Multi-Role: Disabled/Select/Combine. Disabled means a user cannot belong to more than one Role at at time. This is enforced during 'Security Hierarchy Maintenance'. You may want to set this during initial setup, while still leaving the Status at 'Disabled'. Select means the user can belong to more than one Role at a time, and they will be prompted for which Role they want to use when they log on.
Combine - means the user can belong to more than one Role at a time, and the permissions from all Roles will be combined. In this case, the following rules apply: - For process/file/field security, if any Role would allow access, then access is granted. - For Inactivity, if any Role would allow the user to log on, then log on will be allowed. - For Timeout, the longest Timeout period of any Role will be used. |