Defining Roles, Permissions and Users

IMSMA^NG allows information managers to control permissions for IMSMA^NG functions through the management of users and roles. With multiple permission levels for the Workbench, for example, different users can be assigned different permissions, allowing programmes to implement a data-entry workflow that distinguishes between data entry and data verification roles. It is recommended to set up a permission structure that reserves approval authority for Data Entry Forms for the most trusted users.

Typical IMSMANG Roles
Role	Description
Data Entry	Users whose primary function is to enter Data Entry Forms and other data into the system. This role may or may not include the ability to approve Data Entry Forms.
Data Verification	Users who typically perform quality checks on the data entered by Data Entry users. This role is often responsible for verifying the accuracy of the data entered and approving Data Entry Forms.
Operations	Users who typically browse for information within IMSMANG to make operational decisions. Operations users may sometimes be grouped by function (for example, education, clearance, or victim assistance). These users often perform searches for data, generate reports and analyze the data to support operational needs.
Systems Administrator	Users who perform information management-specific functions such as creating Data Entry Form templates, designing reports, backing up and restoring data and other technical functions.
Guest	Users with essentially read-only access to browse data.

To add, change permissions associated with, or remove IMSMA roles, you must have access to the Role Admin permission

Access to IMSMA functions are handled by the use of permissions. Permissions allow a user to view information related to a function, or view and change information related to a function. Roles are named groups of permissions that can be assigned to users. IMSMA includes several predefined roles that have one or more permissions assigned to them. The predefined IMSMA roles are Operations, System Administrator, Data Entry, and Guest.

How To
Role List Window Role Editor Window Add a New Role Change Permission Access Level View and/or Change Role Permissions Copy an Existing Role Remove a Role Access and Use the User List Window Use the User Editor Window

You can use the predefined roles as is, or you can change them to suit your needs. You can also add new roles or copy existing roles. The following sections provide information for performing these actions. The default permissions associated with IMSMA’s predefined roles and their descriptions are listed below:

Default Permissions for IMSMA Roles
Role Name	Default Permissions	Provides Access to...
Operations	Auxiliary Data Export	Export country structure, explosive ordnance, organisation, assistance classification, cause classification, needs classification and place data.
	Country Structure Mgmt	Add or change country structures and country structure levels.
	Data Inventory Manager	Add, change, and remove custom defined fields, custom option values, and data categories.
	Data Entry Form	Add, save, submit, and delete Data Entry Forms.
	Data Entry Form Approve	Approve Data Entry Forms.
	Assistance Classification	Add and change assistance classifications. For this permission, you can also specify read-only access.
	Cause Classification	Add and change cause classifications. For this permission, you can also specify read-only access.
	Data Entry Form Export	Export Data Entry Forms.
	Data Entry Form Import	Import Data Entry Forms.
	Data Entry Form Reject	Reject Data Entry Forms.
	Data Entry Form Submit	Submit Data Entry Forms.
	Form Template Design	Add, change, and remove Data Entry Form templates.
	Form Template Publish	Publish Data Entry Form templates.
	Impact Scoring	Add, change, remove, and generate impact scores.
	Link	Add links between item records.
	Explosive Ordnance	Add, change, and remove explosive ordnance. For this permission, you can also specify read-only access.
	Needs Classification	Add and change needs classifications. For this permission, you can also specify read-only access.
	Organisations	Add, change, and remove IMSMA organisations. For this permission, you can also specify read-only access.
	Places	Add and change IMSMA places. For this permission, you can also specify read-only access.
	Print	Print the results.
	Published Form Mgmt	Change the status of Data Entry Forms.
	Reference System Manager	Add, change, and remove coordinate reference systems used by IMSMA.
	Reporting	Generate reports.
	Role Admin	Add, change, and remove roles and assign permissions to roles.
	Search	Locate item records that meet specified criteria.
	Task	Add, change, and remove tasks and work items.
	Theme Customisation	Assign subcategories (sub-themes) to themes displayed on the IMSMA Navigation window’s map.
	Map Display	Change IMSMA icons and map themes displayed on the IMSMA Navigation window’s map.
	User Admin	Add, change, and deactivate users.
Summary Manager	Add, change, publish, and remove customised Summaries.
XLS Import	Import Data Entry Form data in .xls file format.
System Administrator	Map Export	Export a map to an .apm file.
	Map Import	Import a map into IMSMA.
Data Entry	Data Entry Form	Add, save, submit, and delete Data Entry Forms.
	Ordnance (read-only)	View explosive ordnance.
	Organisations (read-only)	View IMSMA organisations.
	Places (read-only)	View IMSMA places.
	Print	Print the results.
	Search	Locate item records that meet specified criteria.
Guest	Search	Locate item records that meet specified criteria.