Adding usersM
- Create a new user
If more than one person uses Bp Event, assign individual access data and passwords to all users for better traceability of user actions.
- Go to the
Administration tab in the function bar and select
Users >
User >
New.
- The input window for creating a new user will open.
- Enter the Login name for logging in to Bp Event, plus the normal Name and First name. Further details such as a link to an account are optional.
- Assign a (temporary) Password. Click on New password to enter a password manually, or click on
to generate a random password. This will automatically be copied to your clipboard for communicating to the user.
Read more on user login settings: Login settings. - If more than one person share a user, tick Not editable to prevent individual users from changing the shared password manually.
- Save a customised Start screen image for this user, a User picture and a Signature.
- Authorise the user to access mobile applications.
- Specify the Roles (Clients) for which the user may log in.
Full client,
Table Reservations client M ,
Passive Client,
ESC Client M etc.
- Assign one or more User groups to assign user privileges (read, change, new).
Create a new user group and Assign permissions. - Assign one or more email addresses for receiving and sending emails on the
Email account tab.
- Go to the
- Create a new user group
Individual users are combined into user groups both for permissions management and communication purposes. We recommend creating a detailed permissions concept in advance, which is then implemented in Bp Event.
- Go to the
Administration tab and select
Users >
User groups >
New.
- Enter a speaking Group name.
Example: Sales, Accounting, General Managers - Enter a Description of the group if needed.
- Tick Enable internal messages to activate that user group as recipient of internal messages.
- Go to the
Email account tab to assign one or more addresses for receiving and sending emails.
Save your input by clicking on the icon in the top left-hand corner of the input window.
- Go to the
- Assign users
Any number of users can be assigned to each user group.
- Go to the
Users / Groups tab in the user group
- Click on
Add in the toolbar and click on
User, then select one or more existing users by holding down the Ctrl key and left-clicking and
Confirm your selection.
- To nest user groups, click on
Add >
User groupsand make your selection.
- Go to the
- Assign permissions
Go to the Permissions tab to assign permissions to this group.
- Permission for some of the most common functions of the Bp Event can be activated in the toolbar:
Change picklists, Access the
Administration,
Export to FA,
Final report or
Hide prices.
- In the table, specific permisions (read, create new, change, copy, delete, print, report, import and export) are assigned for certain tables.
- To assign individual permissions, click in the desired cell. Some permissions automatically bring others with them.
Example: Permission to copy records automatically entails create and change rights. - Click on the column header to assign permission for all listed tables at once.
- Click on the column header Application to either activate or deactivate all permissions for all tables at once.
- Select an existing Rule in a cell or create a new rule to assign a rule-based permission.
- Permission for some of the most common functions of the Bp Event can be activated in the toolbar:
- Define login requirements
Users with administrative permissions can set requirements for password security, default settings and lockout settings for other users.
- Go to the
Administration tab in the function bar and select
Settings >
Login.
- User authentication for Bp Event can happen either
a) using a Bp event password (stored in the user)
Pro: If the user forgets their password, this can be easily reset by an administrator.
b) using the Windows Domain login, if one has been specified.
Pro: Single sign-on login to the full client possible (see below) - To ensure a sufficient level of password security, specify
a) Password memory: Prevent the user from re-using their old password within that number of resets.
b) Min. length: Enforce a minimum length for passwords
c) Tick Complex passwords mandatory to enforce passwords consisting of upper and lower case letters, numbers and special characters. - Define Default settings (e.g. login and server language) for the user.
- Decide whether to Show options for language selection or for saving login data.
Note: If several users share a computer or Windows user, remembering login data should not be allowed if you need an unambiguous data history/log. - Tick Single Sign On (SSO) login to allow users to log in via the Windows domain without entering another password.
Note: User authentication based on domain server must be set on the database server under Database properties > Client server - Specify the Lock settings, i.e. after how many unsuccessful login attempts a lock-wait will be imposed and how long that lock wait will last.
- Go to the
- Set up two-factor authentication
For two-factor authentication, the user needs to enter a username and password (or SSO) first, then supply a code (the second factor), which is sent by email or SMS and must be entered to complete login and grant access. Two-factor authentication is only available for server applications.
- Go to the
Administration tab and select
General settings>
Corporation >
Login.
- Go to Two-factor authentication and select the access (WebApp, Mobile, Full access) for which a second factor should be required.
- Set exceptions:
- for certain
User groups
Example: Administrator - for certain IP addresses
Example: own intrant IP address ("192.100.168,*;!192.100.168.254": excluding all from the subnet (intranet) 192.100.168.0 to .255)
- for certain
- Select an
Email sending account and a
Text template of the "Text block" type for the code, or store a formula for the SMS text. Use the "Get 2FA Code" function in the template / SMS formula to retrieve that code.
- Go to the
Administration tab and select
Users >
User.
- Select which Method should be used to authenticate the user and, if necessary, enter an Alternative email address or SMS number.
- In the WebApp access for staff, accounts or contact persons, set the transmission path in the service user for all WebApp accesses.
- Go to the