In CyberGrants, system security and functionality access are determined on an individual or group level to ensure that information is secure and that business needs can be met. Client-appointed internal administrators can create or edit user profiles and their Active status and licenses, providing greater visibility into license allocation, maintenance, and usage.
CLICK HERE to download a full list of user permissions.
User security
Every CyberGrants licensed user has a security level associated with their profile, which determines what areas of the system are visible and what actions can be performed based on the security level. This field is required for each user and cannot be left empty when creating or editing a user profile.
- Note: All non-viewer security levels (Administrator, Budget, Basic, Strict Basic) can change ownership of a request to another non-viewer security level user.
Security levels provide a foundation for each user's permissions. They are standard CyberGrants levels and cannot be added to or deleted from the system.
- Note: No two users should ever share or hold the same login credentials.
Security Level:
|
Description:
|
| Administrator | Administrators have full access to all tabs in the system. Administrators can add, change, or delete any system information and restrict user access. This group has the highest level of system access. |
| Budget | Budget-level users can access the Main, Surveys, Reports, Mail, Profile, Help, and Budget tabs. A budget-level user cannot edit another user's requests unless editor privileges are granted by an Administrator through Editor Linking. |
| Basic | Basic-level users are the most used role. Users have default access to the Main, Reports, Surveys, Mail, Profile, and Help tabs. Basic users can create and edit organization and request records but cannot edit another user's requests unless editor privileges are granted by an Administrator through Editor Linking. |
| Strict Basic | Strict Basic-level users can access the Main, Surveys, Mail, Profile, and Help Tabs. However, the Main tab only displays those requests owned by the user, requests they have editor access to, or requests currently pending their approval. They cannot edit another user's requests unless editor privileges are granted by an Administrator through Editor Linking. |
| Viewer | Viewer-level users can use the Main, Reports, Surveys, Profile, and Help tabs. A Viewer cannot edit or create an organization or request. However, they can participate in an approval process, edit their profile in the Profile section, and access a limited number of reports in the Reports section. |
| Strict Viewer | Strict Viewer-level users can access the Main, Surveys, Profile, and Help tabs. The Main tab is limited to requests that are currently pending their approval. The Strict Viewer user role is the most restrictive level of system access. |
User permissions
User Roles, User Types, and User Groups can provide an additional layer of security in the system by allowing clients to narrow down access to job-specific areas and functionality.
User Permissions:
|
Description:
|
| User Roles |
User Roles reference a user's security level to expand or limit a user's access.
Note: This setting is not required but is recommended.
|
| User Types |
User Types can be used to categorize users with a common characteristic. For example, user roles can organize users by job title or business unit. User Types are added to a User Group along with security levels to further organize security permissions.
Note: This setting is not required but is recommended.
|
| User Groups | User Groups automatically assign to a user based on the security level and User Type assigned to the group during configuration. User Groups should not overlap to avoid placing a user in more than one User Group. |
What else do you need help with?
Not what you're looking for? Navigate to Understanding Internal Users - Approvers and Administrators
