require email authentication. When you define an event type as email in the Event Management program and select the Notify user option, or when you select the Requisition routed to another user event. This email address is also used as part of the login for Portal users when they log into the SYSPRO Supply Chain Portal.
Information
Date operator added	This indicates the date on which the operator was created in SYSPRO.
Operator type	This indicates the operator type (as recorded in the AdmOperator table): Normal This is a standard operator that can access the following SYSPRO platforms: SYSPRO Desktop SYSPRO Web UI (Avanti) SYSPRO Espresso Template This is a template operator record that can be used as a baseline configuration to simplify the creation of operators in similar areas or departments. For example: You can create a template for operators in the Accounts department that contains all the general configuration for those type of operators. Then in future, when creating an operator code for someone in accounts, you can use this template to simplify the process. A template operator can't log into SYSPRO. Template operators are required when creating portal users in the Portal User Management program. The following fields can't be changed for Template operators: Operator (code) Operator type Portal This is a named user that is only used for the SYSPRO Supply Chain Portal. Portal users are created using the Portal User Management program and can log into the following SYSPRO platforms: SYSPRO Supply Chain Portal The following fields can't be changed for Portal operators: Operator (code) Operator type You also can't copy a Portal user/operator. AD Managed This is an operator managed by Microsoft Active Directory (AD) (via the SYSPRO 8 Active Directory Sync Service). AD Managed users are created using the Active Directory User Management program and can access the following SYSPRO platforms: Core SYSPRO The following fields can't be changed for AD Managed operators: Operator name Email Network user name Operator status SSO provider managed operator This is an operator managed by SSO Identity Provider Integration. SSO with ID Integration users are managed using the Single Sign-On Operator Configuration program and can access the following SYSPRO platforms: Core SYSPRO
Authentication type	This field is hidden by default. This indicates the authentication type used to log into SYSPRO. Password (P) A SYSPRO password is required for the operator when logging into SYSPRO. For Normal operators, this indicates that an operator code and password is used. For Portal operators, this indicates that an email address and password is used. Multi-Factor (M) Multi-Factor Authentication is enabled for the operator. When logging into SYSPRO, the operator code, password and additional authentication method is required. You can't enable Multi-Factor Authentication for an operator that is defined for concurrent access (i.e. the Allow concurrent use of this operator option is enabled against the operator). Windows (W) SSO using Active Directory is enabled for the operator. Microsoft Windows authentication is used when logging into SYSPRO. Because an operator's Microsoft Active Directory (AD) credentials are used to log into SYSPRO, they are not prompted for an operator code or password at the SYSPRO login dialog. SSO provider authentication (S) SSO Identity Provider Integration is enabled for the operator and authentication via one of the following identity providers is required when logging into SYSPRO: Google Microsoft LinkedIn Because an operator's SSO Identity Provider Integration credentials are used to log into SYSPRO, they are not prompted for an operator code or password at the SYSPRO login dialog.
Operator status	You cannot change this field for AD Managed operator types. This indicates the current status of the operator (as recorded in the OperatorStatus column of the AdmOperator table of your SYSPRO database): Active The operator is active in SYSPRO and Microsoft Active Directory (AD) and can log into SYSPRO. Disabled The operator is disabled from one of the following and can't log into SYSPRO or the SYSPRO Supply Chain Portal: Operator Maintenance program Microsoft Active Directory (AD) Portal User Management program Removed The operator was either removed via Microsoft Active Directory (AD) or the Portal User Management program and can't log into SYSPRO or the SYSPRO Supply Chain Portal.
Status change reason	This field relates to AD Managed operator types and only applies if the Operator status field is Disabled or Removed. This indicates the reason why the status of the operator is not currently Active.
Date status changed	You cannot change this field for AD Managed operator types. This indicates the date that the Operator status was last changed.
SQL Server authentication
SQL login	This indicate the SQL Server authentication required for the operator: Use system-wide SQL user details The operator's authentication for SQL is based on the system-wide SQL user details defined in the System Setup program. Use operator-specific SQL user details The operator's authentication for SQL is based on the operator's own SQL Server user name and password contained in the Login name and Password fields of this program. This is useful if you want to trace SQL usage by SQL logins. Use generated SQL user details SYSPRO will generate SQL login details for operators based on details defined in the System Setup program.
Login name	This indicates the name used to validate the operator's access to SYSPRO, if you selected SQL Authentication at the Authentication Database connection option (System Setup). If you selected Windows authentication, (System Setup) then the operator login and password required to access SYSPRO is the network login id that is authenticated by Windows.
Password	This indicates the password assigned to the Login name.
Test SQL connection	This lets you confirm that you can connect to SQL based on your login information entered.

