User Authorization Management
What users can do on Workcube varies depending on the permissions given. Thanks to User Authorization Management, an entry-level employee, a senior manager, as well as external users can work together in a common area.
Attention: To make changes to the User Authorization Management module, the user needs admin level privileges. In addition, it is essential that the user making the authorizations is familiar with the operation of the company and works carefully.
There are 7 functions under User Authorization Management. Through these functions, authorization definitions / page permissions / entry and exit rule sets are defined for users in all modules. Now let's briefly talk about these screens;
Authority Groups
Path: System > BPM > User Authorization Management > Authorization Groups
Authority Groups determine which modules the users who log in to the system can access and access. This is the screen that we define as inaccessible depending on the structure of the business. A new authorization group can be added or an existing authorization group can be updated on the Authorization Groups page. Module privileges of the authorization group can be restricted with 4 options; cannot "see", "cannot add", "cannot update", "cannot delete". Direct authorizations can also be made by selecting the Power User or Report User options.
From the Users section, the selection of which users on the system are wanted to be grouped under this authorization group is made in this tab.
Note: For more information, see the article titled "Authorization Groups". can be read.

Main Process Categories
Path: Control Panel > BPM > Main Process Categories
Main process categories work on a project basis. Depending on the project categories, users' project authorizations are defined here.
Note: For more information, you can read the article titled "Projects".

Process Categories
Path: Control Panel > BPM > Transaction Categories
Transactions such as Current, Accounting, Budget and Cost on the system are processed in the background according to the transaction type. Which transactions will be performed in the background as a result of the transaction and the users who are authorized to perform these transactions are managed from the transaction category screen.
Example: As seen in the image below, accounting transactions are also performed in the background as a result of the Bank Opening Slip cutting process.
Note:Use of this page with the article titled "Transaction Categories" Detailed information can be found about.

Encryption System
Path: Control Panel > System > Security >Encryption System
Users' definitions regarding encryption on the system are made on this screen.
Note: More information can be obtained from the article "Login and Active Directory".

Access Control System
Path: Control Panel > System > Security > Access Control System
The maximum number of incorrect entries that users can make before being banned while logging in is defined on this screen.

Digital Presence Groups
Path: Parameters > Digital Asset Groups
Files, documents, videos, etc. to be saved in the system. The materials contain trade secrets or may contain personal data. By creating digital asset groups, which users can view these documents according to the category of the document saved in the system is determined on the digital asset groups page. Added digital assets, especially personnel related to human resources, payroll, etc. Documents should not be in public view. This added digital asset is left to the management and supervision of only authorized positions and position types according to the definitions here.

Employee Authority Definitions
Path: Control Panel > System > Security > Employee Authorization Definitions
Users' Company, Fiscal Year, Branch, Warehouse and Location authorizations are defined on the Employee Authorization Definitions screen.
Note: Read the article titled "Branch, Warehouse and Location Authorizations" on this page. Detailed information about authorizations can be found.

Feedback
14.7.1. System Parametric Definitions
There are many system-related parametric definition pages on the Parameters screen. These parametric definitions are collected under various modules.
17.1. User Authorization Reports
In the User Authorization Management module, users' authorization reports and reports containing their authorizations based on module, process and transaction category can be obtained. Thanks to these reports, it can be learned which users have what kind of privileges on the system. Users with less or more authority are identified and the authority of the users is arranged accordingly.
1.5.2. Branch, Warehouse and Location Authorizations
In Workcube, branch authorizations work based on position-role. Branch, warehouse and location privileges given to a role will work if the user's active authorization group is selected as Working by branches. If "Work by Branch" is not selected in the authorization group, the authorization group is valid in all branches.
Login and Active Directory
There are different verification levels in Workcube to log in to the system securely.
Authority Groups
Authorization groups are designed to facilitate user management by grouping users. In Workcube, the concept of user means role-position. Users, that is, roles-positions, must be connected to at least one authorization group. If the User-Role is not included in an authorization group, the system cannot access it. A user-role can be included in multiple authorization groups.