| Level | Description |
|---|---|
| Workspace level | Access at an overall level, such as an entire workspace. Access on this level will also impact windows and entities. |
| Window-level | Access based on windows. For instance, access to a specific window, but not to the window settings. You can configure whether a role can view or edit the window information. |
| Entity level | Access based on functionality. For example, the ability to access and edit sales invoices, while excluding changes to currency. |
| Level | Description |
|---|---|
| Not set | Allows all roles to have access to the workspace until Revoked or Granted access level is set to the workspace for at least one role. After that, a role with this level is denied access to the workspace. |
| Revoked | Denies the role access to the workspace and its windows. Users with this role will not be able to see the workspace or its contents. However, users with this access level may still have access to the functionality of the windows within the workspace. They can only access these windows from other windows with commands to open them, and they cannot view the windows on the navigation pane. |
| Granted | Allows the role access to the workspace. You can, however, limit or revoke access to particular windows within the workspace. Only a user with a role with an access level to a window higher than Revoked can access it by clicking the workspace on the main menu and then clicking the window on the navigation pane. |
| View only | Allows the role access to the workspace. You can, however, limit or revoke access to particular windows within the workspace. Only a user with a role with an access level to a window higher than Revoked can access it by clicking the workspace on the main menu and then clicking the window on the navigation pane. |
| If you set the access level for the workspace to | Then |
|---|---|
| Granted | the access level to the workspaces is changed to Granted, and the access level to windows are changed to Delete(which allows full access to the window and its functionality). |
| Revoked | the access levels to the windows are changed to Revoked. |
| Level | Description |
|---|---|
| Not set | When assigned to all roles, allows all roles to have access to the window until access rights are set to any other level for at least one role. After at least one role has been assigned another level of access rights, access to the window is denied for a role with this access level. |
| Revoked | Denies the role access to the window and its functionality. |
| View only | Gives the role restricted access to the window and its functionality. This level allows users with the role to view the window and any records associated with the window (in drop-down lists on other windows). This level forbids users with the role to edit details about any record, create new records or entities of the type, and delete records. |
| Edit | Gives the role restricted access to the window and its functionality. This level allows users with the role to view the window, select records, and edit details about any record. This level forbids users with the role to create new records or entities of the type, and to delete records. The Clipboard button is available on the window toolbar for users with the role. |
| Insert | Gives the role restricted access to the window and its functionality. This level allows users with the role to view the window, select records, edit details about any record, and create new records or entities of the type. This level forbids users with the role to delete records. The Clipboard and Insert buttons are available on the window toolbar for users with the role. |
| Delete | Gives the role complete access to the window and its functionality. This level encompasses the capabilities of the View only, Edit, and Insert levels, while also giving users with the role the ability to delete records. For users with the role, the Clipboard, Insert, and Delete buttons are available on the window toolbar. |
| Level | Description |
|---|---|
| Inherited | Indicates that the role’s access to the container is inherited from its access level to the window. |
| Revoked | Denies the role access to the container and hides it from the window for users with the role. These users will not see the container in the window. |
| View only | Gives the role restricted access to the container and its functionality. This level allows users with the role to view the container and any records associated with the container (in drop-down lists on other windows), if applicable. The level forbids users with the role to edit details about any record, create new records or entities of the type, and delete records, if applicable. |
| Edit | Gives users with the role restricted access to the container and its functionality. This level allows users with the role to view the container, select records, and edit details about any record, if applicable. The level forbids users with the role to create new records or entities of the type, and delete records, if applicable. |
| Insert | Gives the role restricted access to the container and its functionality. This level allows users with the role to view the container, select records, edit details about any record, and create new records or entities of the type, if applicable. This level forbids users with the role to delete records, if applicable. |
| Delete | Gives the role complete access to the container and its functionality. This level encompasses the capabilities of the View only, Edit, and Insert levels, while also giving users with the role the ability to delete records, if applicable. |
| Level | Description |
|---|---|
| Inherited | Indicates that the role’s access level to the element is inherited from its access level to the container of window elements. |
| Revoked | Denies the role access to the element and hides the element. A user with the role will not see the element in the window. |
