Rights management

Administration > Setup > General > User Administration > Rights management

 Top  Previous  Next
Expand/Collapse Toggles

User administration

  Extended: EMail Setup, User

  Beas user

  Rights management

Beas has its own rights management, which needs to be set up parallel to SAP Business One

 

 

PATH: Administration > Setup > General > User (Beas).
1. Select user.

2. Click Rights.

User_rights_2022.06

Window system_benutzer_rechte.psr

 

Note: For many functions Beas uses the DI-API of SAP Business One. Therefore,  Beas requires various SAP Business One rights.

See Required SAP-Rights.

 

The following possibilities are available:

None

Function blocked

Read

Reading rights, no changes

Full

Full authorization, change, delete, create new entries

 

Authorizations

Authorization

ID

Description

Operation catalog

AGEDIT

Authorization for window: Administration - Definition – Production – operation catalog.

Operation types

AGTYPEDIT

Administration – Definition – Production – Operation types.

Administrate operation types, assign them to operations.

Resources

AGEDIT

Production – Resources See Edit resources.

Administrate resources, assign them to operations.

Administrate resource cost rates See cost rates.

Resources shift schedule

FSCHICHTPLAN

Administrate shift schedule

Edit items

ARTEDIT

Authorization for

Edit item master and price lists
Note: for item view, the Beas authorization "edit items" is enough, To save items, additional  SAP Business One authorization is required.
 

Edit warehouse rules. See Warehouse rules.

BOM

ARTSTL

Administrate BoMs. This setting can be subdivided.

Setting does not affect Precalculation and own created Crystal reports.

Diverse functions are blocked, for example change of item group and material group. But it is still possible to change the group via SAP Business One item window and to get access this way. Accordingly, it is recommended to limit the user's authorization.

Routing

ARTAPL

Manage routings. see Extended tab and further notes on "Item BoM".

Item quality control

ARTQC

Item: assignment to QC-inspection plan to be used. See Item master – Quality control.

Customers

GPEDIT

Customer administration (view only, only Beas standalone).

Cost centers

KSTEDIT

Manage cost centers, assign to resources or personnel.

Material group

MAEDIT

Manage material groups, select via item master.

Unit of measurement

MEEDIT

Manage units of measurement, select via item master.

Cut-off

VERSCHN

Manage scrap/cut-off tables, select via item master.

Manufacturer

HEDIT

Manage manufacturers, select via item master.

Tool

WKSEDIT

Manage tools, assign to operations.

Cost types

TIMETYPE

Manage cost types, assign to resources and operations.

Production

FAEDIT

Full access:

User can create, delete, edit work orders e.g. via Work order list, Sales order, Sales order to work order

 

Read access:

User can view work orders

 

No access:

All access on work orders is locked

Production release

FARELEASE

With this option the user is allowed to change release options in work order positions:

Approved

Capacity planning

Material planning

Login to work order

Material posting

Allow changes

 

These can still be adjusted directly via the APS list.

 

If the option is disabled, the access changes in the work order position are locked, and in the APS list the respective buttons are hidden.

Production BoM

FASTL

Is the BoM displayed? (window and list)

Only view is affected. Prints and reports as "Material requirement" are not affected. Extended rights settings are considered. See Extended tab.

Production routing

FAAPL

Are routings displayed?

Only view is affected.Prints and reports as "Material requirement" are not affected. Extended rights settings are considered. See Extended tab.

Production closed

release/post

FAABG

Is the user allowed to re-open a closed position or work order?

 

For BoM positions the switch determines whether or not a posting may be performed via direct input (position number or bar code). Affected: only manual posting (Goods issue, Goods receipt). Possible only if activated in Configuration wizard.

 

See

Manual posting

Configuration wizard - Material posting

Production request

MRPWORKORDER

Access on production request created in MRP, from which work orders can be created.

External operation purchase

FRBEST

Create purchases for external operations.

External operation provision

FRBEIST

Transfer provision parts for external operation to the supplier warehouse.

External operation goods receipt

FRWRG

Post in components from external operation.

External operation issue

FRAUSB

issue provision parts from supplier's warehouse.

Project

PRJ

Manage projects.

Project Basis data

PRJBASIS

Set up project basis data (tasks).

Project Template

PRJTEMPLATE

Set up project templates (structures).

Project Catalog

PRJCATALOG

Set up tasks catalog.

