Role-Based Access

You have the following possibilities to assign roles to a user:

  • You can assign roles to users as fixed "rep roles":
    1. Select Administration > Reps to access the Rep info area (ID), >> Reps.
    2. Search for the rep you want to assign a role to.
    3. Select New Rep role from the context menu.
    4. Select the desired Login role.
    5. Check Active.

      The assigned role is always active when the user logs on and cannot be changed by the user.

  • You can assign several roles to a rep for the user to choose from when logging on:

    If a user checks Select Roles under More Options on the login dialog, he can select from his assigned roles after providing his login credentials.

    • Rep roles with Active checked cannot be deselected.
    • Rep roles with Default checked are automatically checked in the selection list.
    Note: To allow users the access the Select Roles check box on the login dialog, the settings.xml file must contain <CanChangeRoles>true</CanChangeRoles> in the <update.web> section.
    Note: Roles already be provided in the URL are not displayed in the role selection dialog.
  • Rep roles can be passed as URL parameters (e.g. if single sign-on is configured).

    To pass the role in the URL, specify the name(s) of the role(s). Separate multiple roles by comma.

    Example: http://<my web address>/crm/start?roles=Admin,Sales

    If a role's name contains special characters (e.g. Umlauts), these need to be URL-encoded.

  • It is also possible to define in a rep role that access to the CRM processes the role contains is granted exclusively read-only, >> Read-Only CRM Processes.

Changes in the assignment of rep roles (fixed and optional) are applied as follows: The rep's roles are refreshed only after logout+login.

  • without role selection at login: After the time specified in Cat. refresh frq. in the Station configuration info area (default: 30 min).
  • with role selection at login: Immediately after login.