Inheriting Access Rights

Learn how access rights can be inherited.

In addition to the general hierarchical concept behind access rights (access rights for stations, groups, reps and roles), access rights can also be inherited. This allows you to define access rights that apply to your entire company, and allow local administrators to extend or edit the access rights as necessary. In the process, you can partially or completely override restrictions in the original access rights or extend the restrictions further.

Access rights assigned to a station, group, rep or role can be extended globally or locally, see Defining Extensions. Global extensions are valid for all stations, groups, reps and roles where the root access rights are entered. Local extensions only apply to a specific station. In the root format, you can determine which settings can be changed in the extensions, see Inheritance Settings. You can also determine which Further settings can be changed in the extensions, see Inheriting Further Settings.

Define additional access rights applied to the Format info area, for example to determine that local administrators can view but not edit the parent access rights, see Conditional Access to Info Areas.

The various applicable access rights are combined at runtime and applied as follows:

You can merge one or more access rights format to display or test the combined settings, see Merging Access Rights.