Defaults

Field	Description
General
Company	This indicates the default company that must be used for this operator.
Requisition user	This indicates the default requisition user that must be used for this operator within the following programs: Requisition Entry Requisition Create Purchase Orders Requisition Review You can use the PO Requisition change user eSignature or the PO Req change user operator activity to force the use of the default requisition user defined here.
Buyer	Enter a default buyer. The buyer will be added to the following programs, unless a buyer has already been specified: BOM Cost Center Maintenance PO Creation Stock Code Maintenance Purchase Order Entry Purchase Order Header Information Contract Maintenance Requisition Entry Maintenance Non-stocked Codes
Employee	Indicate the BOM employee code to assign against this operator. You can't configure the operator as a BOM employee if the Contact management user only option is enabled against the operator. This entry is recorded within the Employee column of the AdmOperator table.
Counter sales
Customer	This indicates the default counter sales customer that must be used for this operator within the Sales Order Entry and Point of Sale Entry programs. If left blank, then the Counter sales Default customer setup option is used.
Cash drawer	This indicates the default cash drawer that must be used for this operator.
Payment code	This indicates the default payment type that must be used for this operator.
Access
Bank	This indicates the default bank that must be used for this operator.
Customer branch	This is the default AR branch that must be used for this operator if the Default AR browse to operator branch setup option is enabled, in which case the browse on customers defaults to displaying only those customers linked to this branch.
Supplier branch	This indicates the default AP branch that must be used for this operator.
Job classification	This indicates the default job classification that must be used for this operator. You must assign a valid Job classification to the operator if your Numbering method for Jobs is defined by job classification and you use the Requirements Calculation program.
Warehouse	This indicates the default warehouse that must be used for this operator. When this is not defined, the Default warehouse defined against the Company is used (Company Maintenance). Whenever you add or change the default operator warehouse, you need to restart SYSPRO for your changes to take effect.
WIP branch	This indicates the default Work in Progress branch that must be assigned to this operator.

