13.10. Domain Restrictions

Accounting Balance Pairing Exchange Amount Limit #

When pairing, the specified amount will be the maximum difference allowed forWrite-Off and Exchange difference respectively.

Accounting Claim and Technical Worksheet Status with Liquid and None Liquid Amount #

Controls creation of, or change to, the listed claim/technical worksheet status pairs.

Each item gives the user access to set a claim/technical worksheet to the specified status pair. The user will be blocked from setting a claim/technical worksheet to a status pair not listed.

Note! When the domain restriction is defined, it will cover both the Claim and the Technical Worksheet. You must add access right to both Worksheets. For example, if you specify access right to only the Claim WS, the user won’t have any access right to the technical WS.

If Only for Mass Close processes is selected, then the defined domain restriction will give access only when the status is changed through mass update of the worksheet, i.e. any of the listed functions
Open Worksheets Mass Update order
Recovery Calculation orders
Recovery Calculation for Protection Program
Recovery Calculation for Protection Program Aggregate XL
Recovery Calculation for Protection Program Aggregate SL
Recovery Calculation for Single OCC
Recovery Calculation for Single OCC Aggregate XL
Recovery Calculation for Single OCC Aggregate SL
Recovery Calculation for US Quota Share
Recovery Calculation for XL Fac.

If Use Liquid Amount is selected, the liquid amount of a worksheet has to be lower than the amount entered. The absolute amount is used to check if the booked liquid amount is within or higher than the given amount in the domain restriction. Example: If you give an amount of 5000 and the user book a premium amount of 5500 or a claim amount of -5500 it means that both of these booked amounts exceed the absolute value of the given liquid amount.

If Use None Liquid Amount is selected, the none liquid amount of a worksheet has to be lower than the amount entered. Also here the system will use the absolute value of the given amount, see description of the above Liquid Amount.

Change of status on the worksheet is done in the Worksheet Closing window.

Accounting Claim Worksheet Annuity not in line #

When domain restriction is assigned to the user role, the user is prevented from closing a claim worksheet when Annuity Calculation is defined as not line with the contractual conditions.

Accounting Order Business Selection Criteria #

Controls that order a user is allowed to create, save after edit, and run. The access control is based on the business selection criteria specified in the order and the businesses specified to be included. The user can be prevented from creating and running orders based on these filters.

• Accounting Order by Type
• Accounting Order by Business Selection Criteria Base Company

When using the “Accounting Order by Type” filter, order types not covered by the restriction are shown in the available list. Whether these types are selected or rejected in the filter has no relevance when used in this domain restriction. This filter can be used to restrict user access to only certain order types.

Before an order is created, saved after edit, or run, the base companies that the order could potentiality create bookings on, can be verified using the ‘Accounting Order by Business Selection Criteria Base Company’ filter. Depending on the order type there is various methods of finding the base companies the order will book on. Some orders might only book on the attached business, while others can book on all base companies specified on the “business selection criteria” on the order.

The above-mentioned filters can be combined using a composite filter. As an example, it is possible to specify that a user should only be allowed to run orders of type “Facultative Adjustment” which have base company “My Company”.

The following order types are covered:

Accounting Overrule Functional Currency Exchange Rate #

The use case controls the access to overrule the functional currency exchange rates for a worksheet. If a user has a user role with this use case included, SICS grants full access to overrule functional currency exchange rates.

Accounting Pairing across Business Partners #

The restriction ‘Accounting Pairing across Business Partners’ controls the user’s access to perform balance pairing and to create balance groups (i.e. Account Balance and Settlement Balance) across partners. If this domain restriction is activated, the user is prevented from pairing and grouping balances owned by different business partners.

