Understand MES Web Portal privilege and access settings
- Last UpdatedOct 25, 2024
- 4 minute read
MES Web Portal uses MES user groups to check for user privileges to perform tasks or view information and to allow user access to lines and entities. Except for line access, which is set in MES Web Portal, all MES user group privilege and access settings are set in MES Client.
-
Privilege settings allow configuration and operation tasks to be performed, such as creating lines, entities, utilization states, and utilization reason groups and reasons; assigning work orders to lines; and changing work order status. These tasks are controlled through the privileges assigned to MES user groups.
-
Access settings allow operation tasks to be performed on a line or entity. This includes viewing and performing operation tasks related to work orders and jobs, entities, and utilization events. These tasks are controlled by assigning line or entity access to MES user groups.
A user will inherit all privileges and access that are permitted inclusively in all MES user groups of which they are a member. So, if a user is a member of more than one MES user group and any of those MES user groups has a particular privilege (for example, May edit lines), the user will have that privilege even if other user groups of which they are a member do not have that privilege.
The following table describes the privilege and access settings that are available.
|
Setting |
Setting Type |
Where Specified |
Allows Users to: |
|---|---|---|---|
|
May edit lines |
Configuration |
MES Client, |
Create, configure, modify, and delete any lines, regardless of line access settings. If this privilege is not assigned, the user will see only those lines to which they have line access. And for those lines, the user will not see the line Configuration tab or subtabs. If this privilege is assigned but the user has not been assigned access to a line, the user can configure the line but will not see the line’s Work Orders or Entities tabs. So the user will not be able to view the line or its entities and work orders. |
|
Line access |
Operation |
MES Web Portal, See the topic "Assigning Line Access to Users" in the MES Web Portal User Guide or help. |
View lines, including their work orders and entities. Line access is assigned individually for each line. If access to a particular line is not assigned, the user will be able to see work orders on the Work Orders collection page, even if those work orders are assigned to that line. However, any links in MES Web Portal to that line’s pages will be disabled. If a user cannot edit lines and has not been assigned access to any lines, they will not see the Lines tile on the home page or the Lines option in the navigation menu. |
|
May edit entity settings |
Configuration |
MES Client, |
Create, configure, modify, and delete any entities, regardless of the user’s line access setting for the line to which an entity is assigned. If this privilege is not assigned, the user will see only those entities to which they have been assigned access. And for those entities, the user will not see the entity Configuration tab or subtabs. |
|
Entity access |
Operation |
MES Client, |
The user will be able to see and perform operation tasks for only those entities that have been assigned to the MES user groups of which the user is a member. If a user cannot edit entities and has not been assigned access to any entities, they will not see the Entities tile on the home page or the Entities option in the navigation menu. On the line Entities page, they will see the entity tiles and bottleneck information, but the entity tiles will not include operation-related icons. One exception is that, even if the user does not have access to an entity, if that entity has the Can Store capability selected, the user can select that entity in the To Storage Location list in the Add Production and Reduce Production dialog boxes. |
|
May assign a work order to a line |
Operation |
MES Client, |
Assign a work order to any line, regardless of the user’s line access authorization. If a user cannot assign work orders to a line, then they cannot create work orders, because the line assignment is required for a new work order. The user can edit an existing work order, but regarding the line assignment, the user can only reassign the work order to no line. |
|
May change work order state |
Operation |
MES Client, |
Change the status of a work order, regardless of the user’s line access authorization for the line to which the work order is assigned. If a user cannot change the status of work orders, then they cannot create work orders, because the status assignment is required for a new work order. The user can edit an existing work order, but cannot change its status. |
|
May edit utilization states |
Configuration |
MES Client, |
Create, configure, modify, and delete utilization states. This privilege applies to MES Web Portal only. |
|
May edit utilization reasons and groups |
Configuration |
MES Client, |
Create, configure, modify, and delete utilization reason groups and reasons. This privilege applies to MES Web Portal only. Typically, the two utilization edit authorizations are either both set or not set for a user group. If a user has neither of the two utilization edit authorizations, they will not see the Utilization tile on the home page or the Utilization option in the navigation menu. However, if they have entity access, they will be able to assign utilization reasons to events for those entities. |