The User Configuration operation provides mechanisms for fine-grained access control in multi-user systems.

It is not available in the E1 edition of the application.

Access permission changes are prepared, then rolled out and stored per user.
The system setting access_configuration_method controls how you prepare access permission changes.
When set to 'user', you have to prepare the access permission individually for each user.
When set to 'group', you can use access groups as a tool to prepare access permissions for groups of users.
The system will keep a record of any access permission change per user, but has no memory of whether the change resulted from individual or group configuration.

Module access groups

anon: users who are not logged in can access operations as defined in this access group
default: users who are logged in can access operations as defined in this access group
admin: users who are in this group can access all operations

Administration

Log viewer: the log viewer shows the changes to the access permissions of users
Activity: shows expired accounts and user activity status information
Initial passwords: shows automatically assigned initial passwords which are created for new user accounts