In
this session we are looking at how we manage profile subscription. |
Subscription Profiles
are profiles that we list on other User’s Master Records for them to
subscribe to. That is an excellent way
of managing User access. Usually these
Subscription Profiles are Non Logon Users that we set up for this very
specific purpose i.e. so that we can use them for other Users to subscribe
to. |
When we want to Subscribe
a User to some profiles, we just list those Profiles on the User Master
Record and then we use the Generate option to create this access for the
Current User and when we make any changes to the list of Profiles Subscribed
to, we also use the Generate option. We will see in a moment
how we do this. |
When we make any changes
to the Subscription Profiles themselves, then we should use the Global
Enforce Profiles option to make sure that these changes flow through to any
users that subscribed to such a Profile. We will also look at how
we do this in a moment. |
When
we want to check for any User, or for any Subscription Profile, or for some
Users, or all Users, what access they have, then we can use the various
access Reports to reveal this information. |
So now we will look at
some examples, but before we continue, we note that I am in a specific Data
Mart at any point in time. Currently I am in the
Kernel, i.e. the Infolab Data Mart, and
whatever Profile Access I perform, is local to this Data Mart. In other words, in every
Data Mart we have local User Access Profiles and Business Profiles for Users. |
Now
I go to Maintain User And I choose Maintain
User. |
|
|
Because
when we use Profile Subscription |
|
We
do most of this from the User Master Record |
We
choose the Profiles Tab |
|
And
we note here |
That
the Profile Access that we perform here, even though we are working with the
User Master Record which is visible in all Data Marts, yet the Profile Access
specifically applies only in this Data Mart. |
So
now we refer back to this slide that said: When we want to Subscribe a User
to some Profiles, we just list them and then we use the Generate option. |
So
in order to Subscribe this user to some Profiles, I can do it here. |
And use the Look Up
also, or the cross-reference, by just typing some keywords. I am going to use the
easy way now and select Profiles to Subscribe. |
|
|
|
So
I say Next - I want it from
Non-Logon User Codes. |
|
|
Because
those typically are only Subscription Profiles |
|
And in this case I am
going to select for this User |
|
Just
randomly 3 of these Profiles |
|
So
that we can use the Generate Profile Access. |
Right,
so this is the option that we use to generate: Generate Profile Access. |
|
So
when I choose that |
The
system is then going to Generate Access |
According
to the Profiles currently listed |
|
On
this list over here |
Profiles
Subscribed To |
What I can also do here
is the Access Excess Report. In other Words if I run this report then it will
show me for this User, any access that this User has, that is not part of the
Profiles listed. |
Because
this User is on Profiles Plus |
And
even if the User is on Profiles Only, there might have been a time before,
when the User was not on Profiles Only, and we can use the Access Excess
Report to reveal any Access that is over and above what’s listed as Profiles
Subscribed To. |
|
But
when we use the Generate Profile Access Option |
|
If
the User is on Profiles Only, then after that action, the User will have
nothing except the Profiles Subscribed To. |
|
But, if the user is on
Profiles Plus, then of course it is possible to have other menu options in
addition to the Profiles Subscribed To. |
Right.
Now what happens if we make any changes to any of the Subscription Profiles |
Now the options to build
a Profile like a Subscription Profile or to build a User’s Menu Profiles
without Subscription, is not found here.
These are other options
and we deal with how we construct such a Menu Profile in other tutorials. |
But
the point is, if any of the Profiles that we use for Subscription - |
|
|
If we make changes to
any of those, then we have to use the Enforce Profiles Option to run through
the various Users that may subscribe to this profile, so that the changes can
be picked up. Right. So we have
another look at that slide now. |
And what we have said,
is that if we change any of these Subscription Profiles in any way, then we
must use the Enforce Profiles option to ensure that this Access change or
changes flow through to the Users Subscribing to these Profiles. OK. So we will see now how we use the Enforce
Profiles. |
So
from the User Access and Profile Management
Main Wizard, under Manage Access, we have this option to Enforce
Profiles. |
|
|
When I choose that, I
can choose to do it for All users or for Selected Users. So if there are only 1
or 2 Users that we know are affected by some changes that have been done,
then we can choose to do this exercise only for those Users. But we can also do it
for All Users and that way we will ensure that any changes to the
Subscription Profiles, or just as a global maintenance option, are enforced
upon all the Users. Remember that this
action affects only this particular Data Mart and not other Data Marts. Only
this one. |
So
if I choose All Users now - |
Then the system is
running through the registered Users and making sure that all the Profiles
Subscribed to are Enforced. |
In other words, Users
who have Access only to Subscription Profiles, will have only those
options. They are on Profiles Only. They will now definitely
only have access, as listed on the Profiles, that they subscribed to. But Users who have Profiles Plus will
certainly have all the options available and any latest changes or recent
changes on Subscription Profiles. They will have all those options but they
may still have other options in addition if they are on Profiles Plus. |
|
|
|
|
