Data Entities Security Overview

This topic gives a summary of the security settings for AgilePoint NX Data Entities.

Portal Settings for Data Entities

These are the AgilePoint NX Portal settings for Data Entities.

Video: Entity Permissions

Prerequisites

AgilePoint NX OnDemand (public cloud), or AgilePoint NX Private Cloud or AgilePoint NX OnPremises v7.0 or higher.

Good to Know

By default, only the Tenant Administrator can access the Data Entities Permissions screen to assign permissions to access the Data Entities component.

How to Start

Click Settings.
Click App Builder > Data Entities.

Settings

Settings	Definition	More Information
Allow Entity Deletion	Shows the delete button to delete a custom entity in AgilePoint NX Data Entities.	Data Entities Settings screen > Settings tab.

Permission Groups for All Entities

Specifies the permission group for all AgilePoint NX Data Entities.

How to Start

Click Manage.
In the Manage Center, click App Management > Permissions.
On the Permissions screen, click Data Entities Permissions.

Settings

Permission Group	Definition	Manage
Global Data Entities Permission Managers	Global Data Entities Permission Managers is a permission group for users or groups who have full access rights for the Data Entities component. Global Data Entities Permission Managers can manage other permission groups for the Data Entities component and for all specific entities. Limitations: At least one user must belong to the Global Data Entities Permissions Managers security group to access the Data Entities component. Global Data Entities Permision Managers can add users to the Entity Designers permission group in Manage Center to access the Data Entities component, or to any entity-level permission group to access a specific entity. Permissions: This permission group has these permissions: Manage permission groups for the Data Entities component and all specific entities These permissions from Entity Designers, configured in Manage Center: Create custom entities Add picklists, picklist items, fields, and relationships in standard (out of the box) entities Change custom entities Delete custom entities Save entity Publish entity Export entity Import entity Change entity properties Create fields Change fields Delete fields Create relationships Change relationships Delete relationships Change picklists Delete picklists Create picklist items Change picklist items Delete picklist items Export picklists Import picklists These permissions from Delete Records: Delete records These permissions from Create Records: Create (add) records These permissions from Edit Records: Edit (change) records These permissions from Read Records: Read (view) records	Global Data Entities Permission Managers screen.
Entity Designers (Manage Center)	Entity Designers configured in Manage Center is a permission group for users or groups who have access rights to create, change, or delete entities or related elements, such as fields, picklists, and relationships, in Data Entities. Limitations: At least one user must belong to the Global Data Entities Permissions Managers security group to access the Data Entities component. Global Data Entities Permision Managers can add users to the Entity Designers permission group in Manage Center to access the Data Entities component, or to any entity-level permission group to access a specific entity. The specific access rights for Entity Designers depends upon whether the permission group is configured in Data Entities or Manage Center. Permissions: If Entity Designers are configured in Manage Center, they have these access rights for the Data Entities component. These permissions are overridden if permission groups are configured for a specific entity: Manage permission groups Create custom entities Add picklists, picklist items, fields, and relationships in standard (out of the box) entities Change custom entities Delete custom entities Save entity Publish entity Export entity Import entity Change entity properties Create fields Change fields Delete fields Create relationships Change relationships Delete relationships Change picklists Delete picklists Create picklist items Change picklist items Delete picklist items Export picklists Import picklists These permissions from Delete Records: Delete records These permissions from Create Records: Create (add) records These permissions from Edit Records: Edit (change) records These permissions from Read Records: Read (view) records	Entity Designers screen.

Permission Group

Definition

Manage

Global Data Entities Permission Managers

Global Data Entities Permission Managers is a permission group for users or groups who have full access rights for the Data Entities component. Global Data Entities Permission Managers can manage other permission groups for the Data Entities component and for all specific entities.

Limitations:

At least one user must belong to the Global Data Entities Permissions Managers security group to access the Data Entities component.
Global Data Entities Permision Managers can add users to the Entity Designers permission group in Manage Center to access the Data Entities component, or to any entity-level permission group to access a specific entity.

Permissions:

This permission group has these permissions:

Manage permission groups for the Data Entities component and all specific entities
These permissions from Entity Designers, configured in Manage Center:
- Create custom entities
- Add picklists, picklist items, fields, and relationships in standard (out of the box) entities
- Change custom entities
- Delete custom entities
- Save entity
- Publish entity
- Export entity
- Import entity
- Change entity properties
- Create fields
- Change fields
- Delete fields
- Create relationships
- Change relationships
- Delete relationships
- Change picklists
- Delete picklists
- Create picklist items
- Change picklist items
- Delete picklist items
- Export picklists
- Import picklists
These permissions from Delete Records:
- Delete records
These permissions from Create Records:
- Create (add) records
These permissions from Edit Records:
- Edit (change) records
These permissions from Read Records:
- Read (view) records

Global Data Entities Permission Managers screen.

Entity Designers

(Manage Center)

Entity Designers configured in Manage Center is a permission group for users or groups who have access rights to create, change, or delete entities or related elements, such as fields, picklists, and relationships, in Data Entities.

Limitations:

At least one user must belong to the Global Data Entities Permissions Managers security group to access the Data Entities component.
Global Data Entities Permision Managers can add users to the Entity Designers permission group in Manage Center to access the Data Entities component, or to any entity-level permission group to access a specific entity.
The specific access rights for Entity Designers depends upon whether the permission group is configured in Data Entities or Manage Center.

