Administrator Overview – Kepion Support Center

Introduction

The Administrator tab is designed for easy management of application security and workflow. You can access the Administrator tab by selecting Administrator from the header. If you want to directly go to the application, hover over Administrator and then select the application from the drop-down menu.

Note: In some versions of Kepion, you may notice two additional sections called Workbook App and Monitor. Workbook Apps are deprecated, as all their functionality can be reproduced in Dashboard Apps. The equivalent to the Monitor section is now a Dashboard App's Progress tab.

User and Group

User & Group allows administrators to create or remove users and user groups, and edit group memberships, permissions, and restrictions. It has the following sections:

User & Group: Create and manage groups and users.
Membership: Add multiple users to a group to make permission management easier.
Permission: Configure user or group data permissions for both Models and Dimensions (when Dimension security is enabled).
Restriction: Restrict what parts of the Administrator Module and the Modeler users or users within groups can access.

User & Group

In the User & Group section, you can:

3.5.png

Refresh: Refresh the User & Group page.
Add: Add users, groups, or roles, to your application.
Remove: Remove user, groups, or roles from your application.
AD Sync: Sync up your users and groups with your Active Directory.

To add a user or group, select the Add button.

Select the Type of user you are creating:

User or Group: Users or groups that are authenticated through Active Directory.
Role: A custom set of users or groups.
Custom: Users that only exists locally in the application, useful for testing permissions and security

For this example, we will create a custom user. When creating a regular user, enter the domain\username (e.g., COMPUTER\John Smith) or the UPN (e.g. john.smith@company.com). When creating a custom user, simply type in the name of the custom user and press OK.

To delete a user, group, or role, select the check-box next to the name and then click Remove .

Membership

The Membership section allows administrators the ability to dictate which roles a user belongs to.

In order to begin, a user, group, or role will need to be selected in the Configure drop-down at the top. To follow the previous example, we will select Kepion and then press OK.

When a user is selected, all of the groups and roles they have been assigned are shown.

In addition, the following options will appear:

Add to Role: Add a user to one or more roles.
Remove: Remove a user from their role.

Note: When you have a role selected, the Add to Role button becomes an Add Member button, and you can add multiple members to the same role.

Just like the User & Group page, removing or adding a user, group, or role works in the same way in this section.

Permission

The Permission section allows Administrators the ability to dictate what the selected objects' permissions are. The following options can be found in the Permissions section:

Dimension: Edit read and write permissions for each Dimension.
Model: Edit read and write permissions for each Model.

Note: In order to set permissions by Dimensions, you will need to go to the Modeler. Once the All Dimension node is selected, select the Security check-box for the relevant Dimension. By default this is not selected as it may impact performance.

When you select the Dimension button, you will see two tabs: Read and Write. Both tabs have a drop-down menu where you can select the Dimension you wish to configure.

The member selection screen here functions the same as in the Form Editor. If you give the user write access they will implicitly have read access. Once you have selected all the necessary requirements, select the OK button.

The Model Permissions screen has a third tab called Summary. Summary shows what Read/Write Permissions the selected member has. Click the tab with the desired permission in order to change a user's access to a Model.

Tip: For more information, please read Manage Data Security.

Restriction

The Restriction section allows administrators the ability to dictate which parts of the Administrator Module and Modeler certain users, groups, or roles can access:

View: Give users the option to view all the settings.
Edit: Give users the option to edit all the settings.

Tip: For more information, please read the Restrict Modeler and Administrator Access article.

Dashboard App

The Dashboard App allows administrators to configure users, rules, page and write restrictions, approval, and submissions settings. It does not have any subsections, but can be divided into folders as shown below:

After selecting Dashboard App, you will see the Add and Remove buttons.

If you want to sort your Dashboard Apps in folders, click on the Edit in the Folder section to name the folder the app will go in.

Click the Save icon to save all changes.

The new folder will appear in the right-side navigation pane.

Dashboard App Configuration

To access the Dashboard App Settings, click on the app of your choice.

The following tabs are accessible after selecting a Dashboard App.

Configuration: Configure the app's name, title, description, start/end dates, and workflow settings.
User: Add or remove Contributors, Reviewers, and Approvers to the app.
Rule: Associate a SQL rule with a Dashboard Page.
Page Restriction: Limit which pages users or groups can access.
Write Restriction: Limit which Dimension Members users or groups can write to.
Approval: Add an approval process (Advanced Workflow).
Submission: View the progress of users and their approvals according to the approval chain definition.

Configuration

The Configuration tab has two sections: General and Workflow.

In General the following options are available:

Name: The system name of the Dashboard App. Changing the name may affect references to rules.
Title: The display name of the Dashboard App.
Folder: The folder it appears under in the Administrator and Apps modules.
Description: A description of the Dashboard App.
Dashboard: The Dashboard that will be used for this app.
Start Date: The first date the Dashboard App is available.
End Date: The last date the Dashboard App is available.

The following options are available in the Workflow Section:

Workflow Type: Select whether the workflow will have an approval process (Advanced) or not (Basic).
Auto Create: Create a new submission on start.
Allow Multiple Submission: Users can start multiple submissions.
Lock: Lock this workflow to prevent additional changes to the data model.
Notification: Enable email notifications on workflow actions.

User

The User tab is used to dictate which actions users can perform in the Dashboard App:

Contributor: Add a user or group as a contributor to the Dashboard App.
Reviewer: Add a user or group as a reviewer to the Dashboard App.
Approver: Add a user or group as an approver to the Dashboard App.
Remove: Remove a user or group from the app.

Note: If the Basic Workflow is selected, you will only be allowed to add contributors to the app.

Tip: For more information, please read Monitor Workflow Progress.

Rule

The Rule tab allows administrators to associate rules with Dashboard pages. The following options appear in the Rule tab:

Add: Associate a rule with a Form in a Dashboard Page.
Remove: Remove an associated rule.
Move Up: Move the priority of the rule up.
Move Down: Move the priority of the rule down.

Note: The order of the rules does matter. It dictates which rules run first. The rules run in order from top to bottom.

Tip: For more information, please read the Configure SQL Rule article.

Page Restriction

The Page Restriction tab allows administrators to limit which pages users have access to. The following options appear in the Page Restriction tab:

Add: Add a Dashboard Page to be accessible for a particular user, group, or role.
Remove: Remove a Dashboard Page from being accessible for a particular user, group, or role.

Note: By default, users have access to all pages in a Dashboard App. Granting them explicit access to any number of pages will remove this implicit access.

To restrict a user to a particular page or set of pages, click the Add button. Select the object that you want to configure in the Configure drop-down and check the pages that you want to allow access to.

To remove a page, select the page's checkbox and then select the Remove button.

Write Restriction

Write Restrictions allows administrators to constrain users to only write to particular Dimension Members within the app. These differ from Dimension Security as the restriction only applies to this particular app, not the entire application.

Tip: For more information, please read Manage Data Security.

Approval

The Approval tab allows administrators to manage approval workflow processes. The following options appear on the approval tab:

Add: Add a workflow approval process.
Remove: Remove a workflow approval process.

Tip: To learn more about adding an approval chain, read Monitor Workflow Progress.

Submission

The Submission tab allows administrators to understand which part of the workflow process each submission is at. The following options appear on the Submission tab:

Refresh: Refresh the page.
Remove: Remove selected submissions.
Update Forms: Update changes to the Form in a submission.
Reset Workflow: Reset the approval process.
Email: Configure emails to be sent at different points in the approval process.
Sort: Sort the submissions by columns such as Status, Owner, Submission, etc.
Approver: Show the available workflow depending on which approver is selected.