The document discusses managing permission settings and overall system security in four main elements: permission sets, user set-up, workflows, and change log. It emphasizes avoiding super user permissions for operational users, defining roles and splitting permissions, using security filters and user groups. Workflows can require approvals before transactions post and the change log can be used to report on and sign off changes to sensitive master data.

1. 1
Managing Permission
Settings and Overall
System Security
# A L L I A N C E 2 0 1 7

2. 2
YOUR PRESENTER
Rhett Williams
Master Consultant
JOINED SPARKROCK IN 2009

3. 3
I n t r o d u c t i o n

4. 4
Basic Principles
Four Main Elements
• Permission sets
• User set-up
• Workflows
• Change Log
Security and segregation of duties is dependent on the size of the team
Avoid operational users having super user permissions (even for small teams)

5. 5
N AV P e r m i s s i o n

6. 6
Initial Set-up of Permissions
Make ongoing maintenance as easy as possible
Define roles
Defined functions that make up the role
Split up functions such as create and post
Build permission sets to these functions
Separate read permissions from insert, modify and delete
Altus Base permission sets and recorder

7. 7
Some Permission Features
Security filters
Company specific permissions
User groups

8. 8
U s e r S e t - U p

9. 9
User Set-Up
Application side – under operational management control
Used to manage field level security and security over specific functions
Useful for customized field level security
Overrides of posting windows (best practice to use only as an override)

10. 10
Wo r k f l o w s

11. 11
NAV Workflows
Workflows contribute to overall system security
Transactions require approvals before printing or posting (record restriction)
In theory, workflows can be applied to master data changes

12. 12
C h a n g e L o g

13. 13
Change log
Neglected aspect of security
Switch on for sensitive master data tables.
‘All fields’ and ‘some fields’
Report on changes to certain tables, sign off and keep

14. 14
EVALUATIONS
P L E A S E T A K E 5 M I N S T O
C O M P L E T E A S E S S I O N
E V A L U A T I O N .
WIN ME!
One lucky survey will
take home a Ecobee
Smart Wi-Fi
Thermostat

15. 15
THANK YOU FOR
LISTENING
@ S P A R K R O C K I N C
W W W . S P A R K R O C K . C O M