Basics about access functions in an access role

An access role’s access functions define which functions in CallGuide a user with this role is able to utilise. An access function consists of two parts:

An operation, i.e. what the user is allowed to do. Se table below.
An object type, i.e. what the operation may be applied for or where the operation may be executed.

Example of operations:

One operation is Modify.
One object type is System global address book.
There is an access function named Modify system global address book.
A user with an access role that contains Modify system global address book can change the content of a system global address book.

However, the user cannot create or delete such an address book. This would require the more powerful operation Own. The user’s role would have to contain the Own system global address book access function.

There are four operation types to choose from. They are Modify, Own, Look at, and Execute. What they mean and what the user can do is seen below:

Operation	Gives the user the right to
Modify	change configurations of objects. If you are entitled to modify a user, you can change the user’s (the user account’s) surname and first name in user accounts, for example.
Own	create and delete objects, as well as all the opportunities that the modify operation entails. See above.
Look at	view objects, i.e. to see their occurrence and the configurations that are associated with the objects. If you are entitled to view a user, you can look at this person’s surname and first name, for example, but the names cannot be changed.
Execute	carry out the function that objects of the type in question represent. Execute is quite different from Own and Modify. The Execute operation can only be combined with object types that in themselves represent functional possibilities in CallGuide. See example below.

Execute example:

The Send message object type represents a functional possibility.
The Execute operation can be applied to objects of the Send message type.
There is accordingly an Execute send message access function.
A user with an access role containing Execute send message can thus send the type of messages referred to.

To view or modify the access functions that a particular role has, first select the role in question in the Access rolelist.

7_3_2_Access_Functions

In the upper right part of the Access roles window you see all the access functions under the Available and Selected titles. The Selected list shows the access functions that the role currently contains. If the role is to contain more access functions you select them from the Available list.

124

123

You move the selected access functions from one list to the other by clicking on the corresponding arrow button.