User Security Profiles

The tasks on this page are completed on the Security Profile page. For more information on eSchoolPlus security, refer to eSchoolPlus Security Overview.

For information on granting a user access to log in as another user, refer to eSchoolPlus Impersonation Access Procedures.

For information on copying security resources from one profile to another, refer to Copy Security Profiles.

Add user security

Create user profiles for administrative and IT staff who need access to eSchoolPlus pages.

Note: You do not need to create user profiles or grant security for course and homeroom teachers who use Teacher Access Center unless the teachers also need to use eSchoolPlus.

Add user's security profile

1. Add the user's account to your network security.
2. From the Administration menu, choose the Security submenu, choose Users, and then select Security Profile.
3. Click Add, then select Add User.
4. In the Profile panel, enter the user's ID, Name, and buildings.
   Note that the ID must match the username of the Active Directory account exactly. If your district is hosted and all usernames include a three-character code identifying the district, do not include the three-character code in the ID field.
5. Add resources to the user by assigning roles and/or adding resources. Refer to the following procedures for details.
6. Click Save.

Create a Teacher Account security profile

Teacher account profiles enable TAC users to access eSchoolPlus student pages. The resources available for selection are those that are either particular to student-specific Registration pages, or assigned to one or more Student type district-defined pages. If a standard resource from another application area is assigned to a Student district-defined page, including that in a teacher security profile will only grant them access to that district-defined page, and not the core page it is otherwise used for. (For example, if MED-MAINT-IMMUN is assigned to a Student district-defined page, it will grant the user access to that district-defined page, but not the Medical Immunizations page for that student.)
For more information, refer to Enable eSchoolPlus Access from Teacher Access Center.

1. From the Administration menu, choose the Security submenu, choose Users, and then select Security Profile.
2. Click Add at the top right of the page, and then select Add User.
3. On the Profile panel, select the Teacher Account checkbox, and complete the panel's required fields.
4. On the Resources panel, click Add to display the Select a Resource pop-up window.
5. If necessary, limit the available selections by completing fields in the Criteria section, and then click Load.
6. Click the Expand icon to display the resources within a package or subpackage.
7. Select each resource for the profile. Only individual resources can be selected for Teacher Account security profiles; selections cannot be made at the package or subpackage level.
   Read - to grant the user read access.
   Read/Write - to grant the user read/write access.
   Caution: The REG MAINT DEMOGRAPH resource must be granted. If the profile does not have this resource selected, users with this profile will not be able to access eSchoolPlus pages from the TAC eSchoolPlus menu.
8. Click OK.
9. Click Save.
10. Click OK on the Teacher Account Warning pop-up window.

Assign roles to user

1. From the Administration menu, choose the Security submenu, choose Users, and then select Security Profile.
2. Display the user's security profile by searching for the user and then clicking the Login ID link.
3. Select the Role IDs on the Roles panel.
4. If needed, override the building access for the resource:
   • For role resources that are set to use the user's default building, change the building access if the user should be able to access a building other than the user's default building. In the Override - Default Building field, select the building. This field is inaccessible if none of the role's resources uses the User's Default Building option.
   • For role resources that are set to use the user's default building list, change the building access if the user should be able to access buildings other than the user's default building list. In the Override - Default Building List field, select the buildings. This field is inaccessible if none of the role's resources uses the User's Default Building List option.
5. Click Save.

Add security resources

1. From the Administration menu, choose the Security submenu, choose Users, and then select Security Profile.
2. Display the user's security profile by searching for the user and then clicking the Login ID link.
3. Add resources by clicking Add on the top right of the Resources panel.
4. On the Select a Resource window, as needed, click the Expand icon to display the resources within a package or subpackage.
5. To grant the user access for resources, select the access in the Resources section. If you grant access at the package or subpackage level, the user will be granted the same access for all resources included in the selected level.
   Select the appropriate option:
   Not Selected - to not add the resource to the user.
   Read - to default the user to Read access for the user's default building list.
   Read/Write - to default the user to Read/Write access for the user's default building list.
   No Default - to not default the user's Read or Read/Write access. Select this option if you want to set the user's building list for the resource after you add resources to the user.
6. Click OK.
7. To edit the access level for a resource, click Edit on its row. Select the access level and buildings. Then, click OK.
   Note: Make sure to assign access level to any resources for which you selected No Default in Step 5. If Read or Read/Write access is not selected for a resource, it will not be saved for the user when you save.
8. Click Save.

