Configuring groups

Concept

• What a Group is
  • A Group allows you to manage access at scale by assigning Users + Roles together.
  • Groups can include both general action permissions and (when applicable) entity-scoped access rules.
• How Groups fit with Users and Roles
  • Use Roles to define reusable permission bundles.
  • Use Groups to grant those permissions to sets of users.
• Lifecycle management
  • Create records with New.
  • Toggle access with Activate / Deactivate.
  • Use Delete for removal (note: delete can fail if the record is referenced elsewhere).

Walkthroughs

• Create a new group
  1. Navigate to Administration → Security Profile → Groups.
  2. Click New.
  3. Enter a unique Group Name.
  4. Add users to the group:
     • Open the Users tab.
     • Select the user(s) who should belong to this group.
  5. Assign roles to the group (this is where access “takes effect”):
     • Open the Roles tab.
     • On Actions, assign the action roles this group should have.
     • If a Data Access tab is visible, configure it as required for your workflow.
       • Rule of thumb:
         • Internal groups typically see all records.
         • External groups are typically restricted to a customer/cargo agent/Sold-To scope (if enabled for your instance).
  6. Click Save & Close.
  7. Confirm the new group appears in the Groups grid and is Active.
• Edit a group
  1. Navigate to Administration → Security Profile → Groups.
  2. Open the group from the grid.
  3. Update group membership:
     • In Users, add or remove users.
  4. Update permissions:
     • In Roles, adjust Actions.
     • If present, adjust Data Access.
  5. Click Save (to keep editing) or Save & Close (to exit).
• Activate / Deactivate / Delete groups (from the grid)
  1. Navigate to Administration → Security Profile → Groups.
  2. Select one or more groups using the row checkbox.
  3. Choose Activate, Deactivate, or Delete.
  4. Confirm the prompt to save your changes.