Manage Security Roles

• Changes to existing roles take effect immediately. New roles must be assigned to vault folders as described in Assign Security Roles to a Folder.

• By default, new vaults have no security roles assigned and the first role that is assigned is granted exclusive access to the vault until other security roles are assigned. Create the role with the highest level of access first (for example, Administrator) and assign the system's administrators to it at the root of the vault before assigning any other security roles. This will prevent you from accidentally denying System Administrators access to the vault and assigning other roles. It will also grant System Administrators access to the entire vault unless role inheritance is overridden by assignments at any folders.

  Important!

  Before configuring security, be sure to create a rescue account to ensure you do not accidentally deny access to all System Administrators.

• By default, folders inherit their security role assignments from their parent folder recursively all the way to the root of the vault. This makes setting security for the entire vault as easy as assigning roles just once at the root of the vault.

  Role assignments for specific folders may then be overridden, if necessary, as described in Assign Security Roles to a Folder.

• After configuring and testing the roles in a vault, create a Windows user group for each role. The groups should be domain or local groups, as described in Meridian Support For Microsoft Active Directory. Then, assign the Windows user groups to roles in the vault. You may then easily add new users to the system by simply assigning them to the correct Windows user group without the need to change the role assignments in the vault.

• To export, import, or clear the security role assignments of a folder and its sub-folders, see Assign Security Roles to a Folder.

Configure the role with the most privileges first, and then copy the privileges of that role to the next role. Clear unnecessary privileges from the new role. Repeat copying the privileges of the role and clearing privileges until all roles have been created.

To create a role:

1. Click the New Role button.

   The New Role dialog box appears.

2. Click options or type values using the descriptions in the table below.

3. Click OK.

   A new column is added to the Roles and Privileges window with the copied privileges.

4. Select or clear the check box in the Privileges column for that role.

   For information about each privilege, see Security Privilege Descriptions.

   Note:

   Privileges for tables created prior to Meridian 2010 are not available until after they have been created by clicking the Privileges button on the General tab of the table in Configurator.

5. When you are finished creating roles, click OK.

To edit a role:

1. Select or clear the check boxes in the Privileges column for the role.

   For information about each privilege, see Security Privilege Descriptions.

   Refer to the cursors in the below figure when reading the following instructions to quickly select or deselect groups of privileges or roles.

   

2. Choose one of the following options:

   • To select or deselect all privileges for a role:

     1. Right-click the role name.

     2. Click Select All or Remove All.

   • To select or deselect all privileges in a group for single role:

     1. Right-click the empty cell at the intersection of the privilege group name row and the role column.

     2. Click Select this group of privileges for this role or Deselect this group of privileges for this role.

   • To select or deselect all roles for a single privilege:

     1. Right-click the name of a privilege.

     2. Click Select all roles for this privilege or Deselect all roles for this privilege.

3. Click OK.

To delete a role:

1. Click the Delete Role button.

   The Delete Role dialog box appears.

2. Select the role that you want to delete.

3. Click OK.

   The role is deleted.