Post-calculation

FNAKA

Access on post-calculation for work orders.

- post-calculation via menu

- work order item – Button post-calculation

- post calculation view

- production – calculation tab

MRP wizard

FBESTV

Administrated the access to the MRP wizard and the order recommendation list.

Read only:
- MRP wizard: settings cannot be changed
- Order recommendation list: Only view possible

 

Note: In the MRP wizard further authorizations can be set up per scenario.

Create Purchase Order

MRPPURCHASEORDER

If active, the user can create purchase orders from purchase requests and via order recommendation.

 

Note: The user needs full access to create a purchase request, because the purchase order is always created from a purchase request.

 

Create Purchase request

MRPPURCHASE

The user can create or change their own purchase requests.

 

Note: To manage all other purchase requests, the user needs access to "Manage purchase request"

For creating purchase orders, the user always needs access to create purchase requests.

Manage purchase requests

MRPPURCHASE2

Access all entries of all employees.

Note: purchase requests and all other planned inflow and outflow are displayed in the order recommendation report. The same applies to the inventory history. This authorization does not affect the view in either function.

 

Special case: Order recommendation report

No authorization: User sees all order recommendations, but can change or delete only own entries.  

Confirm (Time receipt)

FARUECK

Create time receipts to confirm order times.

Administrate time receipts

FAVERWALTEN

Administrate existing time receipts.

Confirm (time receipts) view

FAANSICHT

View existing time receipts.

Priorities

FPRIOR

Set up priorities for production

Calculation types

FCTYP

Capacity planning: set up calculation types in APS.

Interruption reasons

FSTILLSTAND

Administrate interruption reasons, select at time receipt.

Scrap reasons

FAUSSCHUSS

Administrate scrap reasons, select at time receipt.

Mile stones

FMILESTONE

Manage mile stones, select in operations.

Production pool

FPOOL

Access the pool list to distribute operation sequences to production pools.

Production list

FLISTE

Use production lists.

Production server

FSERVER

(only customization).

Internal and external maintenance

MAINTENANCE

Administration Maintenance-Master data maintenance plans.

Maintenance order

MAINTENANCEORDER

Edit of the maintenance orders

Journal postings

JOURNAL

View journal entries for financial accounting in production

(see work order structure – orange barrel.

APS View

APS

View scheduling in APS.

APS scheduling

APSP

Administrate scheduling in APS ( rough and detailed planning).

Precalculation

VORKALK

Access the Precalculation.

Calculation objects

KALKOBJ

Manage calculation objects for calculation schemas.

Batch-Precalculation

BATCHKALK

Access the batch-calculation.

Run batch Precalculation

BATCHKALKSTART

Full right required to start a batch calculation. Additionally, at least reading rights are required for the batch calculation itself (option above).

 

Stock revaluation

PRICEREV

Access in batch-calculation – result – stock revaluation. See Batch-calculation stock revaluation

 

Batch post-calculation

BATCHNKALK

Use batch-post-calculation.

 

QC order

QS-A

Edit QC orders register measurements. In Terminal mode this authorization is activated automatically.

QC orders archive

QS-R

Access closed QC orders.

QC inspection plan

QS-PLAN

Access inspection plans, assign to items or operations.

QC edit defaults

QS-TEXTE

Manage default texts See QC defaults.

Edit QC order

QS-AE

Change existing QC orders.

See edit measurement position.

MM purchase order post in

MWEINGANG

Post in single purchase items.

MM manual transfer

MWBUCHEN

Post in / issue / transfer as single operation.

MM warehouse management

BINRIGHT

Set up warehouse master data.

MM booking bin locations

BINBOOKING

Access bin location management.

MW Journal

MWJOURNAL

Access stock movements report and posting documents via work order structure.

See

work order structure - postings

warehouse management - inventory history - journal

 

MM batch reports

MWCHARGE

Access batch reports and Edit batches.

MM batches transfer

MWBTTRANSFER

Transfer item batches to other items.

WO backflushing booking

MWRETROGRAD

Issue material automatically for a work order. See Backflushing.

MM complaint

RECLAMATION

Access complaints.

MM Inventory

MWINVENTUR

Access inventory function (create and edit stocktaking).

MW Reservation list

MWRESERVATION

Display and manage reserved material.

MM Mobile input

POCKET

Only for old Mobile-System (do not use).

Terminal

TERMINAL

Access Terminal for factory data capture.

