BPC RiskManager - Creating and Updating Users
Contents
Introduction
Both creation and updating of user access details is handled through the "Maintain Users" screen. With this screen you can:
- Allocate access rights and access areas
- Reset or create passwords
- Set or revoke the Auditor status
This document covers the process for handling the "Maintain Users" screen.
Updating User/Resource Details
If you want to change a person's name, title or email address, you need to use the "Maintain Resources" screen. Help with this screen is at BPC RiskManager - Creating and Updating Resources.
Updating User Access Rights
If you want to change their access rights, then you are in the right place.
Adding a resource as a User
Before someone can be a user, they must first be a resource. If you are trying to add a new user, but have not yet made them a resource, you should first refer to BPC RiskManager - Creating and Updating Resources
If you are trying to add an existing resource as a user, you are in the right place.
Adding a New or Updating an Existing User
Introduction
There are two ways a previously created resource may present in the "Maintain Users" screen:
- As a result of a bulk import of resources where "add new user" flag has been set
- As a result of any other method of creating resources.
The essential difference, is that where users have been added in bulk they will have been created as a user with no rights (so you should use the section titled "Updating User Access Rights"), whereas where the resource has otherwise been created the resource will have no presence as a user and will have to be added (so you should use the section entitled "Turning a Resource into a User").
Turning a Resource into a User
Follow this procedure if:
- You wish to grant an existing resource access rights to BPC RiskManager.
- You added resource in bulk, but DID NOT check the "add as user" flag.
Steps for adding a new user:
- Open your BPC Risk Manager client and select the Access tab (you must be an RM Administrator to do this)
- Select the security button
- A Set up Security window will open.
- On the top tab bar select "Step 2 - Define Resource Access Rights". The user rights management screen will display.
- For each resource you wish to add:
- Left click the new button. (A new line will appear in the user grid, and the network user name drop list will become active).
- Left click on the "v" beside the the Network User Name drop list and the list of resources not yet granted user status will apear.
- Locate the target resource from the list and select it by left clicking on the corresponding line in the list. The list will close and the resource will be inserted into the Network User Name field.
- Select "Save" from the top of the screen.
- Now procede to "Updating User Access Rights" for each user you added and assign them their appropriate rights.
Updating User Access Rights
Follow this procedure if:
- You want to change (add or remove) an existing user's access rights,
- If your new user was created through a bulk import where the "add new user" flag was checked.
Steps for updating user access rights:
- Open your BPC Risk Manager client and select the Access tab (you must be an RM Administrator to do this)
- Select the security button
- A Set up Security window will open.
- On the top tab bar select "Step 2 - Define Resource Access Rights". The user rights management screen will display.
- New users automatically created during resource imported are created with no rights as shown. Existing users may already have access rights that you wish to change.
- For each user you wish to modify select their corresponding row in the grid.
- In the lower half of the screen (below the grid):
- In the "Assigned Role" drop box field, select the user's access role from the list.
- If the user is an auditor, and should be able to create the audit assessments, etc. Select "Yes" from the "Is the user an Auditor?" field.
- Determine whether the user has restricted or unrestricted access rights, for risk types and business areas respectively. If the user is unrestricted simply chose the unrestricted option from the drop list, click the save button and you are finished with this part of the screen. If the user is restricted, you must grant them access to the particular risk types and business areas to which they should have access.
- Select the "Save" button at the top of the screen, if it is highlighted, to save the changes made so far.
For "Risk Type" restricted users:- In the "Access to risk types" column left click on "Add".
- Left mouse click the empty cell that appears in the left hand grid under "Risk Type", and a drop down box selector will appear.
- Select a risk type from the list in the drop down box.
- Select "Save" from the column control panel beside the Risk Type grid (if it is highlighted - the first row will often save automatically)
- Repeat for each Risk Type to which you want them to have access.
For "Access to Business Area" restricted users:- In the "Access to Business Area" column left click on "Add".
- Left mouse click the empty "Business Group" cell that appears in the right hand grid under "Access to Business Areas", and a drop down box selector will appear.
- Select a Business Group from the list in the drop down box.
- Left mouse click the empty "Business Unit" cell that appears in the right hand grid under "Access to Business Areas", and a drop down box selector will appear.
- Select a Business Unit from the list in the drop down box.
- Select "Save" from the column control panel beside the "Access to Business Areas" grid (if it is highlighted - the first row will often save automatically)
- Repeat for each business group / business unit combination to which you want them to have access.
- Finally select "Save" from the top of the screen (if it is highlighted) to save the changes made to this user.
- Repeat this process for each user for which you wish to make changes.
- If you wish to remove a user from access to a risk type or business area, simply select the row in the appropriate grid and chose delete from the panel beside the grid (NOT THE TOP OF THE SCREEN - as this will delete the entire user!)
- When you are finished, simply close the screen using the normal windows close box in the top right hand corner of the window.
