Feature Description
Designer Functionalities
The Identity and Access Management window can be opened by clicking Tools > Identity and Access Management.
The first step of the Security configuration is the registration of a user account and password. The next step is to assign a security level to each account. These configurations only let verified users control specific functions.
Users
Users can be set up to allow specific permissions and actions when a user is logged in or out. In the Users tab, click the + or Add User icon and add any configurations needed to create the user. Once done, click OK, and the user will be made. Once created, users can be logged into and interact with anything they have permission to interact with. Users will be able to have an email set up to have notifications sent to the email provided.
To edit a user, click on the username that needs to be edited and click on the Edit User icon. This will redirect back to the configuration menu, where any changes can be made to the user. Once done with edits, click the OK button to apply the changes.
To delete a user, click on the username to be removed and click on the Delete User icon. The username will then be removed from the list and cannot be logged into.
Back to Top of Identity and Access Management
Login and Logout
A login system must be implemented to access any user that has been created.
One option is to use the Open Login Window and Logout User commands. These are available for every page and object that has actions available to it. Clicking Open Login Window will bring up a login screen with a Username and a Password field. Clicking Logout User will log out the currently logged-in user.
The second option is to use the system.login(“UserID”,”Password”) and system.logout() subroutines inside of a script. The system.login(“UserID”,”Password”) subroutine will log in with the provided username and password. The system.logout() subroutine will log out the currently logged-in user.
Groups
Groups are used to organize users under an umbrella to give permissions to multiple users at a time. To create a group, click the Group tab in the Identity and Access Manager window. Once on the Group tab, click the + or Add Group icon to create a group. Multiple users and permissions can be placed under the newly created group. Once all additions are made, click the OK button to finish creating the group.
To edit a group, click on the group to be edited and click on the Edit Group icon. This will redirect back to the configuration menu, where any changes to the group can be made. Once done with edits, click the OK button to apply the new changes.
To delete a group, click on the group to be removed. Once selected, click the Delete Group icon to remove the group from the list. Any users under the group will lose any respective permissions they had received from the group.
Permissions give users access to specific functionality and prevent unauthorized access to particular portions of the program. To create a Permission, first go to the Permission tab. Once in the Permission tab, click the + or Add Permission icon to make a new permission. Once the permission is named, hit Enter or click off of the new permission to stop editing. A description can be added by double-clicking the Description field, typing the description needed, and then hitting Enter or clicking off the new description to stop editing.
To edit any permission, double-click either of the fields and type in any changes.
To delete a permission, select a permission to be removed and click on the Delete Permission icon to remove it from the list. The removed permission will be automatically removed from any users that had it previously assigned.
Adding Permissions
Objects with actions available can have permissions set onto the object. To select a permission, go to the Action tab on any object. Click on the Change Permissions icon to add permission to the object. Once the permission is added, any users without the correct permission will no longer be able to interact with the object.
Back to Top of Identity and Access Management
Runtime Functionalities
Login Functionality
To access permissions to interact with objects, the user must first be signed into an account with permission to interact with them. When an object has the action to create a login window upon interaction, the user must type in the username and password to access the account. The username is not case-sensitive; however, the password is case-sensitive.
Logout Functionality
Users can also log out of accounts during runtime to change accounts. There is no indication that the user has successfully logged out by default. Once the user is logged out, objects that require permission to be interacted with will no longer be able to be interacted with and will send an on-screen notification that the user has insufficient permission.