2.3 Security Configurations

Question 1

Which Maximo applications work together to enforce security?

Answer 1

Users
Security Groups

Question 2

Maximo security applications

Main functionality - individual level

Answer 2

Grant rights to individual users

Question 3

Maximo security applications

Functionalities that can be done in multiples

Answer 3

Manage user status for multiple users

Manage (add/delete/replace) group privileges for multiple users at once

Question 4

What Tasks are done in the Users application?

Answer 4

Tasks include:
- Manage user passwords
- Manage user status
- Assign users to security groups
- Reset e-signature key
- Assign user defaults
- Grant users the right to assign users to specific groups
- Review which users are currently logged in; Log off users

Question 5

Which user defaults are assigned in the Users application?

Answer 5

• Insert site
• Storeroom site
• Storeroom
• Language
• GL Accounts

Question 6

What Tasks are done in the Security Groups application?

Answer 6

• Create/delete Security Group
• Define default group for new users
• Global Data Restrictions
• Grant users the right to assign users to specific groups
• Specify accesses to various elements
• Assign a Start Center template
• Denote security group dependency (Independent of Other Groups?)

Question 7

Main functionality of Users application?

Answer 7

Manage Users
Manage User security

Question 8

What has changed with MAS, as pertaining to the Users application?

Answer 8

7.6.1.x - can add users directly within this application

MAS - must add users through MAS Administration

Question 9

List the accesses that are defined in the Security Groups application

Answer 9

• Sites
• Applications
• Object Structures
• Storerooms
• Labor
• GL Components
• Limits and Tolerances
• Data Restrictions

Question 10

What is the default security group that all users are added to?

Answer 10

DEFLTREG

Question 11

Describe how Security Groups work

Answer 11

Application privileges and data restrictions are assigned to each group

Users are provided security rights by adding them to 1 or more security groups - can be done via Users or Security Groups application

Question 12

How is a security profile defined?

Answer 12

Combination of security groups that a user belongs to

Question 13

Where can security profiles be viewed?

Answer 13

Security Profile tab in Users application (graphical view)

Question 14

What are Global Data Restrictions?

Answer 14

Used to hide either:
- entire records (Object Restrictions)
- certain fields (Attribute Restrictions)
when a certain condition is met

Question 15

Name the 3 restriction types for a Global Data Restriction

Answer 15

Hidden
Qualified
Readonly

Question 16

How do Independent security groups work?

Hint: what is the difference between combining Independent and non-Independent security groups?

Answer 16

Non-independent security groups:
privileges combine to allow the highest privileges between the 2 groups

Independent security groups:
Privileges add together only when combined with each other

Question 17

Describe how independent and non-independent security groups combine with an example

Answer 17

Group 1: access to site A and app Asset
Group 2: access to site B and app Work Order Tracking

If both groups non-independent: user in both groups will have access to both Asset and Work Order Tracking, for both sites A and B

If both groups independent: user can only access Assets for site A, and Work Order Tracking for site B