Use case for creating a process repository on the Intranet with read only access to organization users

Well the "read only" or "viewer" access is pretty straighforward. I have done the same with our Aris Connect SR20.

You need to go into Administration\User Management\User Groups and create a user group such a "Aris Viewer". On the Database Privileges for that user group you would give the User Group Access to the appropriate Database/Repository, but then you would "edit database privileges" and set the specific "assign database privilege" to "read" (see attached screenshot).

Again that is pretty straightforward, but to not allow printing I am not exactly sure about. Obviously people can take sceenshots of models or select "print page" from the browser menu, but I think all the printing of models via Aris is done through report scripts such as "Export graphic as PDF". There are properties (see attached screenshot) on the scripts where you can remove the "Available to Users" and/or check "Available only in Aris Architect" where you can restrict which users would be able to see these reports to run them. Since these are Standard Aris Release report scripts though I am not sure if you change the properties if they would thne be overwritten with a New Service Release of Aris. I would hope not. Maybe someone else can answer that or you could ask the question to Software AG.

Hope this helps.

Dear Utsav,

ARIS 9.8 is pretty old because we released the last service release 11 in November 2018. What prevents you from upgrading?

As for the viewer access Michael's advice is great. In 9.8 the user interface looks a little bit different, and some administrative tasks you could easily accomplish in ARIS 10 just using the browser, in 9.8 you need to assign database privileges in Architect.

Blocking your users from printing like ARIS offers it through a report script, you could remove the print option in the configuration set, or disable&remove the underlying report scripts. But as Michael already mentioned, you can't prevent users from taking screenshots or using the browser's print function.

User activities can be enabled in User management and exported from there in CSV file format. However, a specific analysis of users clicking/viewing models you need to implement using external tool, such as Piwik (successor: Matomo).

But you will have a hard time finding someone still able to support you on such an old ARIS version.

Cheers
Runè

Yes, sorry about that I was talking about Aris Connect when you are using the 9.8 Client. Basically as Rune says you can do the same User Group setup in 9.8. That was where I initially set this up before we migrated to Aris Connect.

Also, you can Restrict Reports to User Groups as well using the Report's Properties/Restrict Access dialogue and then just set the User Groups you want to be able to Run the Report.

So other than the printscrees and browser print functions again it should be fairly easy to restrict the Aris Printing and Access via the User Groups.

Now in Aris Connect I do see a "Chart" called "Most Viewed Objects" so I suspect that underlying that chart there is likely detailed information of which Users were doing the viewing. Again just an assumption, but that information may be available to give you your "audit trail" type of custom report script in Aris Connect at least.

Hello Utsav,

for the audit trail or model page usage statistics you can try to adopt Thierry's solution with an event driven macro logging user infos when they open a model instead of the database (see Script Help EVENTID_MODEL_OPENED).

AFAIK his event driven macro was intended to be triggered by Aris 9.x Designer clients. Meanwhile in Aris 10 Connect portal users can trigger events as well. It would save you implementing a 3rd party website analytics tool like Matomo as Runè mentioned.

Please also check for legal implications of logging detailed user activities. Depending on the locations of your 10,000+ employees there might be different data protection rules asking for their consent.

Regards, Martin