Change user security access

Note: When changing or removing resources, review the resources that are granted as part of a security role, and look at the resources granted to the user. If the resource you are trying to change is granted by a role, you will either need to change the role's resources or remove the role from the user. Changes to a role will affect all users who are assigned to the role.

Change user's default buildings

When you change a user's default building, all resources that use Default Building will be updated to the newly selected building. When you change a user's default building list, all resources that use the Default Building List will be updated to the newly-selected building list.

1. From the Administration menu, choose the Security submenu, choose Users, and then select Security Profile.
2. Display the user's security profile by searching for the user and then clicking the Login ID link.
3. Update the appropriate fields:
   • In the Default Building field, select the building.
   • In the Default Building List field, select the buildings.
4. Click Save.

Change user's resource access

This procedure describes how to change the access for resources granted directly to a user. If you need to change access that is granted by a role, you may need to remove the role from the user.

1. Select Administration > Security > Users > Security Profile.
2. Display the user's security profile by searching for the user and then clicking the Login ID link.
3. On the Resources panel, review the user's resources.
4. Click Edit for the resource.
5. Select the access level and buildings. Then, click OK.
6. Click Save.

Remove user's access for resource

This procedure describes how to remove access for resources granted directly to a user. If you need to change access that is granted by a role, you may need to remove the role from the user.

1. From the Administration menu, choose the Security submenu, choose Users, and then select Security Profile.
2. Display the user's security profile by searching for the user and then clicking the Login ID link.
3. On the Resources panel, review the user's resources.
4. Select the Delete checkbox for each record to delete.
5. Click Save.

Override user's default buildings for role

1. From the Administration menu, choose the Security submenu, choose Users, and then select Security Profile.
2. Display the user's security profile by searching for the user and then clicking the Login ID link.
3. On the Roles panel, review the user's roles.
4. If needed, override the building access for the resource:
   • For role resources set to use the user's Default Building, change the building access if the user should be able to access a building other than the user's default building. In the Override - Default Building field, select the building. This field is inaccessible if none of the role's resources uses the User's Default Building option.
   • For role resources set to use the user's Default Building List, change the building access if the user should be able to access buildings other than the user's default building list. In the Override - Default Building List field, select the buildings. This field is inaccessible if none of the role's resources uses the User's Default Building List option.
5. Click Save.

Remove roles from user

1. From the Administration menu, choose the Security submenu, choose Users, and then select Security Profile.
2. Display the user's security profile by searching for the user and then clicking the Login ID link.
3. On the Roles panel, review the user's roles.
4. Select the Delete checkbox for each record to delete.
5. Click Save.

Delete user

When you delete a user, the user's notification subscriptions are also deleted.

Caution

Scheduled tasks are not deleted when you delete a user. If the user's scheduled tasks should be deleted, impersonate the user and delete the tasks before you delete the user.

1. From the Administration menu, choose the Security submenu, choose Users, and then select Security Profile.
2. Display the user's security profile by searching for the user and then clicking the Login ID link.
3. Click Delete.
4. Click Yes.

Fields

User Profiles Fields

The following fields display for a user profile.

Profile Panel

Roles Panel

This panel allows you to assign roles to the user and view the roles that have already been assigned. The panel's information includes default building information and any override building assignments specified by a role. For more information on managing roles, refer to Role Security Profiles.

To add a role, select the Role ID in the blank row at the bottom of the list.

Field	Description
Role ID	ID of the role as specified in the Role Profile.
Description	Description of the role specified in the Role Profile.
Override Default Building	If any resource in the role has the Default Building option selected, you can select to override the default with the building selected in this field. The user will then be granted the resources and access level specified in the role for the selected building. If the role does not have any resources defined for using the Default Building option, this field is inaccessible.
Override Default Building List	If any resource in the role has the Default Building List option selected, you can select to override the user's default building list with the buildings selected in this field. The user will then be granted the resources and access level specified in the role for the selected buildings. If the role does not have any resources defined to use the Default Building List option, this field is inaccessible. Select codes from the field's drop-down list, or click the asterisk icon to select all codes, then remove any that do not apply.
(Delete)	To delete a record, select the row's Delete checkbox, then click Save.

Resources Panel

This panel displays the resource and description of each security resource assigned to the user, including resources granted directly to the user and resources granted by roles. Multiple sections display if both types of resources are assigned. The User Specific section shows the resource granted directly to the user. If roles are assigned, a separate section displays for each role. Role resource information is defined in Role Profile records and therefore is display-only in this section.

