Security Group

Security Definition

The set of rights defined for a group is termed as Security Definition.

Security Group

A Security Group is a combination of rights along with their values and used to privilege or restrict the users.

AVEVA Work Tasks Security Groups

AVEVA Work Tasks security feature comes with pre-defined security groups that can be mapped to users as well as to roles at different levels. Once a resource is mapped to the security group, the resource will have the privileges and restrictions which are set in the security group in the form of rights. The definition of security groups can be customized at different levels.

User can also create new security groups at the Repository level that can be extended and modified at different levels (List and ListItem). Security groups will be created with different combinations of rights set.

AVEVA Work Tasks has come up with the following four standard security groups which can be extended and modified to various level, but cannot be deleted or renamed. These security groups shipped along with the product are:

• Administrator

• Contributor

• Limited Access

• Reader

The Administrator group has the highest privilege of security rights followed by the Contributor and Reader groups. The Limited Access group has the least privilege rights, with minimum security rights.

The security groups are created with a set of permissions assigned for entities like List, List Item, Application, Menu etc. Different security groups will be created for different combinations of permission sets.

While creating a security group, all the global permission sets will be defined. If any permission sets are required at the list level, they will also be defined here. For example, the Association permission set for the process list.

Example: Security groups will be created at the Repository level but their definition can be modified at List or List Item level. So for an ‘Administrator’ security group which has the “Can Delete List item” right enabled at the Repository level, this delete right can be disabled at the List or List item level.

Security groups and their permissions

• Administrator - This group will have view, add, modify and delete rights to the entities.

• Reader  - This group will have only view rights to the entities.

• Contributor  - This group will have view and add rights to the entities.

• Limited Access - This group will have limited rights to the entities.

Note: The Create item security right, if assigned to a custom group, does not work for Workflow and Forms.