| View only | Makes the element read-only for users with the role. A user with the role will see the element in the window but will not be able to use it. |
| Edit | Allows the use of the element for users with the role. |
| Element | Description |
|---|---|
| Username | The username of the person for whom you want to view the system log. Leave this field blank to view data for all system users. |
| From | The date and time that starts the range for which you want to view data. Leave this field blank if you do not want to limit the starting date and time of data. |
| To | The date and time that ends the range for which you want to view data. Leave this field blank if you don’t want to limit the ending date and time of data. |
| Operation | The operation for which you want to view data. The following operations are available:
|
| Column | Description |
|---|---|
| Date | The date and time of the activity. |
| User name | The name of the user who performed the activity. |
| Operation | The operation performed by the user. (See the list of operations in the previous section.) |
| IP address | The IP address from which the user signed in to the system. |
| Window ID | The screen ID of the window that was accessed by the user. |
| Title | The name of the window that was accessed by the user. |
| Comment | The automatically generated comment. |
| Button | Description |
|---|---|
| Copy role | Copies the set of access rights of the selected role to the new role. To create and populate a new role, type the new role name in the New role name field in the New role dialog box, which appears when you click this button, and click Copy. |
| Element | Description |
|---|---|
| New role name | The name of the new role to which access rights will be copied. |
| Copy (button) | Creates a new role and copies the access rights of the current role to the new role. |
| Element | Description |
|---|---|
| Role name | The role name. Select a name from the list of roles or, if you’re adding a new role, type the role name. |
| Role description | The description of the role. |
| Column | Description |
|---|---|
| Description | The name of the object. |
| Access rights | The access rights of the selected role for the object. For more information, see: About levels of access rights. |
| Applies to children | A check box that indicates (if selected) that the access rights level to a system object specified for the selected role is the same for all nested objects (children) within the object. You can change the access rights level for any nested object manually. The system clears this check box automatically when the access rights levels of the system object and its children become different. |
| Element | Description |
|---|---|
| Role | The name of the role. |
| Guest role | A check box that, if selected, indicates that the role is marked as a guest role. For details, see: About role-based access. |
| Description | A description of the role. |
| Access rights | The access rights of the role for the selected object. For more information, see: About levels of access rights. |
| Applies to children | A check box that indicates (if selected) that the access rights level for the role specified to the selected system object is the same for all nested objects (children) within the object. You can change the access rights level for any nested object manually. The system clears this check box automatically when the access rights levels of the system object and its children become different. |
| Element | Description |
|---|---|
| Role name | The unique identifier of the role. Type the name of the new role, or select a role from the list of available roles. |
| Role description | A detailed description of the role. |
| Column | Description |
|---|---|
| Username | The login name of the user to whom this role is assigned. |
| Display name | The combination of the First name and Last name in the Users (SM201010) window of the user selected in the User name column. |
| Comment | Any comment that was provided for the selected user in the Users (SM201010) window. |
| Element | Description |
|---|---|
| User type | The unique identifier of the user type. Enter the ID of the new type, or select a user type from the list. |
| Linked entity | The entity associated with this user type. The following options are available:
|
| Description | A description of the user type. |
| Button | Description |
|---|---|
| Apply to users | Applies the default roles to all users of the selected user type. You can click this button if you have added a default role to the list of allowed roles and want to assign this role all users of the selected user type. If you instead want to assign a role for a particular user, you can use the Users (SM201010) window. |
| Column | Description |
|---|---|
| Default | A check box that you select to assign the role to a user of this type by default. The role or roles with this check box selected will be assigned to any new user of the type. (If you change value of this field after creating users of the selected type, their user role assignment will remain unchanged.) |
| Role name | The role that can be assigned to the user of the type. |
| Role description | Read-only. The detailed description of the role. |
| Element | Description |
|---|---|
| Use email as login | A check box that you select to use the email address of a contact as the username of the contact for new users of this type. This policy applies only when you add a user account to a contact account by using the Contacts (CR302000) window. |
| Reset password on first login | A check box that you select to require new users of this type to change their password at the first login. |
| Require login activation | A check box that you select to require activation of a new user account. If you select this check box, new users of this type will receive an email with information on how to enable their user account. |
| Button | Description |
|---|---|
