NU Manage Users
Use the Manage Users plugin in the Administrative Console (Security Admin, then Setup) to create, update, or remove BusinessPlus users. By default, the page opens in browse mode for all users on the system. The count on the right side of the top toolbar contains the record count.
Header
User ID: Up to twelve characters which uniquely identify the user. It is suggested that first names be used, where possible. This is the character string to be entered when prompted by the system to enter the User ID. The User ID is printed on all reports and appears in the User ID field of all data entry pages. The User ID should not contain special characters other than . (period) and _ (underscore).
Name: Up to 128 characters that represent the name of the user, in first name first order. For example, William T. Smith, III. This name appears on the Run Request report and on data collection forms. A long full name may not be fully displayed. Move the cursor through the name field to display the rest of the data.
Location: An eight-character code that describes the typical location of the user. This code must exist in the NU Common Codes (NUUPCD) page with a Code Category of NULC. This information is printed on the Run Request Report when the user launches a job.
Description: Up to 30 characters, which describe the user. It is suggested that the user's job description be placed in this field. This information is printed on the Run Request Report when the user launches a job.
Manager: An eight-character code designating the person responsible for managing this user's capabilities and descriptions. This code must exist in NU Common Codes with a Code Category of NUMG. This information is printed on the Run Request Report when the user launches a job.
Email: Enter the user's email address to be used throughout the system (for example, the PO Subsystem for approvals).
Hours: An eight-character code that represents the days and hours when the user is allowed to use the system. Entering @@ will allow the user to log on at any time. This code must have been previously defined in NU Common Codes with a Code Category of NUHR. This information is printed on the Run Request Report when the user launches a job.
Status: Specifies the status of the user's account. A (Active) = the account is active. I (Inactive) = the account is inactive. L (Locked) = the account has been locked. P (Change Password) = the user must change their password at next login.
User Number: This display-only field indicates the user number of the current user. This is a system-generated number assigned to the User ID when first created.
Last Password Change: This display-only field indicates the last date that the user changed their password.
Last Login Date: This display-only field indicates the last date that the user logged into the software.
Main
The Main tab contains general settings for each BusinessPlus user.
Password Expiration (Days): This field represents the life of the password in days. After the number of days entered in this field, the user's password will expire; the Logon module will prompt the user for a new password. "0" indicates that the password never expires.
Password Timeout: Length of time, in minutes, after which the active process will require the user to enter their password. "0" indicates that the password never times out. Maximum value = 166. Also, note that if the session is currently in a page, an inactivity timeout will occur to exit the user from the page after an interval of the minutes specified, then after another interval of the minutes specified, the timeout will occur to enter the password. For example, the session's password timeout is 20 minutes, and the session is currently in the Manage Users page. After 20 minutes, the page will exit, leaving the session at the main menu. After another 20 minutes, the user will be required to enter a password to continue working.
Inactivity Timeout: Length of time, in minutes, after which the current process will respond as if the user had entered "EXIT". "0" indicates that the terminal never times out. Maximum value = 166.
Maximum Job: Maximum job priority this user is allowed to specify when running jobs.
Default GL Ledger: Assign a specific general ledger to be the default for this user by selecting the appropriate general ledger code.
Default JL Ledger: Assign a specific job ledger to be the default for this user by selecting the appropriate job ledger code.
Default PO Security Code: Assign a default PO Security code to be used by this user. Codes read from POUPSC.
Default SI Security Code: Assign a default SI Security code to be used by this user. Codes read from SIUPCD.
Default OH Security Code: Assign a default OH Security code to be used by this user, the security code must have been previously defined in Accounts Payable Security Codes (APOHUPCD).
Workflow Enable: Sets the current workflow enabled status for this user. A = Administrator, D = Delegate only, N = No participation, W = Workflow only, Y = Workflow and Delegate.
Out of Office: Select this field to indicate when you are out of the office.
OS User must equal BusinessPlus USERID: Select this field to require the OS User and the BusinessPlus USERID to be the same.
Allow User to Schedule Jobs: Select this field to allow the user to schedule batch jobs.
