User role definitions

[kreinhardt]

User role definitions

[kreinhardt]

just following up on this

[abyot]

Here are the three roles:

1. Superuser is superuser :)

2. Data viewing

• See Data Visualizer module
• See GIS module
• See Pivot Table module
• See Report module
• See Dashboard integration module

3. Data entry and viewing
   - All data viewing roles

• Add/Update Data Value

• Delete Data Value

• See Dashboard integration module

• See Data Entry module

• See SUN PMT module

• Add/Update Tracked Entity Data Value

• Delete Tracked Entity Data Value

• Add/Update Private Data Element Category Option

• Add/Update Public Data Element Category Option

• Add/Update Private Data Element Category

• Add/Update Public Data Element Category

• Add/Update Private Data Element Category Combo

• Add/Update Public Data Element Category Combo

• Add/Update Private Option Set

• Add/Update Public Option Set

• Access to all data sets and programs.

A modular approach to implement this is to create the three (actually two excluding the superuser) roles. Then for data entry and view users assign them both data view and data entry roles.

[kreinhardt]

Thanks for this. When creating the roles do I need to set the data sets and programs?

[kreinhardt]

And, for the last point about the modular approach - do you mean that I can create the data entry role without the data viewing aspects - then assign the two roles to the users with viewing and entry privileges?

[abyot]

Yes, when creating the roles you need to assign data sets and programs.

Re: the modular approach: Yes, that way you can reuse the roles for other groups of users.

• Data view can have only data view role
• Data view and entry can have data view and data entry roles.

[kreinhardt]

Great - thanks.

For the data entry and viewing role - I can't find "see SUN PMT module" on the list.

[abyot]

oh sorry, I thought I have fixed that.

User "M_dhis-web-action-mapping" for now. I will update the server later.

[kreinhardt]

Ok! thanks

[kreinhardt]

found it.

another question - I created a user with viewing privileges, however when I logged on as that user I was not able to see the dashboard that I had created as the admin. Why is this?

[abyot]

oh yes, you need to share those dashboards (and dashboard items) to the user (through its user group and also orgunit).

click the gear icon on the dashboard

then you can choose for which users (belonging to a give org uni) to share your dashboard.

You can also go to Favorites (in the outputs module) and the share ... and decide for which user (through user group) to share

[abyot]

alternatively you can also use the share button on the dashboard

Unlike the sharing of the entire selected dashboard for anyone from a given orgunit (the one you can do through the gear icon), the share button allows you to share based on user group.

[kreinhardt]

Great - thanks.

From the share button - I also just selected public view with login / can edit. It seemed to work for my demo user I created. But are there any issues or limitations that I should be aware of with this method?