Setup Actions and Error Descriptions

Maintain action sets (create, delete, add to, remove from)

• Create action sets

• Delete action sets

• Add actions to action sets

• Remove actions from action sets

Ability to maintain configuration properties, prepare and deploy Extension API extensions, retrieve the STEP system status, and restart the STEP system via the remote system administration REST API. This functionality is only allowed for Stibo Systems SaaS environments.

Important: The 'System Administration' privilege should only be given to trusted system administration users. 

View Administration

Ability to access the System Administration pages from the Start Page.

View System Setup Logs

Ability to view the System Setup Log and Workspace Log (available from View menu Logs option in the workbench) and the Log tab (available in the editor on most System Setup objects). Without this privilege, the System Setup Log option in the View menu Logs option menu is grayed out, and the Log tab is not visible on System Setup objects.

Modify dimension dependency of all assets

Set dimension dependency of asset object types:

• Add dimension to asset

• Remove dimension from asset

Push Asset

Ability to push assets from within the Tree.

Add attribute to attribute group

Ability to add to and create attributes in attribute groups.

Note: The 'Create product attribute' action must also be added before users can add attributes to attribute groups.

Create attribute group

Ability to create attribute groups.

Note: The action 'Modify name/description of attribute group (also translate)' must also be added before users can create attribute groups.

Create product attribute

Ability to create:

• attributes, the actions 'Add attribute to attribute group' and 'Modify definition of product attribute (domain and default unit)' must also be added.

• LOV attributes, the actions 'Create domain' and 'Modify definition of domain (validator, etc.)' must also be added.

Delete attribute group

Ability to delete attribute groups.

Delete product attribute

Ability to delete:

• attributes, 'Delete attribute' global privilege must be added.

• LOV attributes, the action 'Delete domain' must also be added.

Maintain validation templates

Create a validation template (validation base type) for attributes and LOVs.

Remove attribute from attribute group

Ability to remove (unlink) attributes that are linked to other attribute groups as well as add attributes to a group.

Merge product attributes

Ability to merge attributes.

Modify definition of product attribute (domain and default unit)

• Set and edit the validation base type of attributes

• Edit the type of attributes (specification and description)

• Modify filters on LOV attributes

Note: The 'Create product attribute' action must also be added to set validation of attributes.

Modify dimension dependency of product attribute

Edit the dimension dependencies of attributes.

Modify metadata for product attribute (property value) (also translate)

• Edit values of description attributes linked to attributes

• Translate description attribute values linked to attributes

Modify name/description of attribute group (also translate)

• Edit the name of attribute groups

• Translate the name and values in attribute groups

Modify name/description of product attribute (also translate)

• Edit names of attributes

• Translate name and values in attributes

Note: The 'Modify name/description of domain (also translate)' action must also be added to create LOV attributes.

Modify valid (node) types for product attribute

Set the object types for which the attributes should be valid.

View attribute

Ability to view attributes.

View attribute group

Ability to view attribute groups.

The 'View attribute group' action must be added for users to maintain attributes.

View metadata for attribute (property value)

View values of description attributes linked to an attribute.

Delete background-processes

Delete queued, started, and ended background processes.

View Background Processes of Other Users

In workbench, while displaying other users' processes via the show all button () , the user can view and download files from background processes started by any other user.

In Web UI, the user can view and download files from the background processes they started.

For users without this privilege:

• in the workbench, the show all button () on the BG Processes tab is disabled. (For details, refer to the 'BG Processes Displayed' section in the BG Processes Tab topic of the Getting Started documentation.)

• in the workbench and Web UI, processes started by other users are not visible

• no IIEPs, OIEPs, and event queues are visible (Gateway integration endpoints are visible since they do not have associated background processes.)

Maintain change package

Grants all privileges for change packages, including creation of a change package, deletion, Start Impact Analysis, Updates, and Seal Package.

Maintain dimensions and contexts

Create and delete dimensions, dimension points, and contexts.

Maintain unique keys

• Create new keys

• Edit existing keys

• Activate, deactivate, check, and delete keys

Maintain Value Generator

• Create new value generator

• Edit value generator

• Run value generator

Modify unique key value

Update locked attribute values used in unique keys.

