Lesson 7 · Permissions

Four PLM levels, the separate release right, a who-can-do-what matrix and access nodes.

Goal of this lessonTo know who can do what: the four PLM levels, the separate release right and the access nodes that separate documents by department.

PLM permission matrixEmployeeReadonlyViewIntegrationAdmin+ ReleaseOpen a part, Request a ChangeRead released documentsRead draft and confirmed documentsCreate parts/documents, save from CADConfirm / Correct ComponentRelease ComponentDecide a request (Approve/Reject)Prepare and Start a Change OrderTake BaselineApply a Change OrderConfiguration: access, MCP keys
The levels include one another: Admin has every right of Integration, Integration every right of View. The "+ Release" column shows what the release right, a separate group, ADDS to a level. Either Admin or Release may decide a request.

Four levels and the release right

Step by step

  1. Give a user a PLM level

    Open the user under Settings › Users & Companies › Users; in the ODOOPLM section of the Access Rights tab choose the level. The release right is a separate group; the system administrator adds it.

    The OdooPLM level on the user form1
    1. The ODOOPLM section: Nazlı Şen's level is “OdooPLM - Administrator”.
  2. Separate documents by department

    Configuration › PLM Access nodes form a tree: the root is the company itself, the children are departments. Each node names the groups for read, write, create and delete; one that names none inherits from its parent.

    The Mekanik Tasarım access node123
    1. Parent: PORTWARE (the company's root).
    2. Write: Integration users only.
    3. Effective read: who is really allowed once inheritance is resolved.
PLM access nodesPORTWAREroot node: no groups= the whole companyMekanik Tasarım (mechanical design)Read: View · Write/Create: IntegrationDelete: AdminA node that names no group inheritsthe missing right from its parent.
Documents hang on an access node; the node tree separates companies and departments.
Caution: keep the release right narrow
A release makes the part valid for purchasing and production. Give this right to the few people who check designs; designers do not release their own work. Raising a change request, on the other hand, is open to everyone: whoever sees the problem first must be able to record it.

Mini case: Kerem cannot release

Situation
Kerem Tunç confirmed the cover but does not see Release Component.
Why
Kerem is at Integration level without the release right. A designer does not release their own work.
The right path
Nazlı Şen (Admin + Release) checks it and applies the change order.

Check yourself

Which level do you give a designer?
Integration User: saves from CAD, edits parts and documents, confirms parts.
Who may decide a change request?
A PLM administrator or a release user.
What does an access node with no groups mean?
It inherits its parent's groups; if the root names none either, the whole company has access.