By considering authorization and control features, you can ensure that only authorized users have access to specific data and settings and ensure that each user only has access to the information that they require for their role, thus abiding by the principal of least privilege.
Several of the most common features offered by inVia Systems to address proper authorization are discussed here.
User groups are used to assign permissions to users based on their access requirements. User groups are typically created based on roles or tasks.
Below are some sample user groups.
Groups | Purpose |
manager | Uses Logic to monitor (orders, inventory, and so on), create users, and assign jobs. |
picker | Uses PickMate to perform Order Picking and to move Carts between zones. |
cart_builder | Uses PickMate to build a cart with shipping containers or reusable containers. |
replenishment | Uses PickMate to move pallets with SKUs from reserve to manual picking zone or replenishment wall. |
Under the groups category, roles can be assigned for the specific user.
After user creation, the user can be assigned to a specific group. Afterwards, group-level permissions can be set.
The following figure shows the manager role assignment for a user.
![Role assignment](/static/media/9198938f-8c47-5a0e-82d9-6db6a62cd3f7/DAM-fed21e53-11fe-423d-bd0a-8daaf0866a6b/out/role-assign=GUID-93455730-8D19-4A28-B25F-DC6113A8DBDF=1=en-us=Low.png)
For each user, the Permission - group can be assigned, which also defines the access level that is set for the user. inVia provides predefined, various group permissions, as shown in the following figure.
![Group permissions](/static/media/9198938f-8c47-5a0e-82d9-6db6a62cd3f7/DAM-fed21e53-11fe-423d-bd0a-8daaf0866a6b/out/group-perms=GUID-A1E46E55-473D-47A6-AB77-6E318057B75D=1=en-us=Low.png)
Based on their user and role permission, the access level is set. If the user does not have the required access, then the inVia Logic system displays an error message about unauthorized access.
![Unauthorized error message](/static/media/9198938f-8c47-5a0e-82d9-6db6a62cd3f7/DAM-fed21e53-11fe-423d-bd0a-8daaf0866a6b/out/unauth-error=GUID-D880E283-20DB-471A-A519-F9E6D4019E5A=1=en-us=Low.png)
When a user has no roles assigned, the system does not assign default roles to the user. So inVia Logic does not allow them to sign in to the system.
![Permission denied error message](/static/media/9198938f-8c47-5a0e-82d9-6db6a62cd3f7/DAM-fed21e53-11fe-423d-bd0a-8daaf0866a6b/out/perm-denied-error=GUID-8897BEFB-6A6E-4047-8B7C-D536BF6CE770=1=en-us=Low.png)
Similarly, the user is not allowed on the dashboard UI, and the system does not assign any default roles to the user. So inVia Logic does not allow them to sign in to the system.
For example, a picker/packer in the field might be assigned to use the PickMate UI only.