Role/Group Security vs. Individual User Security

plumbline consulting

Why Role Security is better than User Security.

 

When a user needs rights, it is often easier to just give them rights under their unique User ID.  But, is that the best solution for the company?

Role/Group Security works much more efficiently for an organization.  When a company sets up rules for what screens a particular role should be able to access, they are able to consider things like internal controls, divisions of duty and departmental restrictions.   Roles allow these rules to be easily maintained and should also follow job descriptions.

If set up in this way when an employee leaves, or someone goes on vacation and you need a new person to accomplish the task, the user is simply put in the group and all rights are assigned.  In addition “user” security is often hidden or forgotten.   Quickly giving rights outside of the role process can be overlooked in the long run.