Managing subsystem users

You can create new users for a subsystem, and you can assign existing users to a subsystem. When a user belongs to a subsystem, the user's permissions are limited according to the subsystem boundaries. Users can belong to multiple subsystems.

The subsystem settings should be completed before assigning any users, to ensure that all desired subsystem restrictions are in place before any subsystem users log in.

If the subsystem feature is enabled, then all non-admin users must be assigned to a subsystem. If a user does not belong to a subsystem, then that user will be blocked from logging in (unless the user is an administrator, a subsystem administrator, or a user with the Manage Security permission). This is to ensure that all non-admin users have a subsystem limit applied to their security permissions.

Assigning existing users to a subsystem

Administrators can assign existing users to a subsystem from either the user record or the subsystem record. Any changes made in one area are automatically applied to the other area.

From the subsystem record, on the General tab, click the Add button in the Assigned Users section to add a user to the subsystem.
From the user record, on the General tab, click the Add button in the Assigned Subsystems section to assign the user to a subsystem.

Subsystem administrators can assign existing users to a subsystem, but only from the subsystem record. This is because subsystem administrators cannot see user records for users that do not already belong to the subsystem.

Creating new users for a subsystem

Subsystem administrators can create new users for use in a subsystem. When the new user is created, the user is automatically assigned to the subsystem.

If the subsystem administrator manages multiple subsystems then one of those subsystems will be assigned at random when the user is created. Once the user has been saved, the subsystem administrator can edit the user to change the subsystem assignment as needed.

When creating a new user, administrators must save the new user before they are able to assign a subsystem. The Assigned Subsystems box is not editable until the user has been saved.

Removing a user from a subsystem

Administrators and subsystem administrators can remove a user from a subsystem. This can be done from either the user record or the subsystem record.

From the subsystem record, on the General tab, select one or more users in the Assigned Users section and then click the Remove button.
From the user record, on the General tab, select one or more subsystems in the Assigned Subsystems section and then click the Remove button.

If a non-admin user is removed from all subsystems, then that user will no longer be able to log into Axiom Software. The user must be assigned to a subsystem or granted administer-level permissions before they are able to log in again.