Roles

Purpose

• Access to MetaField functionality is controlled using role-based security.

• MetaField authenticates users with Active Directory and Windows security.
• Only a MetaField Administrator can assign roles.
• Assign roles to users based on the activities they perform.
• Before users can access MetaField, they must be assigned to at least on role.
• Several standard roles are pre-loaded in the system.
• Administrators may create new roles with custom permissions.

Standard Roles

Assigning a User to a Role

To assign a user to a role:

• Select the Assign Users icon next to the appropriate role.
• Type in the employee’s Active Directory username, then select Add.

Creating a New Role

To create a new role:

• Select the Add Role button
• You will be prompted to give the role a Name and Description.

• Once the role appears on the Roles list, select the Reassign Permissions symbol to configure the permissions for your new role.

Assigning Permissions

• MetaField uses a check box tree to assign appropriate permissions.  Each permission label, corresponds with its respective area within MetaField.
• By assigning a "check mark" on the permissions check box tree, the selected check mark will grant access to its respective area.
• By removing a "checkmark" on the permissions check box tree, any unselected check boxes, will not grant access to the respective areas.
• Items to note are listed below:

Item to Note	Example	Image
By selecting a "parent" check box permission, all children permissions will be granted.	Parent = Field (permission granted) Children = All activities within the Field module will be granted unless an individual permission is removed.
The permissions check box tree, use a "tri-state click cycle".	If a check box is empty (empty state), the permission is not granted. If a check box is checked (full state), that permission is granted along with all (if any), child permissions are granted as well. If a check box is full colored (mid state), that permission is granted but it contains 1 or more child permissions that are NOT granted. Click an individual check box to cycle through each state until the appropriate state is applied. Special Permissions MetaField contains certain special case permissions that will NOT be automatically applied if the parent permission is marked.  For more information, please see the Special Permissions section.

Special Permissions

• MetaField contains special permissions that can provide a user access such features as managing sample data, test data, and proctor data.
• Each special case permission can be accessed and granted within the permissions check box tree.  The only way for these permissions to be granted is if they are selected individually.  By default, if these special case permissions parent permission is marked, they will not assume to be marked as well.
• Listed below, are all of the special case permissions within MetaField.

Removing User Access to an Individual Role

• You can remove a user from a role by selecting the Assign Users icon and selecting the X by the users's name.  You can also remove an individual from a role through the User tab.

Default Roles / Permissions

• MetaField Roles and associated Permissions can be configured how your organization sees fit.  Below are the default settings.