Security Groups Overview

You must have access to the Settings.SecurityGroups security application to access Security Groups.

A security group is a set of records that says who can perform what tasks within an application. Once the security group is established, members, permissions, and access points can be added to the security group.

At least one organization and organization unit must be defined before you can begin.

To access Security Groups:

1. From the Settings section of the left navigation menu, select Security Settings. From the Security Settings page, select Security Groups from the Security section.
   The Security Groups page displays, as shown below.
   
2. From this page, you can perform the following:
   1. Search and filter the grid using the filter fields at the top of the page. You must be a Super User to change the Organization and Organization Unit filters.
   2. Copy the security group by selecting Copy Security Group from the contextual menu next to the security group you wish to copy in the grid
   3. Delete a Security Group by selecting Delete from the contextual menu next to the security group you wish to delete in the grid.
      You must have DELETE permissions to the Settings.SecurityGroups security application to delete a security group.
   4. Edit a security group by selecting the edit pencil next to the security group you wish to edit in the grid.
      You must have EDIT permissions to the Settings.SecurityGroups security application to edit a security group.
   5. Create a new security group by selecting the +New Security Group option above the grid.
      You must have ADD permissions to the Settings.SecurityGroups security application to create a new security group.
   6. Open the security group Summary to see details on the security group by selecting the hyperlinked Group Name in the grid

Create a New Security Group

You must have ADD permissions to the Settings.SecurityGroups security application to create a new security group.

To create a new security group:

1. From the Security Groups page, select +New Security Group.
   The Add New Security Group page displays, as shown below.
   
2. Enter a unique Group ID and Group Name.
3. Enter the Group Description.
4. Select the appropriate Organization.
5. Select the appropriate Organization Unit. 
   You must be a Super User to create a security group outside of your current logged in Organization and Organization Unit.
6. From the Security Group Options section, the Active toggle defaults to Yes; change if necessary.
7. In the Desktop Options section, set the appropriate toggles:
   1. Visual Designer
   2. Publish Screens
   3. Web Services Designer
   4. Debug Tools
   5. Database Designer
   6. Application Designer
   7. Publish Web Services
   8. Web Form Designer
   9. Unified Search
      To comply with PA-DSS, any user who can use debug tools is considered an “Administrator”. If you do not want a specific security group to have administrator privileges, make sure to set the “Debug Tools” toggle to No. If this toggle is set to Yes, the security group defaults any user within that group to administrator privileges.
8. Click Save.

Screen Element	Description
Group ID	Text box. A unique ID for the security group.
Group Name	Text box. The long name of the security group.
Description	Text box. The description of the security group.
Organization	Drop-down. The organization in which the security group will be available. You must be a Super User to create a security group outside of your current logged in Organization and Organization Unit.
Organization Unit	Drop-down. The organization unit in which the security group will be available. You must be a Super User to create a security group outside of your current logged in Organization and Organization Unit.
Security Group Options
Active	Toggle. When set to Yes, indicates the security group is active. Only an active security group can be assigned.
Desktop Options
Visual Designer	Toggle. When set to Yes, indicates the security group can use the Visual Style Designer.
Publish Screens	Toggle. When set to Yes, indicates the security group can publish screens to the database.
Web Services Designer	Toggle. When set to Yes, indicates the security group can use the Web Services Designer.
Debug Tools	Toggle. When set to Yes, indicates the security group can use the debug tools.
Database Designer	Toggle. When set to Yes, indicates the security group can use the Database Designer.
Application Designer	Toggle. When set to Yes, indicates the security group can use the Application Designer. The Application Designer is used to customize and create ThreeSixty Desktop screens.
Publish Web Services	Toggle. When set to Yes, indicates the security group can publish Web Services.
Web Form Designer	Toggle. When set to Yes, indicates the security group can use the Web Form Designer. The Web Form Designer is used to create and publish forms for your ThreeSixty e-Business or external ASP.NET applications. The Web Form Designer and its related functionality were introduced in the 7.2.0 release.
Unified Search	Toggle. When set to Yes, indicates the security group can use the Unified Search functionality first introduced in the 7.3.1 release. Unified Search is a search box that appears in the top-left corner of the ThreeSixty Desktop application that allows users to enter a free-text search across all customer and order entry records within the user’s Organization Unit. Unified Search must be set up by your administrator to work.