Troubleshooting Access Management & Security

No matter how precise you are in creating your roles and users, and configuring your restrictions and privileges, at some point you or your users will run into security restrictions and messages that you did not expect. See below for some of the most common problems and how you can resolve them.

User Cannot See a Screen, Section/Tab, Field or Action That Another User Can See

If a user cannot see a screen (the link does not show on the Main Menu), section/tab, field or action that another user can see, check the:

• Role Access page from the Main Menu to see if the section/tab, field or action has a deny access exception or is not assigned to the user. Use the filters on the screen to locate the element (section/tab, field, action) the user cannot see. Links on the Main Menu are considered actions so if a user cannot see a link, then look for an action element. Make the necessary adjustments to the role(s) assigned to the user to provide the correct access.
• For sections/tabs and fields, check the theme assigned to the user. Make sure the section/tab or field is available on the user's screen layout for the theme the user is assigned. Drag and drop the field and/or section/tab to the screen layout to give the user access.
• For fields, check the field restrictions. Make sure there is no Hide field restriction set for the role(s) assigned to the user. Remove the field restriction from the role(s) assigned to the user to give the user access.

User: (User ID) restricted by Security Option: (Access Privilege Name) Message

This message indicates that an access privilege is stopping the user from performing the action. Use the Access Privileges page (or the System Access Privileges page if it is a system access privilege) from the Main Menu to assign the role the user is in to the access privilege. See Access Privileges for details on assigning and removing roles and users from access privileges.

User: (User ID) restricted by Access Privilege: (Access Privilege Name) Message

This message indicates that an access privilege is stopping the user from performing the action. Use the Access Privileges page (or the System Access Privileges page if it is a system access privilege) from the Main Menu to assign the role the user is in to the access privilege. See Access Privileges for details on assigning and removing roles and users from access privileges.

You Do Not Have Access To This Page Due to Access Management Message

This message indicates that an access management configuration setting is preventing a user from accessing a screen. The element ID you need to use to give the user the access is included in the message. In the message above, the element ID is 1228 which is the Edit Event screen.

You have to fix the access on the role for the user since access management is controlled on the role level. The best place to fix this issue is from the Role Access page.

1. Click the Role Access link from the Main Menu. The Role Access page opens.
2. Select the user who is receiving the access message from the User drop-down in the search area.
3. Enter the element ID in the message into the Element ID search filter.
4. Click the Search button. The access for each role assigned to the user displays on the page.
5. Select the access that is set to Deny or Unassigned. This indicates the user does not have access to the element.
6. Right-click and select Edit Role. The Edit Role window opens.
7. Make the appropriate adjustments to the access. This could be assigning a feature on the Features tab or changing a deny access exception to a grant access exception.
8. Click OK.
9. Repeat steps 5-8 for any other deny or unassigned values.