The best way is to correct the permission groups, as previously explained. In the mean time, you could prevent Admin tool access to the users in the Admin group by giving them a floating license: you need a fixed license AND Admin group membership to use the Admin tool. Remember to hide the AR System Admin forms, too. HTH, Joel ************************* Joel D. Sender Director of Western Operations QMX Support Services, Inc. [EMAIL PROTECTED] [EMAIL PROTECTED] -----Original Message----- From: Action Request System discussion list(ARSList) [mailto:[EMAIL PROTECTED] Behalf Of Rick Cook Sent: Wednesday, March 05, 2008 9:16 AM To: arslist@ARSLIST.ORG Subject: Re: Separation of Duties Well then, you should be able to use the existing permission groups to accomplish that. App-Administrator allows access to all of the data elements in HD 5.6 without allowing access to any code. If you need to make it more granular, you'd have to create sub-App-Admin groups for each component. If your version of AR System supports computed groups, that would also work.
Rick On Wed, Mar 5, 2008 at 9:10 AM, Gentry, Elmo - Raleigh, NC < [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> > wrote: Here is what I found documented: Subadministrators can perform the following functions: Administer any application or form to which their group has subadministrator access. Create and administer filters, active links, and escalations connected to forms to which their group has subadministrative access. Create and administer menus. Create forms. Create applications (depending on the forms to which the subadministrator has access). Create active link and filter guides. View server information settings. No of these can be allowed. We need to separate/prevent all of the above. If the permission allows the user to create anything, filters, forms, etc that is too much access. When I say sub-admin I mean really application/data admin….only to create data, i.e. CTI's, Groups. Users, Location, Approvals, etc. Thanks, Elmo Gentry Remedy Application Development Business Systems Analyst _____ From: Action Request System discussion list(ARSList) [mailto: _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are"
