This feature, or some fields and options described, might not be available depending on your settings, security rights, or platform package. |
Security is one of the most important features of your system.AMS360 comes with the permanent security groups: Admin, Owner, Book, Exec, Rep, S247Admin, and S247User that allow access to the system elements (found in the Secured Items List) required by most job positions within your agency. If desired, up to 93 additional security groups (for a total of 100) can be created to further customize system access.
Click here for a printable Excel spreadsheet that compares access levels for each permanent security group.
You can access Security Group Setup from any center or form that has a Toolbox menu. Select Toolbox>System Administration>Security Group Setup.
You must sign on to the system using a login ID with Admin or Owner level privileges to access Security Group Setup.
AMS360 contains the following permanent security groups:
Menu items, links and button controls are among the actions or 'tasks' that can be secured in AMS360. The 'states' of security for these tasks are as follows:
Access Level |
Access Description |
Full Access |
No restrictions on access or available actions. |
View Only |
Can view the task but cannot make changes to the data. |
No Access |
The task item (menu, link, button, etc.) is not visible to the user. |
Current User View Only |
Data displayed is restricted to information concerning the current logged in user only. |
Click here for a printable Excel spreadsheet that compares access levels for each permanent security group.
Each of the permanently defined roles in AMS 360 is associated with a set of privileges or access rights within the system. The expression of these rights and privileges is accomplished by hiding menus, buttons, forms or options in the user display of those employees to whom access is not granted.
Example: Sam Jones, who is assigned in Employee Setup to the Executive authorization role, will see different buttons and menus when he logs in to AMS 360 than Fred Smith, who is assigned to the Owner authorization role.
See the Creating Security Groups section later in this topic for information on setting up additional security groups.
Access rights for permanent security groups cannot be edited or deleted. Actions available in Edit mode for permanent groups are:
Action |
Column Heading |
Active |
Uncheck the Active checkbox to inactivate a particular permanent security group when it is not needed by your agency.
|
Employee Assignments |
Add or remove employees to the group, as desired. |
The Security Groups grid lists all security groups in the system. Click New or Edit on the Security Groups section menu to setup a new security group or edit a non- permanent group. Click Delete on the section menu to delete a non-permanent security group. You can also in-activate a non-permanent and permanent security group.
To make the security groups easier to find and work with, you can sort, and filter by the following title bars/columns:
Permanent
Group Name
Description
Grid Element |
What is this? |
Permanent |
Displays an "X" for the nine permanent security groups that come with AMS360. The permanent security groups are:
|
Group Name |
The name of the group (e.g., Owner, Book, Exec, "User Specified"). |
Description |
Description of the group. When adding groups, use this field for comments about the access rights of the group. For example, "Can edit customer and policy, access reports and view company setup only". |
Active |
The checkbox is checked when a group is active. Uncheck the box to inactivate the security group. If the Active box is unchecked, upon Save the Include checkboxes in the Employee Assignment section are unchecked, thereby removing all assigned employees from the group. See the Employee Assignmentsection later in this topic for more information. |
Displays all items in the system that are subject to security. Define the security group as desired.
Grid Element |
What is this? |
Feature |
Location in the system where the task is accessed. |
Group |
The name of the group. When setting up new security groups, Vertafore recommends you sort the Secured Items List by group. Items in a group are tasks that are similar in nature and need to be considered when setting up access. |
Task |
Identifies the function or control subject to secure. |
Access |
Click on the field to display a list of access options. Your choices are:
|
Lists all employees in the system. Click the Include checkbox to the left of an employee name to assign that employee to the selected security group.
An employee can be assigned to multiple security groups.
Grid Element |
What is this? |
||||||||
Include |
Check the Includecheckbox to include the employee in the selected security group. |
||||||||
Name |
The employee name is a link to Employee Setup for the selected employee. |
||||||||
Title |
Job title for the employee from Employee Setup. |
||||||||
Status |
The status of the employee in Employee Setup.
|
Users assigned to a newly created security group will not be affected by the changes until they log off AMS360 and log on again.
Click New on the Security Group section menu to create a new group, without using an existing group as a template.
Type in a Group Name and Description.
TheSecured Item Listsection contains all of theTasksthat can be secured for the new security group.No Access is the default for all tasks in the list. To assign tasks to the new security group, click the Access field on any tasks you wish to enable and choose Full Access or View Only, when available.
Select the Include checkbox in the Employee Assignment section for those employees you wish to assign to the new group.
Click Add on the Security Groups section menu.
Select File > Save to save the data and remain in the form or File > Save & Close to save and exit the form.
An alternative method of adding security groups to AMS360 is to Copy an existing group, give it a new name and description and then adjust the access permissions as desired. To do this:
Select the grid row in the Security Groups grid to be copied.
Select Copy Security Group from the File menu.
Type in the desired Group Name and Description. Make sure the Active checkbox is checked.
The Access column in the Secured Item List section matches the group you copied from. The access level on any item can be changed by clicking in the Access field and selecting the desired option.
Use the Employee Assignment section to assign the desired employees to the group.
Click Add on the Security Groups section menu.
Select File > Save to save the data and remain in the form or File > Save & Close to save and exit the form.
The Benefits group cannot be copied. Following the above instructions with the Benefits row highlighted returns the following message:
A security group can be deleted after it is added and before it is saved. If you have already saved it, you have the option of changing the status to Inactive.
From the list, select the security group (not saved) that you want to remove and click Delete. A message appears asking you to confirm the deletion. Click Yes. The security group disappears from the list.
When you are finished deleting security groups click Save or Save and Close.
Following are some important things to remember about employee authorizations and security access in AMS360:
In most cases, a user who is authorized to access a data entry form has access to all sections of the form.
Help topics are open to all users.
If modifying an existing group, user's assigned to that group inherit the new security when they launch the next data entry form or center. That is, if you are logged into AMS360 and an administrator modifies your security group, the changes take effect when you go to the next data entry form or center.
If creating a new group, user's assigned to that group do not see any security changes until they log out of the system and log back in.
If the Security Group Setup form and the Employee Setup form are both in edit mode at the same time, the last form to be saved overrides the other form.
Example:
When both forms are open, and an employee security change is made on the Employee Setup form and saved, but this change is not made for this employee on the Security Group Setup form and saved, then the end result is no security change is made for the employee.
Reason: The Security Group Setup form with no security change for the employee was the last saved.
For a visual overview see Understanding Security in AMS360
All users must have full access to the User Center to be able to login to AMS360. If the User Center is set to No Access, then the user will receive Access Denied when attempting to log in, even if they have full access to other centers.
You can now use Security Group Setup to secure certain sections by employee in the following forms; Company Setup, Employee Setup, and Customer Setup.
For example, if you want an employee to have access to the Employee's License Information you can set the access level to "Full Access" and if you don't want them to have access to the Security sections you can set the access "No Access".
My Vertafore Support | Vertafore University | NetVU Network | Vertafore.com © 2015 Vertafore, Inc. and its subsidiaries. All Rights Reserved. Vertafore, the Vertafore design, AMS360, Vertafore Producer Advantage, Producer Plus, AgencyEDGE, ReferenceConnect, BenefitPoint, Engage, and WorkSmart are registered trademarks of Vertafore, Inc. or its subsidiaries. Third party marks belong to their respective holders. AMS360 Classic Help updated 5/18/2016 11:02 PM |