Aris 9 assign user privileges to 1 model

Hello Lubo,

ARIS access privileges are defined on group level. So the way for you to go is

1. create a new group under the group where your model currently is. Usually this group inherits all access privileges from the group above where you create it.

2. Move the model (without objects) to the new group

3. Change the access privileges on this group. Observe, that a user accumulates the access privileges of all groups he is a member of. So you have to remove him from all groups, that have read privileges on the group. If you have individual access privileges for users, just withdraw all access privileges for the user on the group.

Hint: If there are only certain objects the user should not be able to inspect, you have to make sure that the object definitions reside in groups the user has no read permissions on. No matter where there are occurrences of these objects the user will not see them.

Regards, M. Zschuckelt

Hi Zschuckelt,

Thank you a lot for detailed explanation.

Yes for now I also thought for such solution to put the model in another group. And about point 2. - without objects - why. If it is moved without objects will this user able to see also the objects

Regarding the objects in the model - some users copy models and paste them without objects in another model groups. As a result there are a lot of objects generated and left in the first group and it is impossible for me to degfine which object to which model it is or I can do it manually object by object and to move it in the respective group which is impossible with so many objects. Then I have some problems with when I am giving privileges to 1 user to some model there is a problem with so many objects everywhere. Now we are trying to train all the users how to copy and paste models from one database to another with different structure (Is there a manual for this somewhere). So my question also is do you know if there is some kind of report to show all the object?

Thank you again and have a nice afternoon

Lubo

Hello Lubo,

you are right, essentially it does not matter. It really only depends on where you want to govern your objects.

You are right indeed, that in "hot" modelling phases with a lot of shifting around of models the objects may become "lost" in the sense that they are not close to "their" model anymore.

You need a governance concept, where the objects of each type belong and who owns them. E. g. if you have modelled Application system types you probably have an Enterprise Architect, who owns them and governs them in at least one library model. Anybody creating new application system types will have to submit them to the proper owner for registration in the library. Roles are likely to be governed by an owner in HR.

You can "Find..." (Ctrl+F) objects by object type and drag and drop everything, which is not in its proper place, from the search result to the respective library group directly. What will be left in your process groups are the functions and possibly the events.

Here is a trick, how to move multiple objects back to the model they belong to. Assuming Model X is in group A, but quite a few functions occurring in it have their object definitions in group B:

1. Move Model X to group B

2. Move Model X with objects back to group A. "Move with objects" only moves objects in the same group as the model being moved. Thus library objects will not move.

This works in ARIS 7.x and current versions of ARIS 9. Early ARIS 9 versions had a bug, which moved the objects from anywhere to the target group of the model movement. So try this on small scale first, if you are not on one of the latest versions.

If you want to get rid of objects without occurrences you can do a "Reorganization" of the database. Some users have that running every night to clean up the modelling debris. Just make sure to have everything in library models in case no one uses an object for a moment.

Regards, M. Zschuckelt

Hi Zschuckelt,

This information is very helpful, thank you a lot.

And one last question regarding Publisher - I know that it sounds easy but I cannot solve it - may be I am missing something. Yesterday we faced the following problem with the assigned privileges to model group for Publisher (till now we are working with Anonymous access, so we didn't tried with the new 9 version to assign user rights, that's why this problem arises just now). We are creating publisher export to 1 database (it is impossible to make it only for one model group - only to whole db, isn't it?)

In this DB we have user group with several users under it. The group is assigned to Aris Viewer license only - we want this group to see only the processes in Publisher and not to model in Designer (we have tried also if it has also access to Aris Designer - the result later is the same). Then in Aris Architecture we are removing the access to some model groups (---) and Pass on privileges to take all the levels under this group. 

And the result... unfortunately in Publisher when we log in with pass for this user - the model groups that we don't want this group to see are still visible. With old publisher I didn't have such problem at all - did I miss something. Should I restrict this rights somewhere else or ....

Sorry again for this basic question

Regards,

Lubo

Hello Lubo,

did you publish again after removing the access privileges to the groups? Remember that the Publisher has got a separate database from the Design Server.

Besides: Please start a new thread for different questions. This way the whole community has the chance to draw attention to your question. I'm not the expert for everything.

Regards, M. Zschuckelt

Thank you Zschuckelt, i will try it and if I have problem I will start another topic. Sorry for overloading the topic and thank you for your time

KR

Lubo