Defining Roles, Permissions and Users

IMSMA^NG allows information managers to control permissions for IMSMA^NG functions through the management of users and roles. With multiple permission levels for the Workbench, for example, different users can be assigned different permissions, allowing programmes to implement a data-entry workflow that distinguishes between data entry and data verification roles. It is recommended to set up a permission structure that reserves approval authority for Data Entry Forms for the most trusted users.

Typical IMSMANG Roles
Role	Description
Data Entry	Users whose primary function is to enter Data Entry Forms and other data into the system. This role may or may not include the ability to approve Data Entry Forms.
Data Verification	Users who typically perform quality checks on the data entered by Data Entry users. This role is often responsible for verifying the accuracy of the data entered and approving Data Entry Forms.
Operations	Users who typically browse for information within IMSMANG to make operational decisions. Operations users may sometimes be grouped by function (for example, education, clearance, or victim assistance). These users often perform searches for data, generate reports and analyze the data to support operational needs.
Systems Administrator	Users who perform information management-specific functions such as creating Data Entry Form templates, designing reports, backing up and restoring data and other technical functions.
Guest	Users with essentially read-only access to browse data.

To add, change permissions associated with, or remove IMSMA roles, you must have access to the Role Admin permission

Access to IMSMA functions are handled by the use of permissions. Permissions allow a user to view information related to a function, or view and change information related to a function. Roles are named groups of permissions that can be assigned to users. IMSMA includes several predefined roles that have one or more permissions assigned to them. The predefined IMSMA roles are Operations, System Administrator, Data Entry, and Guest.

How To
Role List Window User List Window

You can use the predefined roles as is, or you can change them to suit your needs. You can also add new roles or copy existing roles. The following sections provide information for performing these actions. The default permissions associated with IMSMA’s predefined roles and their descriptions are listed below:

Default Permissions for IMSMA Roles
Role Name	Default Permissions	Provides Access to...
Operations	Assistance Classification	Add and change assistance classifications. For this permission, you can also specify read-only access.
	Auxiliary Data Export	Export country structure, explosive ordnance, organisation, assistance classification, cause classification, needs classification and place data.
	Cause Classification	Add and change cause classifications. For this permission, you can also specify read-only access.
	Country Structure	Add or change country structures and country structure levels.
	Data Inventory Manager	Add, change, and remove custom defined fields, custom option values, and data categories.
	Data Entry Form	Add, save, submit, and delete Data Entry Forms.
	Data Entry Form Approve	Approve Data Entry Forms.
	Data Entry Form Export	Export Data Entry Forms.
	Data Entry Form Import	Import Data Entry Forms.
	Data Entry Form Reject	Reject Data Entry Forms.
	Data Entry Form Submit	Submit Data Entry Forms.
	Form Template Design	Add, change, and remove Data Entry Form templates.
	Form Template Publish	Publish Data Entry Form templates.
	Hierarchy Manager	Add, change, and remove levels for Country Structure, Assistance Classification, Needs Classification, and Cause Classification.
	Impact Scoring	Add, change, remove, and generate impact scores.
	Link	Add links between item records.
	Map Export	Export a map to an .apm file.
	Map Import	Import a map into IMSMA.
	Needs Classification	Add and change needs classifications. For this permission, you can also specify read-only access.
	Ordnance Classification	Add, change, and remove ordnance classifications. For this permission, you can also specify read-only access.
	Organisations	Add, change, and remove IMSMA organisations. For this permission, you can also specify read-only access.
	Places	Add and change IMSMA places. For this permission, you can also specify read-only access.
	Print	Print the results.
	Reference System Manager	Add, change, and remove coordinate reference systems used by IMSMA.
	Reporting	Generate reports.
	Role Admin	Add, change, and remove roles and assign permissions to roles.
	Search	Locate item records that meet specified criteria.
	Task	Add, change, and remove tasks and work items.
	Sub-Theme Customisation	Assign subcategories (sub-themes) to themes displayed on the IMSMA Navigation window’s map.
	Map Display	Change IMSMA icons and map themes displayed on the IMSMA Navigation window’s map.
	User Admin	Add, change, and deactivate users.
	Summary Manager	Add, change, publish, and remove customised Summaries.
	XLS Import	Import Data Entry Form data in .xls file format.
System Administrator	Map Export	Export a map to an .apm file.
	Map Import	Import a map into IMSMA.
Data Entry	Assistance Classification (read-only)	View assistance classifications.
	Cause Classification (read-only)	View cause classifications.
	Data Entry Form	Add, save, submit, and delete Data Entry Forms.
	Needs Classification (read-only)	View needs classifications.
	Ordnance Classification (read-only)	View ordnance classifications.
	Organisations (read-only)	View IMSMA organisations.
	Places (read-only)	View IMSMA places.
	Print	Print the results.
	Search	Locate item records that meet specified criteria.
Guest	Search	Locate item records that meet specified criteria.