Accounts & Access

Menu > Site Administration > Accounts & Access

Local User Set Up & Management

The Accounts & Access screen is where you will manage all user access and permissions in R+. You should decide upon which method of management - local or SSO - you would like to use at the beginning of an implementation to maintain consistency for all users.

Creating a New User Locally in R+

To create a new user locally in R+, select the "Users" tab. Then click "+ Add New User" in the upper right-hand corner of the screen.

The Create User pop-up screen will appear in the middle of the screen. You can create the username for the individual and determine the permissions and filters for each user. Use the dropdown menus under "Roles" to assign roles to the user. Use dropdown menus under "Resource Filters" to limit the user's access to specific locations, planner codes, and vendor data. Once you are finished creating the user, select "Create User". An email with a link to the R+ site will be issued to the user's email address to enable them to login.

Keep reading to view a list of common roles you can assign to users.

A user only has 24 hours before the email link to login expires. To reissue a new link to a user, click the pencil icon on that user's account and click the "Request password reset" link in the lower right hand corner of the pop-up screen.

Creating New Users via Single Sign On

Once you have set up SSO in R+, the user will be created automatically in R+ after they login for the first time. Every user created via SSO will only be given the default permissions that you established in the Active Directory settings in Site Administration. If you wish to add additional permissions to a user, you will need to edit their account in the User tab.

Editing User Permissions, Location, Planner Code, and Vendor Access

The permissions and user resource filters limit users to specific roles/permissions and certain data in R+. To edit these parameters, access the Users tab and find the user you wish to make changes to. Click the pencil icon on that user's account:

The user's account page will appear on the screen. Use the dropdowns to select the roles, locations, planner codes, and vendors they will have access to. Once you have finished making edits, you can click out of the user page. There is no need to hit "Save" - the filters will be automatically applied to the user.

The user will only be able to view the data associated with the fields that have been checked on the user resource filters.

Removing User Access (Local and SSO)

There are two ways to remove access to R+.

Enabling/Disabling a User

The first is to "disable" the user. This may be necessary if they are still with the company but are temporarily not going to be using R+. By disabling them, you can retain their user account and settings in the system, but they will not be able to login. You can disable a user by clicking the pencil icon on their account in the Users tab and then toggling the "Enabled" switch to OFF.

Deleting a User

To remove a user from R+, click the pencil icon on their user account. In the user pop-up, click the red "Delete User" button in the lower left-hand corner. This will remove the user permanently from the system. If the user needs access again at any point, they will need a new user account created for them.

Default Roles in R+

There are 8 default roles in R+. The permissions in these roles are set and cannot be edited. See the table below for descriptions of each role.

Role	Description
Administrator	Site Administrator; full access
Analytics	Can view Part reporting data
DataEditor	Can edit existing data
DataExporter	Can export data from R+
DataImporter	Can import/replace data in R+
Planner	Can view workbench and approve orders
SimulatorAdmin	Can run simulations
SimulatorUser	Can view simulations

Creating Custom Roles

While Default Roles cannot be changed, you can create as many Custom Roles as you wish. If there are roles on your team that need multiple different permissions that exist across multiple standard roles, this may be the best option for your team.

To create a custom role, select the Roles tab in Accounts & Access. Select the green "+ Add New Role" in the upper right hand corner.

In the pop-up window, you will be able to name and write a description for the role. Use the drop down menu to select from the list of permissions. Once you have selected all the permissions for the new role, click "Add Role".

See below for a full list of user permissions.

Permission	Description
admin.license	Can modify site license
admin.status	Can view site status page
admin.backgroundjobs.dashboard	Can access the background jobs administrator dashboard
admin.backgroundjobs.apm	Can enqueue the APM background job
admin.backgroundjobs.mrp	Can enqueue the MRP background job
admin.backgroundjobs.partdetail	Can enqueue the PartDetails background job
admin.backgroundjobs.sdm	Can enqueue the SDM background job
admin.diagnostics	Can view diagnostics page
admin.settings.auth	Can modify authentication settings
admin.settings.bufferprofileconfiguration	Can access the Buffer Profile Configuration settings
admin.settings.engine	Can modify processing settings
admin.settings.site	Can modify site settings
admin.settings.stockdeployment	Can modify Stock Deployment Module (SDM) settings
admin.settings.systemdataexchange	Can modify system import/export settings
admin.roles.read	Can view roles
admin.roles.write	Can create/modify roles, and assign permissions
admin.users.read	Can view users
admin.users.write	Can create/modify users
api.tokens.delete	Can delete API tokens
api.tokens.expire	Can force expiration of API tokens
api.tokens.read	Can view API tokens
api.tokens.write	Can create/modify API tokens
api.tokens.activity.read	Can view API token activity
data.export	Can export system data
data.import	Can import system data
data.import.replace	Can import system data with replace option
data.simulations.read	Can view Advanced Planning Module (APM) simulations
data.simulations.write	Can edit and run Advanced Planning Module (APM) simulations
data.stockdeployment	Can use Stock Deployment Module (SDM)
data.billofmaterial.read	Can view BoM data
data.bufferprofiles.read	Can view buffer profiles
data.bufferprofiles.write	Can create/modify buffer profiles
data.calendars.default.read	Can view default calendars
data.calendars.default.write	Can create/modify default calendars
data.calendars.location.read	Can view location calendars
data.calendars.location.write	Can create/modify location calendars
data.calendars.vendor.read	Can view vendor calendars
data.calendars.vendor.write	Can create/modify vendor calendars
data.calendars.planning.read	Can view Planning Calendars (PC)
data.calendars.planning.write	Can create/modify Planning Calendars (PC)
data.cycledayadjustmentfactors.read	Can view cycle day adjustment factors
data.cycledayadjustmentfactors.write	Can create/modify cycle day adjustment factors
data.demandhistoryanalysis.read	Can view Demand History Analysis
data.demandhistoryanalysis.write	Can create/modify Demand History Analysis
data.parts.odata	Can query parts
data.parts.read	Can view part data
data.parts.write	Can modify part data
data.parts.history.odata	Can query part history
data.parts.history.read	Can view part history
data.pendingorders.commit	Can commit pending orders
data.pendingorders.read	Can view pending orders
data.pendingorders.write	Can create/modify pending orders
data.plannedadjustmentfactors.read	Can view planned adjustment factors
data.plannedadjustmentfactors.write	Can create/modify planned adjustment factors
data.supplyorders.odata	Can query supply orders