Allow Interactive Jobs: Select this field to allow the user to run both batch and interactive jobs.
Allow Override for Posted Files: Select this field to allow the user to post batch files from any group. It overrides the restriction that batch files must not be posted from the POSTED group.
Allow Update to Posted Files: Select this field to allow the user to update posted batch files from any group.
Allow Override of Job Queue: Select this field to allow the user to place a job in a different job queue than the system default. Queues can be set up to categorize jobs based on estimated run time - for example, long running jobs are in their own queue.
Allow Password Change: Select this field to allow password change.
No Password, LDAP/SSO: When you select No Password, then Allow Password Change is set to unchecked and cannot be selected. Password changes are handled externally in Active Directory or Azure/Google. On save, NOPW is written to the us_usno_mstr.us_pw column. All other manual password changes are also blocked. When cleared, Allow Password Change becomes active again.
Cognos User: Use this checkbox to identify Cognos users so their BusinessPlus security can flow to Cognos when logging in. A rebuild of user security is needed when this option is first checked.
Default Line Printer: Codes that specify line printers and priorities to be used for standard printing purposes, when the user requests reports.
Default Form Printer: Codes that represent the printers to be used for special forms printing, when the user requests reports.
Line Printers: and Form Printers: To permit use of all printers, enter @@ in the second field. All printers will be displayed to the user for selection when printing. All Printer codes are defined in NU Common Codes with a Code Category of NULP. A single "@" is also supported as a wildcard. For example, to give a user access to all printers beginning with "D10", use "D10@".
Priority: Specifies the priority to be used for special forms printing, when the user requests reports.
Max: The maximum priority that can be set for that printer.
Security
The Security tab is used to assign security roles to a particular BusinessPlus user. By checking the checkbox to the left of the Security Role ID that role will be assigned to the user. Unchecking a security role will remove the role assignment. Save changes and run Rebuild User Security (under Tools) to complete the assignment process.
Use the menu options at the bottom of the Security tab to control the list display:
Details: Displays the roles in alphabetical order whether or not they are assigned.
List: Displays the roles without the role titles.
Group: Groups the Assigned and Unassigned roles for that user.
Refresh Role List: Select to refresh the display of the security role list.
Workflow
The Workflow tab functions similar to the Security tab except that it applies Workflow Group assignments to the BusinessPlus user.
Associations
Associations are often required in the setup of other modules, to identify the user's role, permissions or restrictions within a particular program, e.g., Employee Online, Bid Online, etc. The Associations tab allows Nucleus Associations to be added, set, or removed for the current BusinessPlus user. The associations available in the drop-down menu are defined in NUAS common codes. To add a new association, click the "Add new" ( + ) button from the bottom toolbar, then select an association from the list. Click Enter to save or use the Save button located at the top. If more than one association exits, the user's assigned associations can be browsed using the arrows on the bottom toolbar. To delete an association, click the Delete ( X ) button to remove the association record that is currently displayed.
SSO Mapping
This tab has a field called Mapping Value. This field is used to integrate with various Identity Providers, such as Microsoft Azure, Google, and so forth. For example, you can enter a value, such as the Microsoft OID.
Tools
Select the Tools tab in the lower-left corner of the screen to access the following tools:
Set User Password: Allows the user's current password to be set or changed.
Rebuild User Security: Creates a Workflow queue record to rebuild the current BusinessPlus user's security output. This is a required step after changing the user's security role assignments.
User Security Audit: Creates a Workflow queue record to generate a user security audit report.
Copy User: In some cases, the security requirements for new user on the system are close enough to an existing user that simply copying their general setup, security and Workflow role assignments and associations is all that is necessary. The "Copy User" tool prompts for the new User ID, Name, Email, Description, and Password, and will create the new user based on the currently selected user, changing only the items from the tool dialog. After clicking "OK," the software will run the tool and add the new user to the entity list.
Jobs
Any jobs that have been launched from Manage Users since the plugin was opened can be tracked on the Jobs panel. Open the panel by selecting the Jobs tab in the lower-left corner of the screen. Double-clicking the job number will bring up available job information.