Controls Module Security

Assignments are additive

If User has access to a control by at least one rule - User is able to see the Control

If User has access to a control with some Role by at least one rule - User is able to do all operations with the Control which the Role allows

Terminology

KEY Control is a control with Key Control option enabled

NON-KEY Control is a control with Key Control option disabled

Custom Assignments

Applicable to: a Control with Custom Assignments

Access granted to:

Users that are selected in Control page / Assignments tab
- with roles from Admin / Users / Edit dialog
Members of User Groups that are selected in Control page / Assignments tab
- with roles from Add Assignment dialog - if Consider Roles option of User Group is enabled
- with roles from Admin / Users / Edit dialog - if Consider Roles option of User Group is disabled

Company Defaults

Applicable to: all Controls

Access granted to:

Users that are selected in Admin / User Groups / Default User Groups page / Default Control Assignments section
- with roles from Admin / Users / Edit dialog
Members of User Groups that are selected in Admin / User Groups / Default User Groups page / Default Control Assignments section
- with roles from Add Assignment dialog - if Consider Roles option of User Group is enabled
- with roles from Admin / Users / Edit dialog - if Consider Roles option of User Group is disabled

Inherited from Org Unit/Entity Pair

Applicable to: NON-KEY Controls

Access granted to:

Users that are given access to Control's Org Unit / Entity pair
- with roles from Admin / Users / Edit Assignments page
Members of User Groups that are given access to Control's Org Unit / Entity pair
- with roles from Admin / User Groups / Edit Assignments page - if Consider Roles option of User Group is enabled
- with roles from Admin / Users / Edit dialog - if Consider Roles option of User Group is disabled

Key Control

Applicable to: KEY Controls

Access granted to: All Users with roles from Admin / Users / Edit dialog