# Access Management

CLIMS has two (2) pre-made roles:

The table below shows the capabilities available for each role/permission.

1. Log in using an Administrator account.

2. On the upper-right corner of the page, click on the username, then select Manage.

3. Once redirected to the Identity Server interface, click on the username again, then select Roles.

4. Under Create a new role, type in the Name of the new role, then click Add.

1. Log in using an Administrator account.

2. On the upper-right corner of the page, click on the username, then select Manage.

3. Once redirected to the Identity Server interface, click on the username again, then select Roles.

4. Click the Edit button of the target role.

5. Modify the role information.

6. Click Save.

1. Log in using an Administrator account.

2. On the upper-right corner of the page, click on the username, then select Manage.

3. Once redirected to the Identity Server interface, click on the username again, then select Roles.

4. Click the Delete button of the target role.

5. Click Continue to proceed.

To do this, you need to access the machine where the CLIMS Server is installed.

1. Go to the Configuration folder, which is C:\Program Files\OpeniT\Zero\Configuration by default.

2. Create a copy of Authentication.json and rename the duplicate file to Authentication.Override.json.

   Open the existing Authentication.Override.json, if there is already one.

3. In the override file, add the new user(s) and/or group(s) under Administrators following the domain\\name format.

    ...
    24 |  },
    25 |    "Administrators": [
    26 |      "DOMAIN\\user1",
    27 |      "SVG\\johnsmith",
    28 |      "SVG\\development-grp"
    29 |    ]
    ...

1. Log in using an Administrator account.

2. On the upper-right corner of the page, click on the username, then select Manage.

3. Once redirected to the Identity Server interface, click on the username again, then select Users.

4. Click Register new user.

5. Provide the needed details in the registration form.

6. Click Register.

1. Log in using an Administrator account.

2. On the upper-right corner of the page, click on the username, then select Manage.

3. Once redirected to the Identity Server interface, click on the username again, then select Users.

4. Click the Edit button of the target user.

5. Update the details as needed.

6. Click Save.

1. Log in using an Administrator account.

2. On the upper-right corner of the page, click on the username, then select Manage.

3. Once redirected to the Identity Server interface, click on the username again, then select Users.

4. Click the Delete button of the target user.

5. Click Continue to proceed.

Access controls let administrators decide on what users can do in CLIMS.

With access controls, you can grant permissions, limit available pages, and apply specific access filters. You can set access controls for the following entity:

• Users using their Active Directory (AD) username
• Users using their email address from Identity Server
• Active Directory (AD) Groups
• Roles from Identity Server

The default access control, Everyone, applies to all non-admin users.

The scenarios below discuss the behaviors and limitations of CLIMS' Access Control.

1. Log in using an Administrator account.

2. Go to Administration > Access Controls.

3. Click CREATE.

4. Choose the Entity Type. An access control can be for a specific user or role

5. Provide the Entity Name.

   • If the Entity Type is User, type in the user's email address or AD account.
   • If the Entity Type is Role, specify the role name or AD group.
     
     

   For AD groups and usernames, follow the domain\name syntax.

6. Choose a Permission.

7. Add basic Filters.

8. For complex filters that require relationship between multiple filter values, enable the Advanced Filters option.

9. Formulate the advance filter(s), then click Create.

10. Under Page Visibility, select the pages that will be accessible to the access control.

11. Click Save.

1. Log in using an Administrator account.

2. Go to Administration > Access Controls.

3. Click the Edit button of the target access control.

4. Update as needed.

5. Click Save.

1. Log in using an Administrator account.

2. Go to Administration > Access Controls.

3. Click the Delete button of the target access control.

4. Click Yes to continue.

Administrators can simulate user access to experience the perspective of a specific user and see how their access controls affect their view.

To start a simulation:

1. Log in using an Administrator account.

2. Go to Administration > Access Controls.

3. Click on Simulate your access controls.

4. Choose the user you want to simulate.

5. Select the role(s) you want to experience in the simulation.

6. Click Start Simulation.

7. Click Confirm.

To end a simulation:

1. On the upper-right corner of the page, click on Viewing as:<User>.

2. Click End Simulation.