System Roles control what applications users have permission to use, in addition to the privileges they have to Read, Add, Edit, and Delete data for each of the applications. System Roles group individuals based on their functionality within the organization. This makes it easier for the administrator to manage application access rights. With this strategy, rather than assign access rights to each user for each application, you assign application access to a System Role, and then assign users to the appropriate role(s). When users log on to Synergy, they inherit the permissions from the System Role(s) they are assigned to. For example, you could create a Managers System Role that provides members with a level 4 access level to all applications, and a Sales Rep System Role that provides members with a level 3 access level to only Contact Directory. When you add a new user account, you must assign the account to the appropriate System Role(s). The user then inherits the permissions from the System Role.
To successfully logon to Synergy, a user must be a member of at least one System Role and the System Role must have access to at least one application. Users can be assigned to more than one System Role. If this is the case, the System Role that provides the user with the highest access level to an application determines the privileges they have for that application.
There are three default System Roles installed with Synergy: Admin, Sales, and Marketing. Adding users to the Admin System Role gives them access to all administrative functions. You cannot delete or modify the Admin System Role, however the Sales and Marketing System Roles are sample roles and can easily be deleted or modified to suit your needs.
When creating a System Role, you have the option of linking it to a Workgroup. This automatically creates a Workgroup with the same members as the System Role. This saves the physical task of adding members to the Workgroup.
Note: A Workgroup can only be linked to one System Role at a time. This means Workgroups that have already been linked will not be visible in the Linked Workgroup field on the Add System Role page.
If you link a System Role to a Workgroup, there are three options available to control the manner in which Workgroup membership lists are maintained relative to their linked System Role.
Automatically Update Workgroup: allow Non-Users
Changes to the list of System Role members are automatically updated in the Workgroup. Allows non-registered users
of Synergy, however their name must be in the Contact Directory.
Automatically Update Workgroup: Users only
Changes to the list of System Role members are automatically updated in the Workgroup. Only allows registered
Synergy users.
Manually select System Roles and Workgroup members
System Role and Workgroup member lists must be updated manually.
Note: The Linking Rule is not available if "No Workgroup Linked to the System Role" is selected in the Linked Workgroup field.
Note: A Workgroup can only be linked to one System Role. Therefore, only Workgroups that are not currently linked to a System Role will appear in the Linked Workgroup drop-down field.
Note: If you select Create new Workgroup from the Linked Workgroup field, the creator of the Workgroup will be defined as System Role. The creator of a Workgroup is displayed in the Workgroup list found under User Preferences and Manage Workgroups.