Access Profile Settings

From AgileApps Support Wiki
Revision as of 00:27, 14 March 2013 by imported>Aeric (Created page with "<noinclude>__NOINDEX__</noinclude> ===Access Profile Information=== Give the Profile a name, and a general description. (You reference the profile by name when assigning it to a ...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Access Profile Information

Give the Profile a name, and a general description. (You reference the profile by name when assigning it to a user.)

Login IP Address Restrictions

For extra security, enter ranges of IP addresses from which users are allowed to access the platform. If a user attempts to login from a computer on a network outside of the specified range, access to the platform is denied.

Lock-tiny.gif

Users that have the Access Control permission can specify the range of IP addresses from which user logins are allowed. 
To configure an IP address range
  1. Click GearIcon.png > Administration > Access Management > Access Profiles
  2. Select the Access Profile of interest, or create a new one
  3. Enter an IP address range in the text area, following these guidelines:
    • A maximum of 25 IP address ranges can be specified
    • Enter one range per row in the text area
    • Add, Modify and Delete the entries, as needed
    • Accepted format is xxx.xxx.xxx.xxx - yyy.yyy.yyy.yyy, where:
      • xxx and yyy are numbers in the range 0-255
      • xxx.xxx.xxx.xxx is less than or equal to yyy.yyy.yyy.yyy
    • To specify a single IP address, use the same IP address for the start and endpoint of the range: 192.168.1.10 - 192.168.1.10
How it works
  • When a user attempts to log in, the IP address of the system the request originated from is checked against the configured settings. If the address is in the allowed range, the user can continue the login process. Otherwise, login is denied.
  • Access violations are recorded in the audit log, identifying both the user and the IP address from which the login attempt originated
  • Login restrictions apply to all user logins - using a web browser, Email Edition, mobile access, or REST APIs.
  • The restrictions do not apply to Customer Support logins.

Global Permissions

Specify the operations a user can perform on all objects that an application Role gives them access to:

  • View Records
  • Create Records
  • Update Records
  • Delete Records

Administrative Permissions

Administrative Permissions are assigned in an Access Profile. They allow a user to customize selected aspects of the platform. (Data Access Permissions, in contrast, determine what objects, records, and fields a user can see by virtue of their role and team memberships.)

Thumbsup.gif

Tip: Users given Administrative Permissions should have the following skills:

  • Familiarity with the platform and your organization's business processes
  • Good understanding of the Application Design Guide
  • Excellent understanding of the area(s) they will be modifying
User and Ownership Controls
User Management - Create and manage users and teams
Access Control - Manage roles and password policies
Change Ownership of my Team's Records
Manage Personal Setup
Reporting Controls
Create/Delete Views/Reports/Homepages
Export Views and Reports
Make Views/Reports Visible to Others
Manage Global Views/Reports
Print using Views and Reports
Data Management Controls
Access Mass Data Operations
Import and Export Data
Manage Audit Log
Manage Recycle Bin
Application Controls
Customize Objects
Manage Applications - Add/Update/Delete platform applications
Manage Packages
Manage Translation Workbench
Development Controls
Use Development Features - Work with classes, pages, sites, and other development features
Manage Debug Log
Manage Sandboxes (Only appears if sandboxes are enabled)
Account Controls
Manage Tenants and Company Capabilities
Proxy Login Access
Proxy Login Configuration
Customer Support Login
Support Cases - View and modify support cases filed by others