Options

Field	Description
Date options
Set accounting date to system date	This sets the accounting date and time to the operating system date when this operator accesses SYSPRO. Otherwise the SYSPRO company date is used. In a client/server environment, setting the accounting date to the system date ensures that all clients connecting to the server use the same date and time (for those operators that have this option enabled).
Use client system date	This bases the accounting date on the system date of the client workstation instead of the server. This is typically used if the geographic locations of the client and the server are in different time zones, which could affect dates. When this option is enabled, the client date is used for business objects invoked by VBScripts run from the client machine. This option applies only to the date and has no effect on the transaction time. All transactions are relative to the server time (i.e. all times on reports and transactions are always the server time).
Allowed to change temporary company date	This lets operators use a specific default date for transactions which remains valid until they exit from SYSPRO, or select a different date.
Allowed to change company date	This lets the operator change the company date in SYSPRO (if the operator is allowed to change the temporary company date).
Login
Force SSO registration at next login	This resets the operator's SSO status for SSO Identity Provider Integration. The operator is then forced to re-authenticate themselves with the SSO Identity Provider upon their next login to SYSPRO.
Allow concurrent use of this operator	This lets more than one person use the same operator code at the same time (e.g. several administrators sharing an account, or several operators using an account as a guest). Considerations This option does not apply to e.net Solutions licensing, which is per operator code (i.e. you cannot allocate more than one session per operator code). When enabling this option, you can't define the Report designer and Analytics viewer options for the operator. Likewise, if these options are defined, you can't enable the Allow concurrent use of this operator option. You can't enable this option for Portal users. You can't access this option if Multi-Factor Authentication is enabled for the operator. This option does not apply to SYSPRO Cloud ERP.
Notify ADMIN inbox if duplicate login	This lets you notify the administrator (via the Message Inbox facility) when the operator code is used more than once at the same time (if concurrent use of the operator code is disabled).
Override when company logins prevented	This allows an operator to log into a SYSPRO company despite logins being prevented at company level or system-wide. This is useful for operators who don't have system administrator privileges, but require access to resolve a problem. For example: An automated task prevents operators from logging in until the task is complete, but the task fails and the operator needs to access the system. Enabling this option only applies to operators logging into SYSPRO. Therefore, this option does not apply to e.net Solutions.
Company access	This indicate whether the list of companies refers to those the operator is denied/allowed to access.
Company list	This indicate the SYSPRO companies to which the operator is allowed/denied access.
General
Email integration required	This allows the operator to email documents (e.g. purchase orders, sales order and statements) or SYSPRO reports. Use the AR Statement Print program to either email statements or SRS reports in bulk if you're not licensed to use the Office Automation and Messaging module.
Tickover refreshes on reports/batches	The tickover is suppressed regardless of your setting here if a trigger is used to generate a customized report (Trigger Program Setup). This indicates the rate at which the system must notify the operator of its progress when producing reports and running batch programs. You can set the tickover according to a record count (i.e. the number of rows processed) or a time period (i.e. the number of minutes or seconds that have elapsed). Setting a low tickover can compromise the performance of your system. Consider using SYSPRO's Print Preview facility to review the output from a report before actually printing the document.
Special language support	This option is only applicable if you are using SYSPRO in Thai. It affects the display of text in the Admin Notepad Editor (Rich Text). Default This uses the default language defined for your company (System Setup). Chinese (simplified) No longer in use. Thai This Uses the Thai language. The font is set to Thaimono in the Admin Notepad Editor (Rich Text) program. If you are using Thai and do not select this option, then the font is set to Courier new and Thai characters are not displayed correctly.
Access
Named user	This indicates if the operator must be configured as a named user and is only applicable to SYSPRO Cloud ERP licensing. Considerations: ADMIN operators are automatically enabled as named users. This option must be disabled for e.net operators to ensure a license is not consumed.
Service account	This indicates if the operator must be configured as an Active Directory Service account and is only applicable to SYSPRO Cloud ERP licensing. Considerations: Ensure that a valid email address is configured for the operator before enabling this option. Operators can't be configured as both a Named user and a Service account simultaneously. This option must be disabled for e.net operators to ensure a license is not consumed.
Verify service account	Select the Verify hyperlink to verify whether or not the operator account is a valid Service Account in the SYSPRO Cloud ERP Active Directory.
Espresso license type	Indicate whether the operator is a: Full user Linked user External user When defined as an Espresso external user, you must select 02 - Customer at the Functional role field on the E.net tab, and assign a single customer code to the operator code. None (i.e. not an Espresso user)
Report designer	This lets the operator create new reports using SYSPRO Reporting Services and to design new SRS document templates (SRS Document Print Setup). Because the license conditions for the SRS Report Designer requires that only specific operators can use the designer, you can't access this option if concurrent use of the operator code is enabled.
Analytics administrator	This lets the operator access the SYSPRO Analytics Setup program as well as the Site Administration Menu within the SYSPRO Analytics Administration program.