| Membership | Opens the Restriction groups by user window, where you can view or configure the user’s membership in groups. This button appears only when you are viewing an existing user. |
| Element | Description |
|---|---|
| Login | Required. The unique login name to authorise this user to log in to the system. Select a user name to view information about the user. |
| Guest account | A read-only check box that indicates (if selected) that the account is associated with a contact-related user type. For a new user, the system selects or clears this check box automatically when you select the user type. Not used. |
| User type | The user type of this user, which defines the set of roles available to the user, the default roles assigned to the user, and the user types for which the user can create, manage, and add users. If you are creating a user account for a contact, you must select a contact-related user type for the user or add a new user type. To add a new user type, click Edit to the right of the field to open the User types (EP202500) window in a pop-up window and add the type. This field is not available when you select a domain user. |
| Linked entity | An employee or contact account that is associated with the user. If the user you are creating is already defined in the system as an employee or contact account, you can select the appropriate employee or contact name in this field. This will cause relevant elements to be filled in. The user type you have selected determines whether this field can be left blank and what type of account you can select. If you have selected an employee-related user type in the User type field or left it blank, you can select an employee account or leave the Linked entity field blank. If you have selected a contact-related user type in the User type field, you must select a contact account here or add a new contact. To add a new contact account, click Edit to the right of the field to open the Contacts (CR302000) window in a pop-up window and add the contact account. When you save the added contact account, it will automatically be inserted in this field. |
| First name | The first name of the user. |
| Last name | The last name of the user. |
| The email address of the user, which is used to send information to the user, such as a link to password reset. | |
| Comment | Any additional user-related information that you want to add to the record. |
| Column | Description |
|---|---|
| Selected | A check box that you select to assign this role to the selected user. |
| Role name | Read-only. The name that identifies the role. Roles that have been transferred from Admin are labelled as “Default”. |
| Role description | Read-only. The description of the role. |
| Element | Description |
|---|---|
| Account creation date | Read-only. The date and time when the account was created. |
| Last login date | Read-only. The date and time of the last login. |
| Last lockout date | Read-only. The most recent date when the account was temporarily locked out. |
| Last password change date | Read-only. Not in use. The date and time of the most recent password change. |
| Number of unsuccessful attempts to enter password | Read-only. Not in use. The number of unsuccessful attempts the user made to sign into the account. It is reset according to a value of the Reset lockout counter after x minutes field in the Security preferences (SM201060) window. |
| Number of unsuccessful attempts to enter recovery answer | Read-only. Not in use. The number of unsuccessful attempts the user made to enter the user recovery response. |
| PDF signing certificate | The certificate that the system will use for signing PDF files this user generates in Visma Net. |
| Time zone | The user’s time zone, which will be used to display the timestamps for documents. If a time zone is specified for the user, these timestamps will be converted to the user’s specified time zone. If no time zone is specified, documents will be time-stamped using the time settings on the server computer. |
| Default branch | The branch to which the selected user will be signed in by default if the user has access to multiple branches. |
| Home page | The dashboard to be displayed for the user on the home page of Visma Net instance. |
| Element | Description |
|---|---|
| User name | The name of the user who has created the log. If you do not select any users, the logs of all users will be displayed. |
| Log date | The beginning of the log date range of the logs to be displayed. |
| To | The end of the log date range of the logs to be displayed. |
| Posted date | The beginning of the posting date range of the logs to be displayed. |
| To | The end of the posting date range of the logs to be displayed. |
| Account ID | Logs related to the account selected here will be displayed. |
| Module | The origin of the logs. |
| Transaction type | The type of the transactions to be displayed. |
| Show only financial years | When this is selected, only logs related to financial years will be displayed. |
| Show only financial periods | When this is selected, only logs related to financial periods will be displayed. |
| Show only SIE imports | When this is selected, only logs related to SIE imports will be displayed. |
| Column | Description |
|---|---|
| Log date | The date when the logged activity was performed. |
| User name | The name of the user who has created the log. |
| Activity | The logged activity. |
| Ref. no. | The reference number connected with the logged transaction. |
| Batch no. | The batch number connected with the logged transaction. |
| Module | The origin of the logs. |
| Doc. source | The source of the document: SIEImport,Importscenario. |
| Account | The account connected with the transaction in the log. |
| Amount | The amount of the transaction in the log. |
| Element | Description |
|---|---|
| Format | The format of the report. Select one of the following options:
|
| Element | Description |
|---|---|
| Format | The format of the report. Select one of the following options:
|