Default Authorization

Most administrators have a few key authorizations which must be implemented. Access to certain specific information or actions should be available to certain users. The administrator does not need to go through every single action and piece of data and specify whether a particular role should or should not be allowed access or not.

The Default Authorization is a global authorization which applies to business and technical objects alike. The default authorization always applies when no other authorization has been specified.

To define the Default Authorization the administrator must ask which philosophy will apply when specifying authorizations. Should Valuemation generally be open with certain specific information to be restricted or should access to everything be restricted and only the defined exceptions are permitted? The answer to this questions decides how the default right should be defined.

This allows the administrator to specify the general settings in one single step. The specific authorizations are the exceptions to this general rule.

For instance, default right set to Read means that all users can read (or execute) all data but not change it, unless there is a specific authorization with a higher priority. Usually, a right with a higher priority also has a narrower scope.

The default right is allocated automatically to all roles created in User Manager.

Note: Default Authorization set to No Read doesn’t mean that the user wouldn’t be able to log into Valuemation. He/she won’t be able to access any business objects in the system.

Note: Default right relates both to business objects and technical objects.

For information about setting the Default Authorization see Setting the Default Authorization topic within the List chapter.