Analytics viewer	This lets the operator access the Viewer Menu within the SYSPRO Analytics Administration program. You cannot access this option if concurrent use of the operator code is enabled.
Role layout design	This lets the operator define the layout of docking panes or configure list views and data grids (see Customization Management ). In addition, this option determines whether SRS Menus, Templates and Forms can be defined, copied and saved by operator role. If this option is enabled for multiple users, only one operator at a time can access the Design UI Layouts function. Otherwise you will only be able to create and copy Organization Lists within the Contact Management System for your own operator code.
Contact management user only	This indicates that the operator is licensed to only use the Contact Management System features of the SYSPRO application suite. Considerations This option cannot be enabled for operators with Administrator rights. Only the licensed number of operators configured as CMS only operators can access SYSPRO concurrently. This option does not apply to SYSPRO Cloud ERP.
Point of sale user only	This indicates that the operator is licensed to only use the SYSPRO Point of Sale module. Considerations This option cannot be enabled for operators with Administrator rights. This option does not apply to SYSPRO Cloud ERP.
OData
OData user	Indicate if the operator is a SYSPRO OData user. Once you enable this option for the operator, you can use the Generate credentials function to create the associated OData SQL user with READ-ONLY permissions. Generate credentials Select this if you want SYSPRO to automatically create the required SQL user within Microsoft SQL Server with READ access to the relevant SQL tables and databases. These new credentials are then populated automatically within the OData user name and OData SQL login name fields. This information is stored within the AdmOperatorPwd table.
OData user name	This indicates the user name for the SYSPRO OData user. This field is automatically populated when you select the Generate credentials option within the OData user field.
OData SQL login name	This indicates the login name of the SQL user within Microsoft SQL Server. This field is automatically populated when you select the Generate credentials option within the OData user field. Send Email This lets you email the newly created credentials confidentially (using SMTP) to the email address defined against the operator, including a password reset and resend function in SYSPRO. Configure OData email template This lets you define the template to be used when emailing the OData credentials to the operator. Once configured, this template is stored in the \Base\Samples folder with the file name EML_ODASVC_EN.TXT.
Numeric formatting
Override company setting	This uses the decimal symbol defined in the Decimal character field for numeric values defined against the operator, instead of at company level.
Decimal character	This indicates the decimal symbol you want to use for numeric values for this operator. This affects every numeric field that contains decimals (e.g. values, costs, prices, quantities, unit of measure conversion factors, currency conversion factors, etc.). In a client/server environment, the character you indicate here must be the same as the one defined in your Region and Language settings, otherwise incorrect values may be saved when processing transactions in SYSPRO. Considerations Numeric fields output by the Report Writer will use the decimal character specified here. SYSPRO graphs use the Decimal and Digit grouping symbols configured within your Region and Language settings to format the numbers displayed. SYSPRO Analytics Viewer uses the Region and Language settings for currency values. Variables have been added to the System Information section of all SRS reports to indicate the number of decimals to display (DecimalsToDisplay) and the decimal character to use (DecimalCharacter). This, in conjunction with the SeparatorToUse variable can be used to format reports to meet your requirements.
Override company settings	This lets you define a delimiter for numeric values over 999.00 for this operator.
Use 1000 separators	This is the delimiter for numeric values over 999.00 for this operator (e.g. a value of 123456789.12 is displayed as 123,456,789.12). This affects every numeric field, including (but not limited to): Values Costs Prices Quantities Unit of measure conversion factors Currency conversion factors
1000's separator character	This is the character (symbol) that must be used as the 1000's separator for numeric values for this operator. In a client/server environment, the character you indicate here must be the same as the one defined in your Region and Language settings, otherwise incorrect values may be saved when processing transactions in SYSPRO. This affects every numeric field, including (but not limited to): Values Costs Prices Quantities Unit of measure conversion factors Currency conversion factors
Number of digits after decimal (values)	This indicates the number of decimals you want to use for numeric values for this operator. An entry of zero removes decimals from values in entry and display/print fields. Regardless of your setting here, values are always held to two decimal places. Free-format stationery assumes a minimum of two decimals for any Price field, and three decimals for any Inventory Unit cost field. The Maximum decimals to show for price/cost option (System-wide Personalization) controls the number of decimal zeroes displayed in price and cost list view columns.
Portal user
Portal supplier	Indicate the supplier code that must be assigned to the portal user when logging into the SYSPRO Supply Chain Portal.
Portal customer	Indicate the customer code that must be assigned to the portal user when logging into the SYSPRO Supply Chain Portal.
Configure portal operators per company	This lets you capture a portal customer and portal supplier against the operator (per company) using the Configure Portal User per Company program.
Entity user type	Indicate whether the entity user is an administrator: Blank/none – not an entity user Administrator Third-party user
Entity	Indicate the name of the entity to which the operator belongs if they are a portal user.
Approved status	Indicate the user’s approval status.
Rejected reason	Indicate the reason if the user’s approved status is rejected.

