-
Select the Roles node under the plant structure or project to which you want to add the new role.
-
Right-click and select New Role.
-
On the General tab, define the following properties:
-
Use local machine and domain groups — Use this option when you want to choose a user group that is defined on your machine or in any accessible domain.
-
Use site server and domain groups — Use this option when you want to choose a user group that is defined on the site server machine or in any accessible domain.
-
Define role for specified users — Use this option when you want to define a common role for individual users, such as users who may belong to several groups, including users who have an account in a domain that is not accessible.
-
Role name — Do one of the following:
-
For the Use local machine and domain groups or Use site server and domain groups options, click the ellipsis button
to display the Microsoft Select Group dialog box, which allows you to select the Windows user group you want to assign to
this new role. The name of the role will be the same as the name of the selected
user group.
If the group that is being added resides in a child domain in the Active Directory
structure, when you select Locations from the Microsoft Select Group dialog box, you must choose the child domain instead of Entire Directory. When you select the child domain and the GroupName, the group resolves in the New Role dialog box under Role name as the child domain\GroupName and all the users get populated in the database.
-
For the Define role for specified users option, type the role name that the software will use to grant privileges for the specified users.
-
-
Role description — Type a descriptive note about the role that you are creating. You can make notes that indicate the privileges assigned to the group.
-
Users — For the Define role for specified users option, add the names of users that you want to assign to the role. User names must be typed according to the Active Directory configuration using the syntax in one of the following options:
-
<User name>@<domain name>.<domain extension>, for example: ‘JSmith@anydomain.com'
-
The user's e-mail address, for example: 'John.Smith@MailServer.com'
-
-
Template — Select a pre-defined role template. Three role templates are delivered by default: None, Read-Only and Full Control. The None template grants no rights for the associated applications. The Read-Only template grants read-only rights to all the rights for the associated applications. The Full Control template grants full control to all the rights for the associated applications. You can edit individual rights after applying a role template.
-
-
On the Rights tab, specify the user rights for this group of users. This step is optional if you selected a template on the General tab. You can still modify individual user rights after applying a role template.
-
When setting the rights for the new role, be sure to not only set the rights for the applications, but also set the permissions available under the Smart Engineering Manager rights.
-
You can automatically include the site administrators group in each new plant you create or load by selecting the Add the site administrator group to each plant created option on the Site Properties > General tab. Doing this saves you the step of creating a new role to grant these users permissions for the new plant.