AX1372
Managing subsystem users
You can create new users for a subsystem, and you can assign existing users to a subsystem. When a user belongs to a subsystem, the user's permissions are limited according to the subsystem boundaries. Users can belong to multiple subsystems.
The subsystem settings should be completed before assigning any users, to ensure that all desired subsystem restrictions are in place before any subsystem users log in.
If the subsystem feature is enabled, then all non-administrator users must be assigned to a subsystem. If a user does not belong to a subsystem, then that user will be blocked from logging in (unless the user is an administrator, a subsystem administrator, or a user with the Manage Security permission). This requirement is intended to help ensure that all non-administrator users have a subsystem limit applied to their security permissions.
NOTE: Alternatively, you can use the Security Manager page in the Web Client to assign users to subsystems.
Assigning existing users to a subsystem
Administrators and users with the Administer Security permission can assign existing users to a subsystem from either the user record or the subsystem record. Any changes made in one area are automatically applied to the other area.
-
From the subsystem record, on the General tab, click the Add
button in the Assigned Users section to add a user to the subsystem. -
From the user record, on the General tab, click the Add
button in the Assigned Subsystems section to assign the user to a subsystem.
Subsystem administrators cannot assign existing users to a subsystem, because subsystem administrators can only see user records for users that are already in the subsystem. It is assumed that a general security administrator will add existing users to the subsystem as needed. (The exception is if a user is the subsystem administrator for multiple subsystems. In that case, if an existing user belongs to one of the subsystems but not the other, the subsystem administrator can assign that user to the other subsystem.)
Creating new users for a subsystem
Subsystem administrators can create new users for use in a subsystem. When the new user is created, the user is automatically assigned to the subsystem.
If the subsystem administrator manages multiple subsystems then one of those subsystems will be assigned at random when the user is created. Once the user has been saved, the subsystem administrator can edit the user to change the subsystem assignment as needed.
When creating a new user, administrators and users with the Administer Security permission must save the new user before they are able to assign the user to a subsystem. The Assigned Subsystems box is not editable until the user has been saved.
Removing a user from a subsystem
Administrators, users with the Administer Security permission, and subsystem administrators can remove a user from a subsystem. This can be done from either the user record or the subsystem record.
-
From the subsystem record, on the General tab, select one or more users in the Assigned Users section and then click the Remove
button. - From the user record, on the General tab, select one or more subsystems in the Assigned Subsystems section and then click the Remove button.
If a non-admin user is removed from all subsystems, then that user will no longer be able to log into Axiom Financial Institutions Suite. The user must be assigned to a subsystem or granted administrator-level permissions before they are able to log in again.