Timeout

Field	Description
Settings
Timeout required in menu and queries	This indicates whether a timeout facility is required for this operator against SYSPRO menus and Query programs. This can be used to prevent the unauthorized usage of an operator's code when, for example, the operator is away from the computer.
Timeout action	Ask operator password Request the operator password for any mouse/keyboard activity that occurs after the timeout period is exceeded. Logout from SYSPRO Log the operator out automatically when the timeout period is exceeded (providing the operator was not logged into a program from within another program - in which case the operator is returned to the calling program and not logged out of SYSPRO).
Timeout period	Indicate a specific period of time (where no keyboard/mouse activity has been detected) after which the selection made at the Timeout action field is activated. If you are also using the KeepAlive timeout (minutes) option (System-wide Personalization) then you must set the timeout period here to be less than the KeepAlive timeout (minutes) value. The system relies on 'no events occurring' for the operator timeout to take effect, but the KeepAlive system works by sending an 'event' to the system which causes the operator timeout to refresh.

Security

Field	Description
Activities
Selection	Default This assigns default access to activities in SYSPRO for this operator. This is determined by a number that is assigned to each activity (this can be displayed using the Field Chooser function. If the activity number is in the range 001 to 600, then access to the activity defaults to Allowed. If the activity number is in the range 601 - 999, then access to the activity defaults to Denied. All This lets the operator access all activities in SYSPRO. Any new activity in SYSPRO is set to Allowed by default. None This denies the operator access to all activities in SYSPRO. Any new activity in SYSPRO is set to Denied by default. List This lets you define a list of activities for which the operator is allowed or denied access.
Configure Activities	Select Edit to selectively configure the access level to activities for the operator.
Fields
Selection	All This lets the operator access all fields in SYSPRO. None This denies the operator access to all fields listed. List This lets you define a list of fields to which the operator is allowed or denied access.
Configure fields	Select Edit to view a list of available fields and configure the access level for this operator.
Menus
Enable standard SYSPRO menus	Indicate whether the operator is allowed to access the standard SYSPRO menus provided.
Password
Number of login attempts	This does not apply to e.net Solutions. This is the number of times the operator can incorrectly enter the password before being locked out of the system. This defaults to unlimited, but can be between 1 and 9 failed login attempts.
Operator locked out	This indicates whether a lock has been set against the operator (i.e. when locked out, the operator is unable to load SYSPRO).
Password never expires	This indicates you do not want the password for this operator to ever expire, regardless of any other password settings.
Last login	This indicates the date and time that the operator code was last used to load SYSPRO.
Salesperson access control	The access level defined here also applies to customer and account information within the SYSPRO Contact Management System.
Assign salesperson to current operator	This indicates that the operator is also a salesperson.
Salesperson	This indicates the SYSPRO salesperson code of the operator.
Apply access control	This limits the operator to only edit their own data. The operator can, however, still view the data for other salespersons.
Filter reports and browses	This prevents the operator from viewing the data of other salespersons in browses or reports.
Tile KPI definition access control	These options control the level for which the the user can add, change and delete tile KPIs.
Default access control	This is enabled by default, meaning all operators who have access to the tile Insight Tile Definition program can make any changes. When you disable theDefault access controloption, the Administrator option is enabled by default.
Administrator	The tile KPI administrator has full control to add, change and delete tile KPIs for the system, all companies, roles and operators. When you disable the Administrator access control option, you can disable or enable one or more of the remaining three access control settings: Company supervisor Role supervisor Operator self-service
Company supervisor	When enabled, this allows the operators to maintain tile KPI definitions for all companies they have access to.
Role supervisor	When enabled, this allows the operators to maintain tile KPI definitions for roles to which they belong and tile KPI definitions for all operators who belong to those roles.
Operator self-service	When enabled, this allows the operator to maintain their own personal tile KPI definition. The operator can only edit tile definitions for themselves.
Dimension analysis
Access control	Select the Configure hyperlink to launch the Dimension Analysis Security program where you can configure access control against operators for Dimension Analysis.
Intercompany transactions
AP access control	Select the Configure hyperlink to launch the Security per Company program where you can configure access control against operators for Intercompany Accounts Payable transactions.
AR access control	Select the Configure hyperlink to launch the Security per Company program where you can configure access control against operators for IntercompanyAccounts Receivable transactions.