Accounting Pairing and Settlement #

Controls which Base Companies and Reporting Units a user can make balance pairing for. If the field Should Test Against Base Company is selected only balances with Permitted (selected) Base Companies can be included in the balance pairing and when creating balance groups. If the field is not selected it means that it is no restriction for Base Companies. If the field Should Test Against Reporting Units is selected only balances with Permitted (selected) Reporting Units can be included in the balance pairing and when creating balance groups.If the field is not selected it means that it is no restriction for Reporting Units.

Accounting Prevent Change of Business Partners after General Ledger Transfers #

Controls the user from changing the business partner of a balance including details already transferred to the general ledger. The domain restriction is only triggered when the user is trying to change the business partner of a closed worksheet.

Accounting Prevent Reversing Find Technical Worksheet #

This Domain Restriction will prevent users from Reversing Technical Worksheet or Balances from Find: Accounting Worksheet.

Accounting Proportional Balance Split in Settlement Pairing #

This domain restriction forces the ‘Proportionally Split of Partially Settled Balances’ when in a balance pairing process partially split applies. This is the case even if the system parameter ‘Always proportional split of partially settled balances’ is not activated. If the parameter is activated this domain restriction has no effect.

Accounting Remittance Base Company and Reporting Unit #

Controls which Base Companies and Reporting Units a user can book to a remittance worksheet. On a remittance worksheet, the Prohibited (selected) Base Companies or the Prohibited (selected) Reporting Units will not be allowed on a worksheet trying to be created/edited. Finalising remittance worksheets with any of the selected Base Companies or the selected Reporting Units, will also be blocked.

Accounting Remittance Status, Payment Type, and Amount #

Controls creation of, or change to, the listed remittance types and statuses pairs.

Each item gives the user access to set a remittance worksheet to the specified type/status pair. The user will be blocked from setting a Remittance worksheet to a type/status pair not listed.

If Use Payment Limit is selected, the paid sum on a remittance has to be lower than the amount entered.

If “For Base Company Only” is selected for a permission the user will be blocked from selecting a Payment Partner that is not a Base Company. (User will not be allowed payment with an external partner for the specified type/status pair).The Domain Restriction will be performed on the ‘Remittance Worksheet’ window.

Accounting Section on Worksheet Detail #

The restriction controls which businesses and sections can be assigned to details on claim and technical worksheets. Using a filter a criteria can be set up to select or reject each sections on the worksheet’s details. If the filter rejects one or more details, an error message is displayed to the user and the operation is stopped.

The domain restriction can be set up per worksheet type and for all the worksheet status possible. Selecting the status ‘Open’ includes both applying and ‘Un-finishing’ the worksheet.

Accounting Worksheet Claim Details For Business #

When assigned to a user, restricts the user from closing the Claim/Technical Worksheet under consideration for a flagged Assumed Business on the worksheet.

Creating/Editing this domain restrictions, requires the user to check either or both Enabled for Claim Worksheet/Enabled for Technical Worksheet. If Enabled for Technical Worksheet is selected, corresponding ‘Entry Codes for Technical Worksheet’ is required.

The Domain Restriction will be performed on the ‘Closing Worksheet’ window.

Accounting Worksheet Claim Details For Claim/Headline Loss #

When assigned to a user, restricts the user from closing the Claim/Technical Worksheet under consideration for a flagged Claim or Headline Loss on the worksheet.

Creating/Editing this domain restrictions, requires the user to select either or both ‘Shall Include Claim On Detail’/‘Shall Include Headline Loss On Detail’. Enabled for Technical Worksheet is enabled only if Shall Include Headline Loss On Detail is selected. But, either or both Enabled for Claim Worksheet’/ Enabled for Technical Worksheet is required. If Enabled for Technical Worksheet is selected, corresponding Entry Codes for Technical Worksheet is required.

The Domain Restriction will be performed on the ‘Closing Worksheet’ window.

Accounting Worksheet Claim Details For Partner #

When assigned to a user, restricts the user from closing the Claim/Technical Worksheet under consideration for a flagged_Business Partner_ in the capacity of a Broker and/or Cedent and/or Insured for Base Companies for the Assumed Business on the worksheet.

