"Badges? We don't need no stinkin' badges!" Utilize the security feature within SFA!

6 minute read time.

"Badges? We don't need no stinkin' badges!" is a well-known and widely quoted line from cinematic history.   With Sage Fixed Assets user security you can limit who has access to the data and which functions a user has access to. 

Sage Fixed Assets offers users a variety of ways to input and manipulate asset data, however there are times when access to that data will need to be restricted. In Sage Fixed Assets the Password Security features allows users to setup and protect their data in a simple and intuitive fashion. With Password Security, a variety of security profiles and scenarios can be deployed giving the users the flexibility of letting Sage Fixed Assets adapt to their security plan instead of the other way around.

There are two levels of security in Sage Fixed Assets which are System Security and Company Security. System security controls access to features outside of the company such as backing up companies, creating new companies, copying companies etc. Company Security controls access to features that can be accessed within a company such as running reports, adding assets, changing the company name etc. By splitting the levels of security, Sage Fixed Asset insures that what users can do inside the company has no bearing on what they can do once that specific company is closed. For instance if a security profile is required that a user has read-only access to a specific company but can have the capability of backing up that company, then a scenario like that can be easily setup with Password Security.

Another feature that Password Security has is the capability of using Windows Authentication or Application Authentication for controlling user logins. Windows Authentication allows user’s to be loaded from Active Directory and assigned profiles to that Windows user name. If Windows Authentication is enabled then when Sage Fixed Assets is launched there is no prompt for a user name and password, instead Password Security will check to see which user is logged into Windows and automatically assign the proper privileges for that user. This makes maintaining Password Security much simpler since there are no passwords to memorize, password strength and length are controlled by active directory and when the user renews the password for Windows it would not affect the login for Sage Fixed Assets. Application Authentication allows manual entry of both a user name and password, so if Active Directory is not a viable option then Password Security is flexible enough to create separate user names and passwords. With Application Authentication enabled then anytime a user launches Sage Fixed Assets they are greeted with a logon screen for a user name and password, this is useful for security scenarios where Windows logon and application security are kept separate.

Sage Fixed Assets also has features that make auditing security a simple process. The Utility Reporting section has various security reports that detail the current security setup in a clear and concise way. The security utility reports in conjunction with the capability of reporting on asset history, Sage Fixed Assets can either give a broad overview of the current security deployed or quickly narrow down any security issues that user’s may have.    

 

To setup password security, the following steps can be used within Sage Fixed Assets:

STEP 1: To enable Security:

Warning: In order to not inconvenience current users, steps 2-5 can be completed before turning on security (step 1).

  1. Go to: File, Password Security, Supervisor:      There will be a prompt for the Supervisor Password (If Password Security      is not currently enabled or the Supervisor account has not been setup, the      prompt will be to create the supervisor password.)
        
         NOTE: The Supervisor account has full control over the program and      all privileges, and is the only user that can change Password Security      information.
        
         WARNING: DO NOT LOSE THE SUPERVISOR PASSWORD. If the Supervisor      password is lost, contact Customer Support for information on getting the      Supervisor password reset.
  2. In the Supervisor dialog:
    1. Check System Security Enabled to turn       on system level security
    2. Under Company Security, in the Name box,       select the desired company, then check Company Security Enabled to       turn on security for that company.
           
            NOTE: Each company must be selected individually to enable company       level security
           
            NOTE: For companies in a different database; click OK to close the Supervisor window,       then go to File, Open Company to open a company in a       different database, then access Supervisor window to enable security on       those companies.
  1. Under Security mode: Select the radio button next to Windows      Authentication (Recommended): To use the windows authenticated

STEP 2: System Profiles are defined: (Define the access Profile an assigned user will receive.)

  1. Go to: File,      Password Security, Define Profiles, Define System      Profiles:

 

    1. To create a       New profile: Click Add,
    2. Enter a Profile       Name,
    3. Click OK,      
    4. Select the       appropriate access (None, Read, or Edit) for each       function for this Profile,
    5. Click OK to save all changes.

 

NOTE: To edit an existing profile: Select the Profile Name from the drop down box, select the appropriate access (None, Read, or Edit) for each function for this profile, click OK to save all changes.

STEP 3: Company profiles are defined:

  1. Go to: File, Password Security, Define Profiles,      Define Company Profiles:
        
        
    1. To create a       new profile: Click Add,
    2. Enter a Profile Name,
    3. Click OK,
    4. Select the appropriate access (None, Read,       or Edit) for each function for this profile,
    5. Click OK to save all changes.

Warning: Each company which the profile is being defined for must be opened.

NOTE: To edit an existing profile: Selected the Profile Name from the drop down box, select the appropriate access (None, Read, or Edit) for each function for this profile, click OK to save all changes.

STEP 4: Create Users and Assign User Privileges:

Option 1- To Create User Accounts for Windows Authentication (Recommended):

  1. Go to: File, Password Security, Assign User Privileges, and Assign System Privileges.
    1. Click New       User,
    2. Enter a Username,      
    3. Select the       correct Domain for that user,
    4. Click OK.

 

NOTE: Users will not need to log in to Sage Fixed Assets when using Windows Authentication but will receive the right of the Windows Authenticated user of the system.

Option 2- To Create User Accounts for Application Authentication:

  1. Go to: File, Password Security, Assign User Privileges, and Assign System Privileges.
    1. To Create a User: Click New User,
    2. Enter a Username,
    3. Click OK.

NOTE: For Application Authentication, when a user logs in for the first time, the user's password will be same as the username. Users can change their password once the user logs into Sage Fixed Assets by selecting File, Password Security, Change Password

STEP 5: Assign User Privileges:

A. To Assign ystem Privileges:

  1. Go to File,
  2. Select Password Security,
  3. Select Assign User Privileges,
  4. Select Assign System Privileges:
  5. Under the User List: Highlight the desired User, select the desired profile from the Profile Name drop down box, click >> button.

 

B. To Assign Company Privileges,

  1. With the company open: Select File,
  2. Select Password Security,
  3. Select Assign User Privileges,
  4. Select Assign Company Privileges,
  5. Under the User List: Highlight the desired user, select the desired profile from the Profile Name drop down box, click >> button.

For additional information or questions on Password Security, Sage Fixed Assets technical support can be contacted by calling 800-331-8514 or via email at [email protected].