Permissions:

If Entity Designers are configured in Manage Center, they have these access rights for the Data Entities component. These permissions are overridden if permission groups are configured for a specific entity:

Manage permission groups
Create custom entities
Add picklists, picklist items, fields, and relationships in standard (out of the box) entities
Change custom entities
Delete custom entities
Save entity
Publish entity
Export entity
Import entity
Change entity properties
Create fields
Change fields
Delete fields
Create relationships
Change relationships
Delete relationships
Change picklists
Delete picklists
Create picklist items
Change picklist items
Delete picklist items
Export picklists
Import picklists
These permissions from Delete Records:
- Delete records
These permissions from Create Records:
- Create (add) records
These permissions from Edit Records:
- Edit (change) records
These permissions from Read Records:
- Read (view) records

Entity Designers screen.

Permission Groups for Specific Entities

Specifies the permission groups for a specific entity. The Entity Owners and entity Entity Designers have permissions only for the specified entity.

Good to Know

When you create an entity, permission groups are enabled for the entity by default.

How to Start

Click App Builder.
On the App Explorer screen, click Data Entities.
On the Data Entities Home screen, click Entities.
On the Entities screen, click an entity.
Click the Permissions tab.

Settings

Permission Group	Definition	Manage
Entity Owners	Entity Owners is a permission group for users and groups who have access rights for a specific entity in Data Entities. If an entity has one or more Entity Owners, this permission group overrides the Entity Designers configured in Manage Center. Permissions: This permission group has these permissions for a specific entity: Manage permission groups Delete custom entities These permissions from Entity Designers, configured in Data Entities: Add picklists, picklist items, fields, and relationships in standard (out of the box) entities Change custom entities Save entity Publish entity Export entity Import entity Change entity properties Create fields Change fields Delete fields Create relationships Change relationships Delete relationships Change picklists Delete picklists Create picklist items Change picklist items Delete picklist items Export picklists Import picklists These permissions from Delete Records: Delete records These permissions from Create Records: Create (add) records These permissions from Edit Records: Edit (change) records These permissions from Read Records: Read (view) records	Manage Permission Group screen.
Entity Designers (Data Entities)	Function: Entity Designers configured in Data Entities is a permission group for users or groups who have access rights to change specific entities. Limitations: The specific access rights for Entity Designers depends upon whether the permission group is configured in Data Entities or Manage Center. Permissions: If Entity Designers are configured for a specific entity in Data Entities, they have these permissions: Add picklists, picklist items, fields, and relationships in standard (out of the box) entities Change custom entities Save entity Publish entity Export entity Import entity Change entity properties Create fields Change fields Delete fields Create relationships Change relationships Delete relationships Create picklists Change picklists Delete picklists Create picklist items Change picklist items Delete picklist items Export picklists Import picklists These permissions from Delete Records: Delete records These permissions from Create Records: Create (add) records These permissions from Edit Records: Edit (change) records These permissions from Read Records: Read (view) records	Manage Permission Group screen.
Delete Records	Delete Records is a permission group for users and groups who have access rights to delete, create, change, and read records for a specific entity in Data Entities. Permissions: This permission group has these permissions for a specific entity: Delete records These permissions from Create Records: Create (add) records These permissions from Edit Records: Edit (change) records These permissions from Read Records: Read (view) records	Manage Permission Group screen.
Create Records	Create Records is a permission group for users and groups who have access rights to create, change, and read records for a specific entity in Data Entities. Permissions: This permission group has these permissions for a specific entity: Create (add) records These permissions from Edit Records: Edit (change) records These permissions from Read Records: Read (view) records	Manage Permission Group screen.
Edit Records	Edit Records is a permission group for users and groups who have access rights to change and read records for a specific entity in Data Entities. Permissions: This permission group has these permissions for a specific entity: Edit (change) records These permissions from Read Records: Read (view) records	Manage Permission Group screen.
Read Records	Read Records is a permission group for users and groups who have access rights to read records for a specific entity in Data Entities. Permissions: This permission group has these permissions for a specific entity: Read (view) records	Read Records > Manage Permission Group screen.
Analytics	Analytics is a permission group associated with roles to use an entity in reports and dashboards in Analytics Center. Analytics is different from other permission groups: Even though the Analytics permission group is managed in the Data Entities component for specific entities, it allows data from the entity to be used in Analytics Center. Most permission groups are associated with users and groups. The Analytics permission group is associated with roles. Permissions: This permission group has these permissions for a specific entity: Use the entity in reports and dashboards in Analytics Center.	Manage Permission Group (Analytics) screen

Entity Statuses

These are the entity statuses for Data Entities. The entity status specifies whether the entity can be used as a data source for apps.

Good to Know

Only the Entity Owners or Global Data Entities Permission Managers can change the status of an entity from draft to published.
Users who have permissions for entity records, such as Read Record or Edit Record, have the same permissions for draft and published entities.

How to Start

Click App Builder.
On the App Explorer screen, click Data Entities.
On the Data Entities Home screen, click Entities.
On the Entities screen, click Add Entity.

Settings

Status	Definition	More Information
Published	The entity can be used to store the data in an app that is created in App Builder.	Entity screen > Details tab.
Draft	An entity in draft status can not be used as a data source for apps.	Entity screen > Details tab.