E.net

Configuration

The E.net tab lets you configure restrictions and preferences against an operator with regard to the customers they can access and is applied to business objects when sales orders are processed.

Settings

Field	Description
Functional role	This indicates the role of the user who is linked to this operator code. It enables you to filter information returned by business objects according to the user's role. Available roles that can be assigned include: Employee Customer Supplier
Language	This indicates the language in which you want to display the user interface for business objects loaded by this operator. You can choose a language from the dropdown menu, or select {custom} to enter a user-defined language code. The business object retrieves the operator's language code automatically and returns the value as an XML attribute in the root element of the returned document (e.g. a language code of 07 is displayed as: <InvQuery Language="07"...>) Translating the user interface of business objects is accomplished using two files: An XML-based dictionary file (LANGUAGExx.XML where xx indicates the language code). This file contains the translated captions and is stored below the root folder of the e.net web applications folder (i.e. \Main\Language). The stylesheet file is stored in the \Main\Transform folder. An error message file that contains translated error messages. Error messages are stored in four separate files: MSGCOMxx.IMP MSGFINxx.IMP (financial messages) MSGDISxx.IMP (distribution messages) MSGMANxx.IMP (manufacturing messages) When an error occurs in a business object, the system automatically retrieves the language code for the operator and attempts to open the appropriate message file. If the error message for a specific language code cannot be accessed, then the system defaults to a language code of 05 (i.e MSGCOM05.IMP, MSGFIN05.IMP, MSGDIS05.IMP and MSGMAN05.IMP). The English version of the files is shipped as standard.
Language code	Enter a user-defined language code. Only entries in the range 30 to 99 are allowed.
Date format	This indicates the format in which you want the user interface to display dates within business objects loaded by this operator. The business object retrieves the operator's date format automatically, and returns the value as an XML attribute in the root element of the returned document (e.g. A date format of 05 is displayed as: <InvQuery DateFormat="05"Tgt;) Select 08 - {custom} to define exactly how dates must be transformed if the predefined settings are not suitable. This is achieved using an XSLT stylesheet format.xsl which is stored below the root folder of the e.net web applications folder (i.e. \Main\Transform). If you do not modify this stylesheet file then the format defaults to 01.
Decimal format	This indicates the format in which you want the user interface to display value, price and cost fields within business objects loaded by this operator. The business object retrieves the operator's decimal format automatically, and returns the value as an XML attribute in the root element of the returned document (e.g. a decimal format of 02 is displayed as: <InvQuery DecFormat="02"Tgt;). Select 03 - {custom} to define exactly how decimals must be transformed if the predefined settings are not suitable. This is achieved using an XSLT stylesheet format.xsl which is stored below the root folder of the e.net web applications folder (i.e. \Main\Transform). If you do not modify this stylesheet file then the format defaults to 01.
Default supplier	Indicates the primary supplier code that is associated with this operator profile.

