Portal Security Controls

Using Portal Security Controls you can "slice and dice" Access Rights down to very fine precision for Customers visiting your Company Web Portal.

1.	Inheritance - There is vertically descending control through three levels. The Company level is the top level and the starting point for Inheritance of Access Rights to the Customer and individual Portal User below.

2.	Information Type - In addition, across the board you can configure every feature on the portal, by isolating access to each specific information type.

3.	Access Rights - within each selection, various degrees of activity are authorized to specific Portal Users.

The table of Web Portal Transactions below shows some "make-believe" combinations. At this time actual activity can only be performed for the three right-hand columns, Service Requests, their Notes, and Work Order Notes.

	Equipment	Invoices	Job Sites	Payments	Svc Req	S R Notes	WO Notes
Company Level	Read Only	Read Only	Read Only	Read Only	Full	Full	Full
Customer Level	Read Only	Read Only	Read Only	Read Only	Full	Read Only	None
Portal User Level	NONE	NONE	Full	Full	Read Only	NONE	Full

Authorized Employees:

In addition, within your own Company you can control Employee access to the Web Portal through the usual means of User Groups and inherited Access Rights on the individual Employee Security Tab. There are two entries which relate to the Web Portal. If an Employee has No Access, these functions will not even appear for that User ID when signed on to FieldOne.

Access Category

Access Type

1.	Miscellaneous

Portal User Logins

2.	Work Order

Portal Service Request

Inheritance:

The way that Inheritance works is that, at each level below, a specific authorization is the same as the "parent's" but can be changed, even to override Inherited rights from above.

1.	Company level - The Company Portal Rights Sub-Tab controls your entire Company and all Customers who enter the Portal.

2.	Customer level - The Portal Rights Sub-Tab controls a particular Customer and all of that Customer's Portal Users.

3.	Portal User level - Customer Portal User Sub-Tab - controls which functions and Job Sites a particular Login ID can access and update. (See also, Links Available on the Home Page.)

Note: If desired, more than one person at the Customer's company can use the same Portal User sign-on and password, so it is possible to administer security for groups of users.

Inheritance example: You could even say at the Company level that there is No Access allowed for anyone to anything in the Portal. But then you could authorize either a particular Customer (at the middle level) or an Individual User (at the lowest level) to have whatever specific Rights you choose.

Information Type:

The following information types are available through the Company Web Portal. See the Company Preferences Customer Portal Tab, where these are displayed on the sample Access screen. Also, see Portal Information Types, showing sample Web Portal screens for each one.

•

Equipment

•

Invoices

•

Job Sites

•

Payments

•	Service Requests (to add or change)

•	Service Request Notes (for Feedback)

•	Work Order Notes (for Feedback)

Access Type:

The different degrees of access determine what the Portal User is able to do with the data. "Full Access" means that any available activity is allowed.

•	Full Access

•

Read Only

•

No Access

Page url: http://www.fieldone.com/startech/help/index.html?_access_rights.htm