Each User is assigned to only one Security Role. Each Security Role may be a member of a number of Security Groups, which specify which functions (and other Security Identifiers) a User has access to.

Example

User Ronan Rooney attempts to register a Person. He enters the registration information on a client screen and clicks a button. The client application attempts to call the Person.register method. The server application successfully authorizes that Ronan Rooney is permitted to access the Person.register method. The data to support this authorization is as follows:

• User Ronan Rooney has been assigned the Security Role 'Case worker';
• The Security Role 'Case worker' is a member of the Security Group 'Front office';
• The Security Group 'Front office' has been granted access to the Security Identifier 'Person.register'; and
• The Security Identifier 'Person.register' relates to the Function Identifier 'Person.register'.

Technical Notes

For more information see the Cúram Application Administration Guide.