Ava Insights access control
ℹ️ Note: Ava Insights is currently available for early adopters only.
Overview
Ava Insights uses the existing Unit4 ERPx security model. It uses the identity and access rights of the person who asks each question. It does not use a shared service account.
Access is based on company access and object access. Attribute-based Data Control, column restrictions and filters that limit users to their own records are not applied during the early adopter release. More detailed access control is planned, but no date is confirmed.
Validate your access setup against your organisation's data classification requirements before you enable Ava Insights. Unit4 does not guarantee data segregation beyond the access controls described on this page.
Configure access
Configuration Manager is not available for Ava Insights during the early adopter release. Configure access manually with guidance from Unit4. Create a dedicated role for each function that needs different data access.
- In the Role master file (TAG062) window, enable the Data Hub flag and Menu access. Menu access is needed before you assign object access. Assign the role's companies under Clients. Ava Insights uses only roles with the Data Hub flag. Other roles still work in ERPx but do not grant Ava Insights access.
- In the Object access (XRA002) window, grant only the objects the function needs. Also grant the shared attribute objects listed in the following section to every Ava Insights role.
- Assign each test user to the role. This adds Ava Insights access without replacing the user's other ERPx roles.
Restrict membership of the Ava Insights team in Microsoft Teams to approved users. Grant access only to objects where those users can see every column and every record in their assigned companies.
Recommended objects
For project reporting, consider granting the following objects:
- Activities.
- Projects.
- Resource.
- Work orders.
- Invoice base.
- Revenue recognition project setup.
- Project invoiced items.
- Project connections.
- Assignments.
- Milestones.
- Invoice proposals.
- Invoice rules.
- Price list.
- Resource utilization.
- Resource utilization details.
- Project invoices.
- Timesheet details for approval.
- Timesheets.
- Time transactions.
Always grant these attribute objects in every Ava Insights role:
- Attribute Values.
- Attribute Value descriptions.
- Attributes.
For project financial and planning data, add the following objects when the role needs them:
- Customer.
- Customer transactions.
- General ledger transactions.
- Account.
- Planner transactions.
- Planner versions.
- Supplier.
- Supplier transactions.
Validate access
Use these questions to check the role setup:
- List all the active projects I manage.
- Which are the active work orders I manage?
- Do I have any projects I manage with timesheets waiting in the approval workflow?
- Breakdown the projects I manage by customer.
For prerequisites and other setup information, see Ava Insights setup.