Create roles.

Warning:
To use the derive functionality of CSI Accelerator the roles must use role naming.

The most common way to create multiple roles is by deriving the master roles for pre-defined domains.

You can also copy roles (based on task code) or copy composite roles and do an advanced creation of single and composites at the same time.

Derive single roles(top)

Note:
The option button Derive roles/Copy roles determines the Indicator (whether it will derive or copy).

Indicator: select which part you want to replace domain indicator or task indicator

Note:

The option button will change from derive to copy when switching between domain and task

Options

Warning:
The codification will be applied when "with authorizations" is active.

With authorizations: this option will copy the authorization tab from the reference role and apply the codification to it.

Reference: this is the role the authorizations are copied from.
The derive engine will check for each master role that you want to derive whether the role is already derived for the selected domain and use that role as reference role instead of the master role. However, when the derived role for the reference domain does not exist, the master will be used.

Note:
You do not need to use the Master role as reference.
For example: If you have already derived a role for BE domain and you have manually altered the Authorizations for this derived role, you could use this derived (BE) role as reference for a new derive (for example NL). This comes in handy when the Authorizations of NL are equal (or alike) to those of BE.

with parent queries: this option will copy the role - query relations from the master single roles to the newly created roles.

Note:
It is possible to build derived roles without them inheriting the authorizations from the parent role or reference role. When this is necessary for your situation the "with authorizations" checkbox should be unchecked. By doing so, it is no longer possible to define a reference role.

Select one or more roles you wish to derive or check the "Create derived for all roles" option.

After completing the first step (Role tab) you need to define for which domain(s) you want to create derived roles OR you can check the "Derive for all domains" option.

Warning:

Adding domains does not necessarily mean that the selected roles will be derived for these domains. The roles will only be derived for the those domains that are already linked to the role and that you selected for deriving.

Example:

When a master role has the following domains: BXXX - Belgium and NXXX - Netherlands and you choose to derive for BXXX - Belgium and FXXX - France, only a derived role for BXXX -Belgium will be created.

When moving to the last tab, the derive engine will show the list of roles you want to create.

The record selector has 3 possible colors:

Green: this means that the role did not exist and will be create when clicking Approve.
Red: the role cannot be created, the role name is already in use and the role's parent role is not filled in or not correct.
No color (gray): the derived role already exist

If you want to maintain/update the roles authorizations go to "Mass authorizations update"

A checked "Create role" indicator will make sure that the role will be created when clicking Approve.

A checked "New role" indicator means that the role does not exist yet.

Note:

Only roles that are marked green andfor which the "Create role" & "New role"-indicators are checked will be created, other roles will stay untouched.

You can uncheck the "Create role" indicatorfor role(s) the list if you don't want to create them.

Tip:
Use the reset button if you want to start a new derive operation after a previous one, this will clear all selections and make the "Approve" button available again.

Copy single roles based on taskcode. (top)

After completing the first step (Role tab) you need to define for which task(s) you want to create roles.

The role will be copied for every task you placed in the list.

When moving to the last tab, the derive engine will show the list of roles you want to create.

The record selector has 2 possible colors:

Green: this means that the role did not exist and will be create when clicking approved.
Red: the role cannot be created, the role name is already in use.

A checked "Create role" indicator will make sure that the role will be created when clicking Approve.

A checked "New role" indicator means that the role does not exist yet.

Note:
All information of the source role is copied into the new role.
(Transactions, Authorizations, Queries, Domains, ...)

Note:
to copy a derived role, derive from the master role and use the derived as a reference.

Copy master single role. (top)

Copy of a master single role is done in a separate modal window. Organize>Mass changes>Copy role

You choose the role you want to copy, give a new name and select what related data you want to copy as well.

Create/maintain composite roles. (top)

Role tab options.

Freeze derived single roles, where single role domain is different with composite role domain :
checked : for each domain, a new composite is created for which the master roles are kept.
unchecked : for each domain, a new composite is created and the single derived role for the domain is added to the composite.

Role domain selection.

Create composites for all domains : show the Domains tab for domains selection.
Input composite domain relations: manually input role domain combinations. Only the selected role domain combinations are taken into account, instead of all possible combinations (role domain product set).
The composite roles and domains relations can be selected or imported from MS Excel. The Excel Import icon appears in the toolbar when selecting this radio button.

After completing the first step (Role tab) you need to define for which domain(s) you want to create roles.

The composite role will be proposed for every domain that you placed in the list.

Note:
A master composite role does not exist, therefore it is perfectly possible to start from a composite specific for a domain. Meaning that most of the single roles are derived for that domain. If you continue the derive engine will use the derived single's master roles to start from.

When moving to the last tab, the derive engine will show the list of roles you want to create.

You now see a little + in front of each row, this allows you to expand the row and display the single roles for that composite role.

The record selector of the composites has 4 possible colors:

Green: the composite role does not exist and will be created
Orange: the composite role does not exist, but there are no single roles attached for the domain you are creating the composite role for (Information : "irrelevant copy of composite role").
You can however choose to add the composite role anyway, by right clicking on the composite role row and select add composite.
Red: there is an error in the composite role.
No color (gray): the composite role already exist, this does not mean that nothing will change to the composite role, you need to look at the child rows (single roles) to see if another action will take place on the composite role.

The record selector of the single roles has possible colors:

Green: the single role does not exist and will be created.
The single role will be derived for the same domain as the composite role will be created for.
Orange: the single role does not exist and will be created, however the single role will not be created for the same domain as the composite role has.

Note:
The single role cannot be derived for the desired domain (= composite role) because the domain was not attached to the master single role.
You can right click on the single role and add the domain to the single role, so the single role will be created for the same domain as the composite role.

Red: the role cannot be created, the role name is already in use and the role's parent role is not filled in or not correct.

Note:
This option is only possible when the composite role already exists.
The single roles assigned to the master composite are compared with the single roles assigned to the copied composite role and the difference will be placed to "remove" if the option "Delete single roles (tasks) ..." was flagged on.

No color (gray): the derived role already exist
If you want to update the roles authorizations go to "Mass authorizations update"

You might also get a "Not found in source composite" status, this is the case when you have derived a composite role for eg. BE and NL and added another domain to this derived composite role. When running the derive composite roles again for these roles, the application will point out that you have manually added the NY domain.

New relation flag indicates whether the composite/single role assignment already exist or will be created.

Warning:
All steps are done separately so, if a composite role is not going to be created but there are actions flagged to his single roles, these actions will take place.
Also adding domains to single roles and then removing the action will still add the domain to the single role.

Tip:
If you want to reset all changes you made to the results, press the refresh button on top.
The derive engine will re-calculate everything.

Only maintain composites. (top)

Select the composite roles for which single roles where added, removed or changed.

This functionality will maintain the copied composite roles, taking into account the relevant domains.

Tip: The Child Warning column will have a icon in the parent row when there is a problem with the child rows.

At the end the derive engine will give an overview messagebox with all the actions done.