What privileges in NuGenesis SDMS are necessary for a "user administration" account? - WKB27489

ENVIRONMENT

• NuGenesis 8 SDMS

ANSWER

The following Global privileges are necessary for user account administration with the SDMS Administrator program. This set of privileges allows a user account (or a group of accounts, if it's assigned to a user group) to add, change, or delete user accounts, groups, and privileges, but it does not give access to SDMS projects, Web Vision, or any other SDMS program.

• Run Program tab
  • Run SDMS Administrator
• User Administration tab
  • Create Group
  • Delete Group
  • Edit Group
  • Create Users
  • Manage Oracle Account
  • Create Oracle Users
  • Delete Users
  • Edit Users
  • Edit Privileges

ADDITIONAL INFORMATION

The "Edit Privileges" privilege allows a user to modify their own privileges. A user could then grant themselves all Global privileges on an SDMS server. These additional privileges could be to run other programs, such as Web Vision, or create projects. The user would have the ability to create new projects and edit or remove any projects that they create. They would NOT have the ability to edit or delete projects that they do not create.

Another option is to use the SDMS Help Desk web app:

1. Assign the above privileges to the "Help Desk Administrators" group, with one change:
   • Assign the "Run Help Desk" privilege instead of "Run SDMS Administrator".
2. Add user accounts to the "Help Desk Administrator" user group.
3. Instruct the users to use the Help Desk web app:
   • https ://example/servlet/WebVisionServlet?admin