User roles and Authorizations are created and setup for a reason, and that reason is Security.
From the Premium edition of CardExchange™ Producer, we offer advanced user authorizations with login functionality.
Because of the fact that CardExchange™ Producer is capable of handling multiple high level functions, such as advanced inline encoding, we need to consider that in a lot of cases we are working with information that is programmed into cards that may not be available for users of the CardExchange™ Producer system.
This can also be true for security issues related to database connections.
CardExchange™ Producer can be connected to applications such as Access Control, Payment, Time Attendance, etc.
In most of these cases, the application provider has set strict rules regarding access to information that can be viewed and used within the CardExchange™ Producer application.
To meet the demand for more efficient management of CardExchange™ Producer, ExchangeIt has introduced a strict policy regarding the security of the CardExchange™ Producer application.
In order to create more control for the Administrators of CardExchange™ Producer, we offer the ability to create user authorization levels. This helps limit user infractions and protect areas within CardExchange™ Producer that the common user should not be utilizing.
This high level security allows you to protect the software connections and functionality from user errors.
Setting up User Authorizations does not make any sense if you are not using a login mechanism therefore first select the Enable logins feature as indicated with the red arrow. When selecting a dialog will prompt for confirmation:
When you confirm this feature, the Account setup button will become available as indicated with the blue arrow.
When you click on Account setup, the User Account Setup Wizard will start.
In the section Create User Authorization we will explain how to create the user groups, profiles, and users. To disable the User Authorizations, uncheck the Enable logins feature check box, a dialog will pop up:
Creating User Authorizations starts with creating and/or managing groups. In this first page of the wizard you find two important areas; The Group information group, indicated with the red rectangle, and the Authorizations general settings, indicated with the Green rectangle.
The explorer on the left side shows all the available and created groups.
Important!
There are always two groups available; the Admin and the User group. None of these groups can be removed.
With the Authorizations general settings group you can indicate when the passwords need to expire. For example, putting in 30 means that after 30 days all users, when they login, are requested to change their password. When leaving it to 0, passwords will not expire.
In the Group information section you see the Group name and the Group description. It also contains the Add and Remove button. To add a new group, click on the Add button.
When you have entered Group name, make sure you chose logical names, and entered a Group description, the new created group will appear in the explorer on the left side as indicated with the blue arrow.
In this example we have created groups for card production, data entry, and photo production.
There are no limitations on the amount of groups you can create.
If you want to delete a created group, just select the group in the explorer on the left side and click on remove. Confirm with Yes to delete! Deleting a group does not delete your users!
When you are done adding groups you can proceed to the next level of the wizard by clicking next.
User Management:
In this page of the wizard you can create new or edit existing users of the system. On the explorer on the left side you can find all the available users, on the right side you can find all the user information.
When you click on Add, to create a new user, you will need to provide a User name, this is the name used to login to CardExchange™ Producer, enter a Full name of the user, and enter a Password and confirm the password.
Just like in the Group Management page of the wizard, we also have two special users; Administrator and Guest. The Guest account can be removed but the Administrator account cannot! What you can change is the password of the Administrator and we advise to do so but keep in mind changing the password means that you need to remember the password.
There is no option to retrieve or reset the Administrator password... yet.
The default user name for the Administrator account is Administrator and the Password is Administrator too! For the Guest the password and user name are both Guest. Passwords are case sensitive!
Note! The Administrator has always access to all defined groups and users!
Disabling the user is also a handy option. By checking this box, the user cannot login to the system anymore but is not removed from the system.
If later the user needs to get access to the system again, simply uncheck the user is disabled box and access is granted again.
In the section indicated with the blue rectangle you can specify per user to which group it will be assigned. Each user can be assigned to one of multiple groups. In this example, it makes sense that the Production user is assigned to the Card Production group but you can imagine that some users need to have access to multiple groups.
When you have created or edited all your users of the system and assigned them to the correct groups, you can proceed with the Authorizations management on the next and final page by clicking next.
Authorizations management:
In this last page of the wizard can assign and create the profiles per defined group or specific, per user. In the explorer on the left side you can see all the created groups. If you click on the expand sign you can see the assigned user of the group.
On the right side, indicated with the blue arrow, you see nine separate tabs dividing the available CardExchange™ Producer functionality.
When you click on each available tab, the corresponding functionality will be shown. For example, in the select tab, Card templates, all on the system available templates are shown. Each tab and each functionality has a colored indicator. There are basically three options.
When you are an Administrator and you need to do some maintenance on the user’s computer, just simple select Log off as indicated and enter your Administrator User name and Password to make changes.
