Role Based Security
Control Access To Your Information
eBRP Suite uses Role-Based Security to manage access to information. Access is granted to teams, not individuals. Unlike traditional legacy planning software that assigns ownership of information to individuals, providing access to teams ensures that integrity of the BCM program is maintained even when there are major staff changes within the organization. This information may include plans or parts of plans, organizational, business process or IT information.
When someone leaves your organization you need never to search for what information they manage and reassign it. In eBRP Suite, members of a team inherit their permissions from the team they belong to. Within this context, when any member is removed from a team, they lose all inherited rights and have no access to the eBRP Suite objects. Similarly, adding a member to a team automatically grants them access to all objects their team has rights to.
Individuals can be members of multiple teams, and there are no restrictions on the number of teams you can create in eBRP Suite. Every team can have its own "Team Administrators" who have the responsibility of adding and deleting members, a task that would otherwise fall solely on BCM administrators.
Access to any eBRP Suite element (from asset properties to plan components) can be assigned to any team at one of three levels:
Read Only - allows team members to see the information and print (or save) a copy including any associated reports.
Read/Write - allows team members the same rights as those with read only access, plus the ability to edit anything they can see, but not to add or delete.
Full Control - the owner level that allows reading, printing and editing rights, plus the ability to add, delete and grant access to information to any other team.
Administrators - "super user" capability, to see and alter everything.
Because eBRP Suite is web-based, teams see only the information that belongs to them. Nothing else appears on their screen. There is no "grayed out" information they have to wade through to find what they're looking for. Until a person becomes a member of a team, they have no access at all.
eBRP Suite can be integrated with your organization's Windows Active Directory and Single Sign-On (SSO) for user authentication. If your organization doesn't use Windows ADS or SSO, eBRP Suite's internal access security manager still allows administrators to set password rules (length, strength and longevity) to match those of your organization's IT security policy.