User groups provide a quick and easy way to assign rights to users. Once you have defined the rights for a user group, all you have to do is link a new user to that group in order to grant that user the group rights.
You can always modify a user's group rights by setting individual rights for that user.
Note: When you add a new user or user group to Isah, this user or user group will not have any status rights. You can change this by adding lines with status rights, or by selecting the Assign maximum status range check box for the Create user rights process or the Create user group rights process.
Note: Rights at user level have priority over the rights configured for the user group to which the user belongs. This allows you to exclude a particular user from a program, even though that user belongs to a group that does have rights to the program.
Note: The new rights will take effect after you have restarted Isah.
A user group will not be active until this check box has been selected. If this check box is not selected, the rights assigned to the user group are not valid in Isah.
An application administrator manages user accounts and assigns rights to users or user groups in Isah. A user with application administrator rights automatically has all rights to certain forms, to allow him to perform application administrator tasks.
There should be at least one user with application administrator rights.
Application administrator rights are assigned to a user if the following conditions are true:
The Application administrator check box on the Users form is selected.
and/or
The user has application administrator rights due to his membership of one or more user groups. This is the case if all of the following conditions are true for the group(s) to which the user belongs:
The Application administrator check box on the User groups form is selected.
At least one group is active (the Active check box on the User groups form is selected).
The user is an active member of that group (the Active check box on the Groups by user form is selected).
The Groups by user form lists all groups to which the user belongs.
Tip: If the Integrated Login functionality is used, it is possible to abort the automatic login in Isah and to log in as an Isah user instead of using a Windows account, provided that this Isah user is an application administrator. Aborting the integrated login is possible only if on the Users form the Windows user name field is empty. If you want to manage only Windows accounts, fill in the Windows user names for all users, including the application administrators.
A user with application administrator rights always has rights to the following forms and operations, regardless of the other rights that may have been assigned to that user:
Active