Maintain Deduplication Configurations

Create, maintain, and delete 'Match Codes and Matching Algorithms' and maintain deduplication configuration options.

Maintain Event Processor

• Set up or delete an Event Processor

• Enable an Event Processor

• Disable an Event Processor

• Purge events

• Publish events

Maintain event queues

Add, modify, or delete event queues. Removal of this action hides the Event Queues root in System Setup.

Maintain Derived Event Types

Configure and maintain derived events. If Maintain Derived Event Types is disabled, there is no option to add one.

Maintain Integration Endpoint

Create, delete, enable, disable, and invoke integration endpoints. Users must also have the 'View Integration Endpoint' privilege to maintain an integration endpoint.

Maintain Link Type

• Create and delete reference types and product to classification link types

• Modify reference types and product to classification link types

• Apply description attributes to link types

• Set dimension dependencies of link types

Create domain

Ability to create LOVs.

Note: The actions 'Modify name/description of domain (also translate)' and 'Modify definition of domain (validator, etc.)' must also be included to create LOVs.

Create value in hard domain

Create values in LOVs where users are not allowed to add values ('hard' LOVs).

Create value in medium domain

Create values in LOVs where users are allowed to add values ('medium' LOVs).

Delete domain

Ability to delete LOVs.

Delete value in hard/medium domain

Delete values in both types of LOVs:

• Where users are not allowed to add values ('hard' LOVs)

• Where users are allowed to add values ('medium' LOVs)

Maintain domain groups

Create and delete LOV groups.

Merge entire domain

Ability to merge LOVs.

Merge value in hard/medium domain

Merge values in both types of LOVs:

• Where users are not allowed to add values ('hard' LOVs)

• Where users are allowed to add values ('medium' LOVs)

Modify definition of domain (validator, etc.)

Set and edit the validation base type of LOVs.

Note: The 'Create domain' action must also be added to set validation of LOVs.

Modify dimension dependency of domain

Edit the dimension dependencies of LOVs.

Modify name/description of domain (also translate)

• Edit name of LOVs

• Translate names and values in LOVs

Modify value in hard/medium domain (also translate)

Edit values in both types of LOVs (including the privilege to translate):

• Where users are not allowed to add values ('hard' LOVs)

• Where users are allowed to add values ('medium' LOVs)

View domain

Ability to view LOVs.

Note: The 'View domain' action must be added to maintain LOVs.

View metadata for domain (property value)

View values of description attributes linked to an LOV.

Maintain Data Container Type

Create a data container type.

Maintain Setup Entity

Create a configuration labeled as a 'Setup Entity'. Examples: Completeness Metric, Elasticsearch Configuration, Asset Importer Configuration Type. Refer to the 'Setup Entity' entry in the STEP Terminology topic of the Getting Started documentation.

Maintain setup group

Create a Setup Group Root from the Maintain menu, Insert option, Setup Group Root... option.

Maintain system setups

Ability to maintain options under the System Setting tab located on the 'Users & Groups' node in System Setup.

Maintain type hierarchy (node types)

• Create object types

• Delete object types

• 'Save export as template' privilege in Web UI

To link attributes to object types, these actions are also needed:

• View attribute

• View attribute group

• Modify valid (node) types for product attribute

View Data Container Type

View a data container type.

View Setup Entity

View an Entity Root and object type. Example: Completeness Metric.

Maintain promotional pricing

Deprecated

Empty recycle bin

Ability to delete contents of the Recycle Bin. In case the Recycle Bin contains objects that exist in more than one workspace, users must also have the 'Force Delete and Purge' action enabled to remove those objects.

Force Delete and Purge

Ability to force purge objects that exist in more than one workspace and objects with events triggered. The action enables the 'Force Purge' button in the Empty Recycle Bin background process and the 'Force Delete and Purge' action in the Maintain menu.

Purge revisions

Ability to delete obsolete revisions:

• Single revisions

• Specified range of revisions, global purging

Run Reports

Allows users to run reports (including starting a reports background process) from File > Reports in the workbench. Without this privilege, the Reports option in the workbench File menu is grayed out.

