Page Comparison

V2017release, Application roles have been replaced by the appropriate Center roles. This change was made to continue to simplify and streamline User Administration and achieve a unified entitlements approach. User functional permissions are not lost with this change. New Center roles are generated based on the available Application roles and new assignments between generated roles and users are created during the upgrade.

This issue was tracked as Item#147073

Replaced User Administration Roles and Permissions with User Administration Center Roles

User Administration permissions define the level of access for User Administration's administrative functions such as adding, editing, and displaying users, groups, roles, and site settings. User Administration permissions are now controlled by the new User Administration Center roles. This change simplifies handling of permissions and aligns User Administration permissions with how permissions are controlled in all other Eagle Centers. You can create many different User Administration Center roles to customize permissions to fit your company's needs. You can assign users to the User Administration Center role exactly the same way as you assign users to other Center roles. The concepts of User, Operator, Advanced User, and System Administrator account types, as well as User Administration roles that were used in Eagle releases prior to v2017 are no longer necessary and have been removed since these permissions are now defined by the User Administration Center roles.

You can learn more about the new User Administration Center Roles at About User Administration Center Roles

This issue was tracked as Item #119800.

Redesigned the Maintenance Window in User Administration Setup

To improve usability, the Maintenance window has been redesigned into the following four separate windows accessible from the left navigation in User Administration Setup:
- Maintenance (General & External Web)
- Web Site Settings (Site/Logon)
- LDAP Settings
- Password Settings ( Password Expiration + Password Settings)

This issue was tracked as Item #129959.

 This issue was tracked as Item #145609.

Added Entitlements for Permission Group Conversion

Entitlements have been added to the Permission Conversion window in User Administration Setup.

This issue was tracked as Item #126660.

Added User Entitlements for Managing Capacity Group in Automation Center Roles

You can now manage Engine Capacity Group permissions in Automation Center Roles. You can allow/disallow the following permissions for capacity groups: View, Create, Edit, and Delete.

This issue was tracked as Item #126669.

Added Entitlements for Managing LDAP Users
Entitlements have been added to the User Administration Center Role to manage LDAP user accounts.

This issue was tracked as Item #130307.

Added Security Settings to Custom Processes in Control Center Roles

Multiple levels of control over a custom process are now available. In the Change and Audit tab of the Control Center roles, new privileges were added to help control the group's ability to generate a linked Custom Process, generate an unlinked Custom Process, and override a Custom Process. In the Tools Menu tab, you can now limit the group's ability to view, edit, and delete a Custom Process. 

This issue was tracked as Item #132633.

Add in info about new centers here! - reminder

Added the Ability to Create Action Rules for User Administration

You now have ability to create Action Rules for various User Administration windows.

This issue was tracked as Item #148731.

Added the Ability to Create Only LDAP Users

You can now assign permissions to create only LDAP users when adding new users. This option can be set in the User Administration Settings tab of the selected User Administration
Center role.

This issue was tracked as Item #116593.

Added New Options to the Report Profile Group

The Add and Delete options have been added to the Report Profile Group. These options allow you to add a new or delete an existing Report Profile Group. These are located in the Users workspace, User Properties, in the Data Access tab.

This issue was tracked as Item #151003.

Enhanced User Contact Details

The Contact Details tab in Users workspace was enhanced with new default options: Phone Number, Application, and File. These options can be configured dynamically via code category and are used when creating new subscriptions. Additionally, you can now set a default Notification type (available for E-Mail, Application, and File).

This issue was tracked as Item #138564.

Enhancements around Managing Oracle Database Users

Added Support for Managing Oracle Database Users

You can now manage Oracle database users and the associated database roles from User Administration Setup. A new DB Users window was added which is accessible from the left navigation in Setup. System Administrators with appropriate permissions can manage database accounts, change passwords, lock/unlock, select, and change database roles. To enable database user management functionality, set Sys Item 239 (Database Users screen visibility in User Administration Center) to 1. Note: This feature was first introduced in the v2015R2.x series.

This issue was tracked as Item #130310.

Enhanced DB Users Permissions

New DB Users are now assigned to predefined DB Roles which are selected according to System Parameter 201 which specifies whether it is a PROD, DEV, or TEST system. Additionally, the EA_PROFILE profile is now applied when a new DB user is created.

This issue was tracked as Item #139885.

Added the Ability to Allow Access Based on Region for DB Users

For the DB Users feature in User Administration Setup, you can now allow different access based on the type of region (DEV, TEST, PROD).
The following code categories have been added: DB_USER_DEV, DB_USER_QA, and DB_USER_PROD. Depending on the type of region, the system will display code values of one of these three categories as allowed roles.

This issue was tracked as Item #140528.

Added the Show Proxy Feature for DB Users in DEV Environments Only

In DB Users, the show Proxy feature (Add Write Permissions/Remove Write Permissions) has been added for DEV environments only. This feature is available only when Sys Item 201 is set to DEV.

This issue was tracked as Item #146503.

Added the Ability for DB Users to Connect as ESTAR or PACE_MASTERDBO

The DB Users feature was enhanced with the ability to connect to the database either as ESTAR or PACE_MASTERDBO user. To allow DB Users to connect with such access, these users have to be granted appropriate permissions in User Administration. To do so, the Add Write Permissions command should be applied in the DB Users window. The Remove Write Permissions command should be used to remove this access.

This issue was tracked as Item #140529.

Added Auditing Capabilities for DB Users

A new system query has been added to audit the DB Users functionality. The new query is called UA Security - DB Users Administration Audit. This query provides the last action that took place for a database user, the date and time stamp, and shows the name of the user who performed the action.

This issue was tracked as Item #140530

.

Improved User Import Functionality

Added the Ability to Assign Center Roles

You can now specify assignment to Center Roles during the actual import of external users.

This issue was tracked as Item #134078.

Added the Ability to Import Additional Contact Information

You can now import additional contact information from AD/LDAP such as Company, Full Name, and E-mail.

This issue was tracked as Item #130311.

Added Find Control in the Import User Wizard

The Find control has been added to the Import Users wizard in the Select Users window. This control make it easier to find a user instead of manually searching through the entire list.
This issue was tracked as Item #136810.