Creating/Editing this domain restrictions, requires the user to check either or both ‘Enabled for Claim Worksheet’/‘Enabled for Technical Worksheet’. If ‘Enabled for Technical Worksheet’ is selected, corresponding ‘Entry Codes for Technical Worksheet’ is required.

The Domain Restriction will be performed on the ‘Closing Worksheet’ window.

Accounting Worksheet Claim Details For Threshold Amount #

When assigned to a user, restricts the user from closing the Claim/Technical Worksheet under consideration if,

• For a combination of Accounting Classifications on the worksheet is within the combination defined for the Domain Restriction.
• If Claim worksheet and specific combination of Loss Expenses and Interests, the Incurred Claim Amount expressed in Base Company’s Base Currency exceeds the Amount defined on the Domain Restriction.
• If Technical worksheet and specific combination of Loss Expenses and Interests, the Booking Amount expressed in Base Company’s Base Currency exceeds the Amount defined on the Domain Restriction.

Creating/Editing this domain restrictions, requires the user to select a Base Company and define the Amount limit. The user can define a Specific combination of Accounting Classifications or none that means All combinations of Accounting Classifications. The user has to check either or both ‘Enabled for Claim Worksheet’/‘Enabled for Technical Worksheet’. If ‘Enabled for Technical Worksheet’ is selected, corresponding ‘Entry Codes for Technical Worksheet’ is required. The user can define many Threshold Amount Domain Restrictions but the system checks for uniqueness.

The Domain Restriction will be performed on the ‘Closing Worksheet’ window.

Accounting Worksheet Created or Last Updated By - Closed by different user #

Prevents the user that registered a worksheet from closing the same worksheet. This applies to

• Technical worksheets
• Claim worksheets (not relevant for Life)

Additional restrictions can be set up to apply to the worksheet type(s) selected above:

• Closing Worksheet Last Updated by Same User not Allowed
• Select Closing Worksheet Automatically Closed as Part of Accouting Process if you want to prevent users from closing worksheets that are automatically closed as part of a process (e.g. book and close instalments or run an accounting order with indicator ‘Close Worksheets’ selected).
• If you select the above Closing Worksheet Automatically Closed as Part of Accouting Process, another option is enabled: Closing Worksheet Automatically Closed as Part of Accouting Process, not for Retrocession Order. This option will allow to exclude the retrocession orders (Retrocession Calculation order, Retrocession Estimation Calculation order and Retrocession Account order, including group orders) from this automatic closing restriction.
• Select Restrict Closing of Reversal of Instalment/Adjustment Worksheet if you want to prevent users from automatic closing of worksheets when the option Auto Reverse Selected Instalments/Adjustments or Auto Reverse Selected Special Acceptance Premiums or Auto Reverse All Instalments on All Sections from the Premium Accounting window in the Limit and Premium conditions. If a user has this restriction and is trying to perform any of the above operations, an information message will appear telling the user that the created worksheet will not be closed but stored in status Open. Such a worksheet in status Open is fully protected and cannot be updated by any users, other than the Booking Year/Period, the Booking Date and the status to Closed. This option is enabled only when the above option Closing Worksheet Last Updated by Same User not Allowed is selected.

Batch Booking Utility Write to Database #

This domain restriction will prevent users from writing to database when administrating the Batch Booking Utility.

Business Account Group #

The selected account groups are the only allowed account groups on a business for a user assigned to this use case. The account group assigned to a business is controlled whenever a user sets an account group, or changes the account group. <None> is a valid value independent of the domain restriction. However, if the’Account Group Mandatory For Definite Life Cycle Status’system parameter is in use, the business must have an account group selected before it can be set to a ‘Definite’ life cycle status. For more information about this system parameter, refer to chapter Maintain System Parameters (Business, Conditions/Classifications).