Personnel

PEDIT

Note: "extended editing rights" are considered only if the user has at least reading rights for the personnel master. Full access on the personnel master has a higher priority than extended editing rights.

See

Personnel master data

Extended editing rights

Personnel editing rights

PACCESS

Extended personnel authorization. On user level this defines which program area may be viewed or edited.

Note: "extended user rights" are taken into account only, if the user has at least reading rights for personnel master. Full access on personnel master has a higher priority than the extended editing rights.

 

See

Personnel master data

Extended editing rights

Currently present

PANW

View list of currently present employees.

Time evaluation

PZAUSW

Create time evaluations See Time evaluation.

Factory calendar

PKAL

Manage factory calendar, basis for shift schedule and resources.

FDC master data

ANW

Manage shifts, day templates, absence types.

Business performance

BAB

Access Business performance.

Product configurator

CAFT

Access product configurator.

User functions

EFUNK

Old function, visible only for compatibility reasons.

Change company

FAWECHSEL

Access the "change company" function.

Options

SOPTION

Several , for example Configuration wizard.

User administration

BENUTZER

Manage users.

Report settings

REPORTE

Access on report settings.

Reporte administrate

REPORTINSERT

Manage reports.

Language

SPRACHE

Manage languages.

WEB-APPS

WEBAPPS

Manage WEB apps.

WEB Berechtigung

WEB-ACCESS

Manage WEB app authorizations.

Import

IMPORT

Manage Import Definitions.

SQL-instructions

SQL

Execute SQL-statements directly.

Template, window settings

TEMPLATE

Template-administration, Window settings  and Edit objects (Ctrl+Double click).

Database test

DBTEST

Run database test.

System

SYSTEM

Diverse system functions.

Debug

SYSDEBUG

Debug-window. Note: Beas-script is available. Everything can be executed.

Generate Item

SYSARTGEN

Access the function item generation.

Customized extensions

CUSTFEDIT

Manage customer specific extensions.

System programming

SYSFEDIT

Manage system specific extensions.

 

hmtoggle_plus1Extended tab

Use this to determine whether the user has permission to view or edit BoMs and routings. Furthermore, you can set up, for which groups of items or material the users has a right to edit BoMs and routings. Currently, this setting applies only to the item master and not on work orders.

 

PATH: Administration > Setup > General > User (Beas).
1. Select user.

2. Click "Rights".

3. Select "Extended" tab in the opening "User rights manager" window.

 

User_rights_manager

system_benutzer_accessextented

 

You can select material groups and item groups which the employee can access. If nothing is selected, all entries can be accessed.

 

If a user has no right to access the routing or BoM, he may also not edit the item group and material group of the item (applies only in Beas item window)

In the Item Master, the BoM / routing tabs are hidden depending on the authorization. In the item structure view or in the structure report (Crystal document) only BoMs and routings are displayed, for which the user has authorizations.

 

The standard report “BoM single level” is generally blocked if the user does not have access to all items. Note: This limitation applies only if the standard report will be read in new (restore default). Own reports are not affected.

 

There are other points in the program, where the BoM is recognizable as in the Order Recommendation Report, Precalculation and various other functions. For this reason it is very important to restrict the access to the necessary functions, in case the  user shall not see this information.

 

Attention

A 100% secure protection cannot be guaranteed.

 

 

The following fields are available per BoM and routing:

Field

Description

Item group

Select item group.

Material group

Select material group.

Authorization group

Select authorization group.
Note: Selection not yet supported.
hmtoggle_plus1Known issues in authorization control

Beas requires special user rights to work properly with the functions of SAP Business One. See Required SAP Business One Rights

 

 

Terminal application

In the Terminal application,  Beas logs on in the background using a central DI-API user, which is set up in Configuration Wizard > System > DI API. This user needs special rights. See Required SAP Business One Rights

The user who logs on to the terminal, does not notice the information. He only has  a personal set of functions available. In case documents are generated, the personnel number is entered in [document-line table] u_beas_pers_id. Logging is based on which user created the document.

 

WEBAPPs

The WEBAPPs work the same way as the Desktop terminal.

 

Start Beas without SAP Business One

Beas can be started without SAP Business One. Then only selected functions are available in Beas.

Use this if the user does not need SAP Business One functions.

 

see also

User administration

Help URL: https://help.beascloud.com/beas202402/index.html?benutzerrechte_browse.htm