Key Sets
Key sets are groups of permissions, based on areas of operation within your facility, that define the operations a group of users can perform.
After you have configured your key sets, you assign the key sets to the appropriate groups. If a user is a member of a group that has been assigned a specific key set, the user has all of the permissions configured for that key set.
Workflow provides default key sets that you can assign permissions to. These key sets are:
- System Visibility
- S95 Configurator
- Workflow Author
The default key sets are hierarchical with System Visibility, S95 Configurator, and Workflow Author visible at the top. S95 Configurator and Workflow Author contain default child key sets. You can add key sets to any level of the hierarchy below the top level key sets. The following table describes the hierarchy of the default key sets.
| > System Visibility | ||||
| > S95 Configurator | > Equipment Configurator > Material Configurator > Personnel Configurator | |||
| Workflow Author | > Workflow Builder | > Workflow Manager | > Workflow Supervisor | > Workflow Operator |
The following table describes the top level key sets.
| Key Set | Description |
|---|---|
| System Visibility | Required for any user to see the models list. |
| S95 Configurator | Automatically assigned permissions to create, edit, and delete resources in the Equipment, Material, Personnel models. |
| S95 Configurator > Equipment Configurator | Automatically assigned permissions to create, edit, and delete resources in the Equipment model. |
| S95 Configurator > Material Configurator | Automatically assigned permissions to create, edit, and delete resources in the Material model. |
| S95 Configurator > Personnel Configurator | Automatically assigned permissions to create, edit, and delete resources in the Personnel model. |
| Workflow Author | Automatically assigned permissions to create workflows and subprocesses to be used by workflow builders. |
| Workflow Author > Workflow Builder | Automatically assigned permissions to create workflows by assembling predefined subprocesses. |
| Workflow Author > Workflow Manager | Automatically assigned permissions to maintain workflows and historical task data in the system by importing and exporting data, and by archiving and purging data. |
| Workflow Author > Workflow Supervisor | Automatically assigned permissions to handle task assignment and management for their assigned operators. |
| Workflow Author > Workflow Operator | Automatically assigned permissions to perform work based on tasks that are assigned and available within a Task List. |
You can create as many key sets as you require and can organize them into a hierarchy that fits your business purposes. You can also assign additional permissions to each of the default key sets. You can delete the default key sets and replace them with your own; however, you cannot rename them. If a key set is already in use in your system, you cannot delete it.
The permissions that you assign to each key set are inherited by its parent. For example, you have the following key sets: Workflow Operator, Workflow Supervisor, and Workflow Manager. If you assign the system permission Visible and the workflow permission Cancel Tasks to the Workflow Operator key set, then the parent key set, Workflow Supervisor, inherits those permissions. If you then assign the Execute Workflows and Execute Schedules permissions to the Workflow Supervisor key set, those permissions, as well as the Visible and Cancel Tasks permissions are inherited by the Workflow Manager key set.
In addition, permissions set at one level are not inherited by child key sets. Therefore, the Workflow Supervisor key set does not automatically inherit the permissions assigned to the Workflow Manager key set.
Because the Administrator key set automatically has all permissions, it is not available when you are assigning key sets to groups.
When you are designing the security plan for your facility, make sure that you take key set assignments into consideration. When you are assigning key sets, you assign them to the appropriate solution and displays (found under Solutions in the Proficy System model).