Security Groups

The Security Groups view is used to create custom levels of security which, when applied to employees, restricts access to views and tools. Custom security groups can also be set up to restrict access to the costing and rate information displayed throughout the application.

Notes:

DOVICO Timesheet includes 5 internal security groups which cannot be deleted or modified. These security groups are Administrator, Manager, Group Leader, Auditor and Time & Expense Entry. See Internal Security Groups for a detailed description.
Security Group permission reports detailing access settings for all internal and custom security groups are available in the Reports Explorer's Administration \ System Administration folder.

To create a custom security group:

Tip: The fastest way to create a new security group is to identify which of the existing security groups best fits the new group's requirements; copy and paste this security group and then make the necessary changes to the name, permissions, etc. Note that security for reports and report folders are copied in this manner.

Click the Security Groups buttonlocated in the Advanced section of the side navigation bar.
Click the New button on the toolbar.
Enter a unique security group name (up to 100 characters).
(Optional) Enter a brief description of the security group (up to 250 characters).
The Views list box displays all available administrative views for which Read, Modify, Delete and Limited Access can be modified. Select each view and assign permissions by selecting Yes or No in each access type drop-down list.

Mixed is displayed as the status when more than one view is selected from the list and these do not have identical settings. While modifying options, Mixed can be selected to return a selection to its previous status (until Save is used).

Access types:

Read: To see the view but not add, edit or delete items.
Modify: To read, add, edit and save items. Cannot delete items.
Delete: To delete items.
Limited Access: For a manager to only view information for those items that he/she manages. Limited access can only be applied to certain views.

Example: if Limited Access is applied for projects; the person using that security group will only see the projects for which he/she is assigned as the manager. Also any projects that have no assigned manager will be available to this person. See Limited Access for a full explanation on how limited access affects views.

The Tools/Features list box displays the views which can only be enabled or disabled. Select each item and assign permissions by selecting Yes or No in the Access drop-down list.
(Optional) Show/hide company or client cost and rate information for this security group by selecting the appropriate checkboxes in the Cost Security area. These options apply to time related costs and rates only. Expense costs are not hidden.

Show Client cost information: Un-check this box to hide client cost, rate charged and overtime rate information in applicable views and reports for all users assigned to this security group.
Show company cost information: Un-check this box to hide company cost, rate of wages and overtime rate information in applicable views and reports for all users assigned to this security group.

Note: The settings do not hide rates from those views which are specifically designed to create and review rates. Therefore as a precaution make sure that any security group with one or both of these boxes unchecked also has restricted access to the following areas: Rates view, Billing view, Update Employee Properties view, Security Group view and Import/Export tool.

(Optional) Check the Flag for archive box if you want to remove this security group from the database the next time the Archive Database function is run.
Click Save .
Go to the Reports Explorer view and assign security to each report and report folder as required.

Notes:

When reports are generated, options to show cost information are available at the top of the PDF viewer. These are made available as the report may need to be distributed to other individuals or in the case where the report is scheduled to be automatically generated and e-mailed to other individuals (via the Job Scheduler).
If an administrator changes a security group while an employee is using DOVICO Timesheet, then the new security changes will not take effect until the employee logs out of the application.

The number of security groups displayed in the view is limited by the Paging setting. You may need to click the paging buttons or (at the top of the screen) to view additional record pages.

Tip: If you have assigned a manager Limited Access to the Employees view, the manager can gain access to all employees by assigning themselves as the manager of all teams in the Teams view. To prevent this, restrict access to the Teams view.