Define the access privileges for Training and Qualification

When the team members work with qualification units, qualification profiles, and qualification records in Training and Qualification, you must ensure that they have access to only the data that they have created. You must also set up users who manage all types of Training and Qualification data. These users must be able to view, modify, and delete Training and Qualification data. For example, you can consider these users as the Training Coordinators of your team.

To complete the previous requirements, you must create a role and a group for Training and Qualification.

Example

For example, create Training Coordinator as the role and Training and Qualification as the group. Then, assign the Training Coordinator role to the Training and Qualification group. Add users who are Training Coordinators for your team to the Training and Qualification group. Then, you create the access control lists (ACL) with the required accessors to ensure that only the owning users and the users assigned with the Training Coordinator role can manage Training and Qualification data.

Procedure

1. Click the PEOPLE tile.

2. Create a role as follows:

Click the Roles page.

From the Primary toolbar, click New > Add.

Enter the name of the role, for example, Training Coordinator, in the Role box.

Click Add.

3. Create a group for Training and Qualification as follows:

Click the Groups page.

From the Primary toolbar, click New > Add.

Enter the name of the group, for example, Training and Qualification, in the Name box.

Enter the remaining properties, and then click Add.

Ensure that the group is selected, and click Add Role in the ROLES section.

In the Search tab, search for and select the role that you have created.

Click Add.

4. Create the ACLs to ensure that only the owning users and users assigned with the required role, for example, Training Coordinator, can view, modify, and delete the qualification units, qualification profiles, and qualification records:

In Teamcenter, open Access Manager.

Select the Has Class (WorkspaceObject) node in the access rule tree.

In the branch editor pane, in the Condition box, select Has Class.

Select an option from the Value list:

Tq0QualificationUnit for qualification units

Tq0QualificationProfile for qualification profiles

Tq0QualRecord for qualification records

In the ACL Name box, type the ACL name.

Click Create next to the ACL Name box.

Grant Read, Write, and Create privileges to owning users as follows:

Click Add to add a new row to the ACE table.

Double-click the cell in the Type of Accessor column, and select Owning User.

Double-click the empty ACE boxes for the Read, Write, and Delete privileges, and choose the check mark to grant privileges.

Click Save in the Named ACL pane to save the ACL.

Grant Read, Write, and Create privileges to the required role, for example, Training Coordinator, as follows:

Click Add to add a new row to the ACE table.

Double-click the cell in the Type of Accessor column, and select Role.

Double-click the cell in the ID of Accessor column, and select Training Coordinator.

Double-click the empty ACE boxes for the Read, Write, and Delete privileges, and choose the check mark to grant privileges.

Click Save in the Named ACL pane to save the ACL.

Deny Read, Write, and Create privileges to all users as follows:

Click Add to add a new row to the ACE table.

Double-click the cell in the Type of Accessor column, and select World.

Double-click the empty ACE boxes for the Read, Write, and Delete privileges, and choose the cross mark to deny privileges.

Click Save in the Named ACL pane to save the ACL.

Click Add to modify the branch.

Click Save in the Access Manager toolbar.

Repeat the ACL process, beginning with selecting an option from the Value list, until you have completed the creating ACLs for qualification units, qualification profiles, and qualification records.

5. After you set up the roles, groups, and ACLs, assign designated users to the role that you have created for the Training and Qualification group.