Modify table settings

Ability to maintain table settings on table types, row types, column types, rules / line styles, and colors.

View table types

Allows users to view tables and table types.

Maintain Tags

• Maintain style tags, special characters, character tags, footnotes, and hyperlinks

• Maintain tag groups

Use tag

Use tags in the rich text editor, table editor, and in table transformations.

To restrict certain users to using certain tags, you must create a tag group that contains these tags and link this tag group into an attribute group. In the User Group editor, the attribute group is applied together with the action set that contains the 'Use tag' action. Users belonging to the user group will only be allowed to use the tags in the tag group linked into the attribute group.

Maintain units

• Create unit groups, units, and unit conversion rules

• Edit unit groups, units, and unit conversion rules

• Delete unit groups, units, and unit conversion rules

View unit

Ability to view units. This is used when linking units to attributes.

Note: The 'View unit' action must be included to use the 'Maintain units' action

Maintain privilege rules (create, delete, modify)

• Create privilege rules for user groups

• Edit privilege rules for user groups

• Delete privilege rules for user groups

Note: To maintain privilege rules, the action 'Maintain action sets (create, delete, add to, and remove from)' is also needed.

Maintain users and groups

• Create users and user groups

• Duplicate and copy users and user groups

• Delete users and user groups

Maintain user password

Ability to change and reset user passwords by displaying the Change User Password link on a User Editor in workbench. Refer to the Changing a User Password topic.

Share user settings

Limits whether or not a user can share their user configured views in Web UI.

Access Web UI

Ability to access Web UIs on the system. Access to specific Web UI instances can be granted if a Setup Group is defined in the user (group) Setup Privileges, otherwise, this action allows access to ALL Web UI instances on the server.

Maintain Impersonation

Ability to impersonate another user for Web UI support purposes

Update Web UI configuration

Access to modify and configure any Web UI

View context

In addition to granting access to the workbench, 'View context' also grants the ability to access the Web UI.

Access Workbench

Ability to access all the workbench links on the Start Page.

Disable STEP Workflow Auto-initiation in Imports

Ability to disable auto-initiation when importing data

Initiate Item in STEP Workflow

Ability to start workflows via the Object context menu and via bulk update. It does not have any impact on auto-initiation. The action can be applied to a setup group and will then only take effect for workflows in that setup group.

Maintain STEP Workflow

Ability to create, delete, cut, copy, duplicate, export, and edit workflows. The action can be applied to a setup group and will then only take effect for workflows in that setup group.

Users must also have the 'View setup group' privilege to view and maintain workflows.

Edit, create, and delete workflow profiles. The action can be applied to a setup group and will then only take effect for workflow profiles in that setup group.

Users must also have the 'View STEP Workflow Profile' privilege to access workflow profiles.

Remove Item from STEP Workflow

Ability to remove objects from workflows via the Object context menu or the workflow context menu. The action can be applied to a setup group and will then only take effect for workflows in that setup group.

STEP Workflow Administrator

• View other users' tasks

• Complete / submit tasks not assigned to the current user

• Reassign tasks

• Edit task deadlines

The action can be applied to a setup group and will then only take effect for workflows in that setup group.

View STEP Workflow Profile

View workflow profiles. If a user does not have this action, the STEP Workflow navigator tab sub tab 'Profile' will not be displayed. The action can be applied to a setup group and will then only take effect for workflow profiles in that setup group.

View and use STEP Workflow

View and use workflows. The action can be applied to a setup group and will then only take effect for Workflows in that setup group.

It is required to also have the 'View setup group' privilege to view workflows.

View setup group

Necessary for users to view workflow tasks

View STEP Workflow Advanced tab

This action grants the privilege to view the 'Advanced' STEP Workflow navigator tab sub tab.

It is required to also have the 'View setup group' privilege to view workflows.

View tasks assigned to other users in my group(s)

Allows users to view all assigned tasks in all groups in which they are a member.

This privilege differs from what is currently provided by the 'STEP Workflow Administrator' setup action in that the 'STEP Workflow Administrator' setup action allows users to view all tasks across all groups.

Maintain workspaces

Create and delete workspaces