Introduction
This section describes some concepts and instructions for implementing authorization.
Authorization in Planon ProCenter enables you to control which users can access specific data and functionality within the application. By configuring authorization, you determine what users can view, modify, and perform based on their role and responsibilities in your organization.
Key Concepts
Authorization works through several interconnected elements:
• User groups: Users must belong to at least one user group, which defines their access rights
• Function profiles: Linked to user groups, these specify which functionality is available based on job roles
• Business objects: Authorization can be enabled per business object to control access to fields, actions, and status transitions
• Authorization filters: Optional filters that restrict which data a user group can view and act upon
How It Works
Authorization is inactive by default, meaning all users initially have full read access to all fields and can perform all actions. Once activated, you can enable authorization for specific business objects, which then become read-only by default for all users.
Access rights for fields, actions, status transitions, and extended actions can then be tailored per user group.
For information on applying authorization to user/user groups as well as more generic descriptions regarding authorization principles, see
Accounts.