Login

Field	Description
Usage for e.net business objects	This lets you indicate how you want to control operator access to functional areas of e.net Solutions (according to the terms of your software license agreement). These are apportioned using the License Manager program.
No access	The operator code cannot be used as a login for the business objects of e.net Solutions.
Named user	The operator code can be used as a single-user login to functional areas of e.net Solutions. If a second user accesses e.net Solutions using this operator login, then the first user is effectively logged out. This lets you monitor the activities processed by the user. Each named user effectively consumes one license, regardless of whether they are logged in. This option is not recommended if you have a large number of users, but only a few require access to the business objects at any one time.
Guest/anonymous user	The operator code can be used by a concurrent number of users as a login to functional areas of e.net Solutions. For example: If your license caters for 10 concurrent users, then although any user can login using this operator code, only 10 can be logged in within a 30 minute period). However, this method can consume more licenses than necessary (e.g. a user who logs off and then logs back in within 30 minutes will consume two licenses). This option is recommended if you have a large number of users, but only a few require access to the business objects at any one time. One benefit of this method is that you don't require a SYSPRO operator code for each person that needs the same access to the business objects of e.net Solutions. However, because the users of this operator login are anonymous, you won't be able to place restrictions on individual users (i.e. all users of this operator login will have the same defaults and restrictions) and you won't be able to use job logging and journals to establish which user performed a specific task. The Concurrent users field indicates the number of times that this operator code can be used as a login to the business objects of e.net Solutions within 30 minutes.
Run time integration	This allows you to flag operators for runtime posting within companies that are set up to have Linked operators. Enabling this option will successfully authenticate ISV products without operator passwords being validated. Other authentication methods, such as SSO, MFA or Active Directory, will be disregarded. Enabling this option will prevent concurrent and/or guest-type logins.

Access control

Select the Edit option from the Access control section:

Field	Description
Customers
Allow access to all customers belonging to	This grants the operator access to all the customers associated with the salesperson code entered here.
Allow access to customers in list	This lets you define a list of customers that this operator is allowed to access.
Filter browse and fetch	This restricts the display of customers in the browse to only those that this operator profile is allowed to access.

Customer order options

Select the Edit option from the Customer orders options section:

Field	Description
Warehouse selection
Warehouses	This indicates a list of warehouses for which the customer associated with this operator profile can create orders.
Access Control
Product Classes by Customer	This indicates the product classes for which the customer associated with this operator profile can create orders. You can select all product classes, or specify a list of up to 50 product classes.
Order creation
Type of order	Indicate the type of order that must be created when the customer associated with this operator profile places an order. Forward order (no allocations) This processes customer records that require stock allocations to be made at a future date. Scheduled order This places blanket orders for the customer. The system automatically allocates the stock line if the current system date (together with the number of days within which scheduled orders are to be allocated) equals or is less than the line ship date. Normal order This processes customer orders that can be delivered in full or part-delivered. Billing This processes customer orders immediately. Inter-branch transfer This processes stock transfers between branches in your company.
Order status	Indicate the specific status that you want to assign to the capture of scheduled orders by the customer associated with this operator profile. 1 indicates that a delivery note must still be printed and the goods have not yet been picked from the warehouse. 4 indicates that the order is in the warehouse awaiting shipment to the customer. 8 indicates that the order has been shipped to the customer and is waiting to be invoiced.
Minimum number of days to ship	This is the number of days it typically takes to package and prepare a shipment for the customer associated with this operator profile. The order ship date is calculated as today's date plus your entry made here.
Allow non-stocked items	This treats the entry of an invalid stock code as if it were a non-stocked item.
Accept orders that fail credit check	This places orders into suspense if the customer's credit limit/terms are exceeded.
Message to send if credit check failed	This is the message that must be sent if an order causes the credit limit/terms to be exceeded.
Operator to inform about new orders placed	This is the operator who must be notified of any new orders placed by the customer associated with this operator profile. A message file (ADMMSG.DAT) is created by the order entry application in SYSPRO's working directory. This message file will contain information about orders created over the web. You can view this file from the Sales Orders Created Externally program.
User defined sales message	This indicates user-defined text for this operator profile that will be displayed prominently within the sales order applet.

