Security Profile

Use the Security Profile to establish settings for attachment security and role-based security using Active Directory in PowerSchool ERP. Role-based security can be maintained by using individual groups within the PowerSchool ERP software or integrating with Active Directory. Besides the security for the group or Active Directory, individual users can be granted security resources through User Access.

Menu Path: System Administration > Administration > Profiles > Security Profile

Fields

The Security Profile is divided into four sections: Backup to Disk Setup, Attachment Security, Active Directory Setup and Active Directory Groups. The Active Directory Groups section only displays when the Integrate with Active Directory checkbox is selected.

Backup to Disk Setup Section

The following field is used for running the backup to disk options in PowerSchool ERP. For details, refer to System Backups.

Field	Description
SQL Server Name	The server name that identifies the server computer on the network where this database is stored. Contact your System Administrator for assistance on what should be entered in this field.

Attachment Security Section

This section defines security for attachments. For details, refer to Attachment Security.

Field	Description
Use Attachment Security	Checkbox indicating that you will be using security for the View Attachments item on the toolbars of certain PowerSchool ERP pages. To set up security for using attachments, you must use the Attachment Security option to establish the link between the attachment groups, access levels, and security resources. If the box is blank, attachment security will not be used, and no additional setup is required for using attachments.
Active Directory Setup	This section determines whether your site will be integrating security based on Active Directory.
Integrate with Active Directory	Checkbox determining if security will be integrated with active directory. If you select the checkbox, all fields on this page will become accessible and the Active Directory Groups section will appear. If the checkbox is blank, click OK to save the security profile. Nothing else needs to be completed on this page.
Validate Active Directory Groups	Checkbox determining if the system should verify the Active Directory Group entered in the security profile or in the security roles page is a valid active directory on the server. Select the checkbox to validate the information. Otherwise, leave it blank. This field is only accessible if the Integrate with Active Directory check box is selected.
Limit Active Directory Groups	Checkbox determining whether to limit the Active Directory Groups which can be associated to security roles. If you select the box, you must enter at least one active directory in the Group Name field of the Active Directory Groups section. When creating security roles, only the groups listed in the Active Directory Groups section of the Security Profile can be entered in the Active Directory Groups field of the Role page. If the box is blank, any Active Directory Group can be entered in the Active Directory Groups field of the Role page. This field is only accessible if the Integrate with Active Directory checkbox is selected.
Synchronize User's Active Directory Groups	Enter the amount of time, in minutes, needed to lapse before refreshing the Active Directory groups a user is associated with. Enter 0 to refresh each time the user logs into PowerSchool ERP. This field is only accessible if the Integrate with Active Directory checkbox is selected.

Active Directory Group

The following field is used to select active directory groups from the server.

The Active Directory Groups section only displays when the Integrate with Active Directory checkbox is selected.
The entries in this section apply only when the Limit Active Directory Groups checkbox is selected.

Field

Description

Group Name

Enter the active directory groups to be used in the Active Directory Groups field of the Role page.

You are required to enter at least one Group Name if the profile's Limit Active Directory Groups field is selected.
The group names entered will be the only groups available in the Role page's Active Directory Groups field if the Limit Active Directory Groups is selected.
The group names entered by users in the Role page will be verified if the Validate Active Directory Groups field is selected.