Skip to main content

Get help for ARIS

Function privileges

To perform certain actions in a database, users need the related function privileges that you can assign for each database. The database-related function privileges come in addition to the function privileges that can be assigned tenant-wide in ARIS Administration.

You can do the following:

Manage function privileges

Users and user groups that have the Database administrator function privilege in ARIS Administration automatically have all function privileges of a database and access to all databases of a tenant. You cannot change privileges of database administrators or tenant-wide system users.

  1. Click Application launcher Application launcher > Administration Administration. Configuration Configuration is displayed.

  2. Click Databases.

  3. Select the database and click Properties Properties > Access privileges Function privileges.

  4. Click User groups or Users and click the user groups or users to which you want to grant function privileges.

  5. Enable the required privileges.

    If you selected Users, you can see the function privileges that are individually assigned to the user, the privileges the user inherited from the user groups, and the sum of privileges the user has.

Single users or members of user groups receive all the function privileges granted for this database. This only changes the database function privileges. The function privileges of a user in ARIS Administration are not affected.

Manage system users for a database

System users have all function and access privileges in a database. To be on the safe side, create additional system users besides the system user system.

  1. Click Application launcher Application launcher > Administration Administration. Configuration Configuration is displayed.

  2. Click Databases.

  3. Select the database and click Properties Properties > Access privileges Function privileges.

  4. Click Users and use the filter to navigate to the related user that you want to make a system user for this database.

  5. Enable the System user check box.

The user receives all function and access privileges for this database. This only changes the database function privileges. The function privileges of a user in ARIS Administration are not affected.

To reject system user privileges, disable System user for the respective users. If the Database administrator function privilege is assigned to a user in ARIS Administration, this user has full access to all databases of the tenant. For such users, you cannot disable the System user check box. System users can only revoke privileges from users that are system users in single databases.