Sage 100 ERP (MAS90 / MAS200) How to Set up Security in Sage 100 ERP In order to access Sage 100 ERP, a person must be given a user id in Sage 100. The User ID is then assigned a Role which grants the user access to certain modules and tasks. (These instructions are under the assumption that Sage 100 ERP is currently running and that you are creating a new user.) Topic Page How to create a role in Sage 100 ERP.....2 How to create a user in Sage 100 ERP..3 How to configure user settings with System Configuration.4 How to allow users to change their password...7 Page 1
How to Create a Role in Sage 100 ERP (MAS90/MAS200) To create a role, go the Library Master module/main/role Maintenance. In Role Maintenance, select an existing role or create one by typing in the role name and description. Press the Enter Button on your keyboard to accept it. You will then see the modules and tasks. To expand the modules, click on the plus sign. There are 3 different displays in the boxes; checkmarks, white boxes, and grey boxes. Check marks means the role has access to those tasks. The white box means the user does not have access to that task or anything inside it. Lastly, the Grey box means the user has partial access to it. The user will have a combination of check marks and white boxes in the tasks or groupings. Page 2
How to Create a User in Sage 100 ERP (MAS90 / MAS200) After the role has been created, the user will need to be created. To create a user, go to Library Master module/main/user Maintenance. In User Maintenance, select an existing role or create one by typing in a user login and press the Enter Button on your keyboard. You can then put in the user information. Please note that you will require a User Code. Most people use the employee s initials. The next step is to select the company that you wish to grant the user to, and then assign the role to the user. The start date and expiration date are typically used for temporary employees. If filled out, the user will only be active for those time periods. You may assign multiple roles to the same user. In this example, Acute Data Systems has access to company ABC as an AP role and ABX as a Full Access role. Helpful Tip: Standard users should not have access to user maintenance and role maintenance. If they do, they can grant themselves full access to the system. Page 3
How to configure User Settings with System Configuration To make configures to user passwords such as making passwords a certain length or forcing users to change their passwords after a certain period of time, you will need to access System Configuration. To access System Configuration, go to Library Master module/setup/system Configuration: Use Unified Logon Select this check box to implement unified logon for your system. Clear this check box if you do not want to implement unified logon. When implementing unified logon, users are mapped to the Windows logon allowing for unified logon to both Windows and Sage 100 with the same logon name and password. When using unified logon, separate logons and passwords are not stored within Sage 100; rather, Sage 100 authenticates the user's Windows logon and password. Users are not required to reenter their logon name when accessing Sage ERP after logging on to their PCs. To implement unified logon, users need to be set up and the user's Windows logon name must be entered at the User Code field in User Maintenance. Page 4
Note The Unified Logon feature is all-inclusive. If implemented, all users must be set up to use unified logon. This check box is available only if the check boxes in the Internal Security section are cleared. Require all Users to Enter a Password Select this check box to require all users to enter a password to access Sage 100. Clear this check box if a password is not required. Passwords are set up in User Maintenance. This check box is available only if the Unified Logon check box is cleared. Require all User Passwords to be System Defined Strong Passwords Select this check box to require that all passwords be "strong" passwords as defined by the system. Clear this check box if you do not require strong passwords. Strong passwords have the following characteristics: Contain at least eight characters Include a combination of letters and numbers Do not contain repeating characters Examples - Strong Passwords The following are examples of valid strong passwords: Paperchase29 *132acb# Enter a Password check box is selected. User Defined Passwords must be of a Minimum Length Select this check box to require that all passwords be a minimum length as defined at the Length field. Clear this check box if you do not require that all passwords be a minimum length. Enter a Password check box is selected. Length Type the minimum number of characters required for a user password. The value at this field must be greater than 0. This field defaults to a value of 8 and can be changed; however, the entry cannot be less than 8. Require all User Passwords to be System Defined Strong Passwords check box is selected. This check box is available only if the Unified Logon check box is cleared, and the Require all Users to Enter a Password and User Defined Passwords Must be of a Minimum Length check boxes are selected. Page 5
Force Password Change after a Set Number of Days Select this check box to require all users to change their Sage 100 password after the number of days defined at the Days field has elapsed. Clear this check box if you do not require all users to change their password. Enter a Password check box is selected. Days Type the number of days before users need to change their Sage 100 password. The value at this field must be greater than 0. This field is available only if the Unified Logon check box is cleared and the Require all Users to Enter a Password and Force Password Change after a Set Number of Days check boxes are selected. Lock Out User after a Set Number of Invalid Logon Attempts Select this check box to lock out a user after a set number of invalid attempts are made to log on to Sage 100. The number of attempts is defined at the Attempts field. Clear this check box if you do not want to lock out a user after a set number of invalid attempts are made to log on. Enter a Password check box is selected. Attempts Type the number of attempts that can be made before locking users out of Sage 100. The value at this field must be greater than 0. This field is available only if the Unified Logon check box is cleared and the Require all Users to Enter a Password and the Lock Out User after a Set Number of Invalid Logon Attempts check boxes are selected. Unlock User after a Set Number of Minutes Elapse from the Last Invalid Logon Select this check box to unlock users after a specified number of minutes, if they have been locked out as a result of surpassing the number of attempts to log on. Clear this check box to require that all locked accounts be manually unlocked by clearing the User Account Locked check box in User Maintenance. Note Expired user accounts must be reactivated in User Maintenance and are not affected by this field. Enter a Password and Lock Out User after a Set Number of Invalid Logon Attempts check boxes are selected. Page 6
Minutes Type the number of minutes an account remains locked after too many invalid log on attempts. The value at this field must be greater than 0. This field is available only if the Unified Logon check box is cleared, the Require all Users to Enter a Password and Unlock User after a Set Number of Minutes Elapse from the Last Invalid Logon check boxes are selected. Enable ODBC Security within Role Maintenance Select this check box to enable ODBC security. Clear this check box to disable ODBC security. When this check box is selected, the ODBC security Tree View appears on the Role Maintenance ODBC Security tab. How to Allow Users to Change Their Password In order to allow users to change their own password, they must have access to do so. Access will be determined by the User ID and which Role it s assigned to. The role must have access to Allow User to Change Password It will be located in the Module Options inside of Role Maintenance. Inside the role, it will be located in the Module Options Tab/Library Master/Allow User to Change Password. Page 7
Once the user is assigned to a role that has this access, to change their password, go to File in the upper left corner and select Change User Password Type in old password and then new one. Log in and out to verify that it has worked. Page 8