System Role

System Role is principal object for system rights assignement, grouping and linkage with user accounts

• Dependencies between roles
• Support for integration with business description
  • Usage notes
• Technical notes to the role object implementation
  • Object shared among clients
  • System role shared among clients

Role object is used to link people with system rights.

Dependencies between roles

Roles might have several ancestors and several subsidiary roles. However, create a cycle is forbidden.

Support for integration with business description

System Role contains fields that supports simple description of the business structure. These fields are not internally used by the sys module:

• clientType – currently unused
• managerID – optional organisation manager. Fields is not used for person responsible for the system role management.
• userType – unused by sys and not available for the administration management. Optionally could be used by other modules.
  (Unused by other modules in the business bundle – crm, tsk, am, hr).
• link to the object – role can be assigned to a single object. Not used by sys but system administration can remove the linkage.
  (Currently used only for documentation purposes. It is 1-N relationship which is not as useful.)

Usage notes

Manager is used by the tsk module for right control. Team managers got some additional rights to the people in the team

Technical notes to the role object implementation

Object shared among clients

System Role is one of the few objects that are partly shared among all SaaS clients. Althoug it has client ID attribute defined, it has two variants

• Shared system role without client assignment,
• Client-related system role with client

System role shared among clients

Shared system role are predefined for all new clients. It significantly simplifies user management for new clients, because common user administrator doesn't have to deep himself to the level of the system rights and use pre-defined roles only.
Shared roles also simplifies management of the whole system. When some rights shall be split, new right is created placed to the same system role nad nothing more is necessary.