The Advantage Administration application is responsible for Application security. Users are defined and maintained in the Administration application. With Unified UI, any typical application page can be opened and operated from another Advantage application. The following setup is required to allow the user to access pages in each authorized Advantage application:
Users need to be defined/created in the Administration application of each Application URL from where the cross application-page navigation is expected. The Administrator can use different ways to create a user as mentioned in the “User Setup and Maintenance” topic in the CGI Advantage Security Administration User Guide. All applications that are involved in cross application page navigation should have the same User ID defined across all Administration applications.
The defined user needs to have application authorization for any of the primary applications (that is, Administration, Financial, HRM or Performance Budgeting) to be able to log in to the application URLs provided. The VSS application is independent and users need specific application access and can only log in to the associated VSS application URL. The VSS application is not unified with other applications.
The defined user needs to have relevant access control authorization to the page and functionality that the user is trying to access. If the user has access to any of the primary applications, (that is, Administration, Financial, HRM, or Performance Budgeting), then the user can use any URL to log in to the application. However, the user can only open pages where necessary security authorization is granted. Refer to the “User Information” topic in the CGI Advantage Security Administration Guide for more information.
The user needs to have the proper Security Roles assigned, along with the action authorization on the Access Control page. Refer to the “Security Role” and "Access Control” topics in the CGI Advantage Security Administration Guide for information.
For sites that have a shared Administration Application across Advantage Financial and HRM, since the Administration Application/DB is shared across other applications, the user needs to be defined/created only once. The security authorization setup is also defined at a common place.
For sites that have a separate Administration application for Advantage Financial and HRM, Steps 1 and 2 above needs to be in sync with all Administration applications where the User want to achieve cross application page navigation. Step 3 can be done in the specific Administration application and does not need to be in sync. Such authorization will always be performed by the application that is serving the page or action.