Access

Field	Description
Access control	This column displays the key fields for which you can configure operator access: Warehouse This configures the level of warehouse access for this operator. If you are editing your own warehouse restrictions, then you can only select those warehouses to which you have access. For security purposes, the Warehouse to use field on the Inventory record is not validated. The warehouse access control does not apply when browsing on warehouses in the Dispatch Note Browse program or when printing dispatch notes using the Document Print program. AR branch This configures the level of Accounts Receivable branch information access for this operator. The access level defined here also applies to customer and account information within the Contact Management System. If you are editing your own AR branch restrictions, you can only select those branches to which you have access. Although operators are not prevented from processing an SCT in the Sales Order Entry program when they are denied access to the target warehouse branch, they are prevented from creating normal sales orders for a branch to which they are denied access. AP branch This configures the level of Accounts Payable branch information access for this operator. The access level defined here also applies to supplier information within the SYSPRO Contact Management System. If you are editing your own AP branch restrictions, you can only select those branches to which you have access. Bank This configures the level of bank information access for this operator. If you are editing your own bank restrictions, you can only select those banks to which you have access. Job classification This configures the level of access the operator will be given to jobs, based on the job classification (providing the job classification is not blank). Operators who are denied access to a job classification won't be able to: add, maintain or cancel jobs assigned that classification, change or cancel order lines attached to jobs assigned that classification, cancel orders for jobs assigned that classification, attach hierarchical order lines to jobs assigned that classification. Account type This configures access control to specific account types within the Contact Management System. When defining a list of account types, you can configure up to 20 account types to be allowed/disallowed per operator. Contact property This configures access control to specific contact properties within the Contact Management System. Up to 20 account types can be allowed/disallowed per operator. Contact class This configures access control to specific contact classes within the Contact Management System. Up to 20 contact classes can be allowed/disallowed per operator. Contact type This configures access control to specific contact types within the Contact Management System. Up to 20 contact types can be allowed/disallowed per operator. Contact category This configures access control to specific contact categories within the Contact Management System. Up to 20 contact categories can be allowed/disallowed per operator. Contact territory This configures access control to specific contact territories within the Contact Management System. Up to 20 contact territories can be allowed/disallowed per operator. WIP branch This configures access control to specific WIP branches within the Work in Progress module.
Access type	This indicates the level of access granted to the operator for the key field: All This grants the operator access to all values for the key field. None This denies the operator access to all values for the key field. Allowed List This defines a list of values for the key field to which the operator has access. Denied List This defines a list of values for the key field to which the operator does not have access.
Filter reports and browses	This prevents the operator from viewing the data for the key field in browses or reports. No filtering/validation is performed on supplier codes on stock records (e.g. the supplier code stored on the stock record is not used to validate the AP branch on the supplier record) or on any stock report where the supplier code is used. Filtering of transactions is based on the bank field as stored on the transaction only.

Field

Description

Access control

This column displays the key fields for which you can configure operator access:

Access type

This indicates the level of access granted to the operator for the key field:

Filter reports and browses

This prevents the operator from viewing the data for the key field in browses or reports.

No filtering/validation is performed on supplier codes on stock records (e.g. the supplier code stored on the stock record is not used to validate the AP branch on the supplier record) or on any stock report where the supplier code is used.
Filtering of transactions is based on the bank field as stored on the transaction only.

Roles

Field	Description
Add Roles	This loads the Role Management program to maintain role descriptors.
Organogram	This loads the Role Organogram Maintenance program to view and manipulate the hierarchy of roles (organogram) for your organization.
Column 1	A tick in this column indicates the operator has been assigned to the role. If more than one role is enabled for an operator, then the operator can switch between these roles using the Switch Role option from the SYSPRO Desktop (SYSPRO Ribbon bar > Personalization > Switch Role).
Role	This indicates the role descriptor usually matching the job description or job function assigned to an operator. SYSPRO operators can be assigned up to five roles, enabling them to switch between assigned roles as required.
Primary role	A tick in this column indicates that this is the primary role for the operator (i.e. the default role used when the operator logs into SYSPRO).

* product-authoring@syspro.com