To add resources, click Add at the top right of the Resources panel.

For each resource, you can select whether the user has Read or Read/Write access and determine the buildings where the user has access.

Field	Description
Resource	Code for the resource. Resources have three levels: Package – Subpackage – Feature. Package is a software application within eSchoolPlus, such as Registration. Subpackage represents a group of options within a package. Feature is a level of security applies to a specific option or field, such as the Personal option or Meal Status field. ALL may display as the Subpackage and Feature for a resource. If ALL-ALL displays after the package, then the user has access to all features within the package. For example, REG-ALL-ALL would grant the user access to all features in Registration. If ALL displays after a subpackage, then the user can access all features within the subpackage group under the associated package, such as the Maintenance options in Registration.
Description	Description of the resource.
Building Access Read	Identifies the buildings where the user has Read access for this resource.
Building Access Read/Write	Identifies the buildings where the user has Read/Write access for this resource. Read/Write security grants the user the ability to add, change, and delete information related to the resource. Select codes from the field's drop-down list, or click the asterisk icon to select all codes, then remove any that do not apply.
Edit	Click Edit to change building-level access for the resource. This option is not available for resources granted by a role.
(Delete)	To delete a record, select the row's Delete checkbox, then click Save.

Edit Resources Drawer (Unlabeled)

When you click Edit for a resource, a drawer slides down in the Resources Panel. Use this drawer to change the user's access for a resource. After entering settings in the drawer's Access section, click OK to close the drawer, then click Save.

Role Profile Fields

The following fields display for a role profile.

Profile Panel

Resources Panel

This panel displays the resource and description of each security resource assigned to the role. To add resources, click Add at the top right of the Resources panel.

For each resource, you can select whether users assigned to this role have Read or Read/Write access and determine the buildings where the users have access.

Field	Description
Resource	Code for the resource. Resources have three levels: Package – Subpackage – Feature. Package is a software application within eSchoolPlus, such as Registration. Subpackage represents a group of options within a package. Feature is a level of security applies to a specific option or field, such as the Demographic option or access to the Meal Status field. ALL may display as the Subpackage and Feature for a resource. If ALL-ALL displays after the package, then the user has access to all features within the package. For example, REG-ALL-ALL would grant the user access to all features in Registration. If ALL displays after a subpackage, then the user can access the features within the subpackage group under the associated package, such as the Maintenance options in Registration.
Description	Description of the resource.
Building Access Read	Identifies the buildings where the role grants Read access for this resource.
Building Access Read/Write	Identifies the buildings where the role grants Read/Write access for this resource. Read/Write security grants the user the ability to add, change, and delete information related to the resource. Select codes from the field's drop-down list, or click the asterisk icon to select all codes, then remove any that do not apply.
Edit	Click Edit to change building-level access for the resource. This option is not available for resources granted by a role. For additional information, refer to the Edit Resources Drawer section below.
(Delete)	To delete a record, select the row's Delete checkbox, then click Save.

Edit Resources Drawer (Unlabeled)

When you click Edit for a resource, a drawer slides down in the Resources Panel. Use this drawer to change the role's access for a resource. After entering settings in the drawer's Access section, click OK to close the drawer, then click Save.

Users Panel

This panel displays the users who are assigned to the role. To add a user, select the user's ID in the blank row at the bottom of the list.

Field	Description
User ID	Select the user who should be granted access to the resources defined in this role. For existing users, the field displays both the user's ID and name. The name is a link to the user's profile. Save your changes before clicking the link.
Default Building - Current	Displays the default building selected in the user's profile.
Default Building - Override	Select a building if you want to grant the user access to a building that is not the user's default building on any resource for which the role has the Default Building option selected. If you enter an override, then the user will be granted access to that building for any resources that are set to User's Default Building. If the role does not have any resources set to the Default Building option, this field is inaccessible.
Default Building List - Current	Displays the default building list selected in the user's profile.
Default Building List - Override	Select a building list if you want to grant the user access to a building list that is not the user's default building list on any resource for which the role has the User's Default Building List option selected. If you enter an override, then the user will be granted access to those buildings for any resources that are set to User's Default Building List. If the role does not have any resources set to the User's Default Building List option, this field is inaccessible. Select codes from the field's drop-down list, or click the asterisk icon to select all codes, then remove any that do not apply.
Roles	Click the Help icon to display a tooltip showing the other roles that are assigned to a user.
(Delete)	To delete a record, select the row's Delete checkbox, then click Save.