Business Ensure Different User Approval of Registration Complete Setting #

This restriction will prevent a user that has made changes on the contract which has updated the Last Updated By on the contract’s Life Cycle tab, to set the contract to registration complete. This will increase the chances of discovering registration mistakes before setting the contract to complete. The system checks the information on the current insured period only. It checks only the last update and not previous updates.

Applies to P&C, Cede and Life

In addition, this domain restriction will prevent a user that has made changes to an amendment that has updated the Last Updated By on the Amendments tab, to set the same amendment to complete.

Applies to P&C and Cede

Business Intra Group Contract #

A user role cannot create or link Assumed Intra Group Contracts as for other than the listed filters. For example, he/she cannot create an intra group contract, unless the Reinsurer of the contract is a particular base company and the reporting unit of the contract is a particular one.

To access Intra Group Contract function, add User Case Intra Group Contract to User Role.

Filters for Intra Group Contract function #

System provide two types of filters: Access Control and Access Revocation.

Access Control restricts reporting units and classifications of business.

Access Revocation restricts the Intra Goup Function: Create, Update/Link and Delete Intra Group Contracts

Business Life Cycle Status #

The selected Life Cycle Statuses are the only status allowed on new Life Cycle Phases created. The creation of Life Cycle Phases are controlled at these locations in the system:

• Creation of new business through the Business Wizard.
• Creation of new Life Cycle Status on an existing business.
• Copy of existing business.
• Renewal of business.

Business Reporting Unit Categories for Reporting Units #

Restricts the Assess Right to add, remove and replace Reporting Units belonging to certain Reporting Unit Categories.

Only Reporting Units that belong to the selected Categories can be added, removed or replaced on existing business or when creating new business. The restricted Categories will not be available for modification.

Note! This does not prevent from creating business with defaulted Reporting Units, even if they belong to a restricted Reporting Unit Category.

Business Reporting Unit Categories for User Preferences #

Only Reporting Units that belong to the selected Categories can be Added or Removed in User Preferences - Reporting Units.

Business Structure #

The ‘Business Structure’ domain restriction allows controlling users’ access to creating business and viewing and editing information seen on the ‘Business Structure’. The access can be based on various criteria like ‘Level of Business’, ‘Reporting Units’, ‘Base Companies’, etc.

When setting up the domain restriction, the system administrator first specifies a ‘filter’. When a user opens a business that is rejected by the filter, a set of security use cases (controlling editing and viewing the businesses) is temporary removed from the user when navigating on the specific business. The set of use cases removed can be configured when setting up the domain restriction.

The ‘Business Structure’ domain restriction window is divided into two tabs. The first tab controls which tests should be performed when opening a business, while the second tab specifies which action should be taken if any of the tests (specified on the first tab) fails.

Access Control Tab #

The ‘Access Control’ tab presents the tests that should be performed when a user opens or creates a business. A ‘filter’ is used to determine whether the business is ‘selected’or ‘rejected’.

Note! Rejection of the business does not mean that the user is completely blocked from viewing and editing the business. Read the section ‘Access Revocation Tab’ for more information.

In the above example, the filter is set up to select business having ‘Level of Business’set to ‘Portfolio Program’. Businesses with other levels are rejected.

Some of the filter types allowed defined for this domain restriction filter the business based on the section. (The name of these filters types starts with “Section by”.) When these filters are executed, the current section on the latest insured period of the business is used.

Access Revocation Tab #

Rather than blocking the user altogether from viewing or editing the business when the filter rejects the business, the ‘Access Revocation’ tab controls - on a fine grain level - which access rights should be taken away from the user when working with the specific business. The use cases listed under ‘Select’ are removed from the user’s list of granted use cases when working with the specific business. This happens regardless of other security settings for the user.

When opening the business, failed tests are not presented to the user. Instead the system keeps track of which use cases where taken away from the user. When the user tries to perform any action covered by a revoked use case, a warning is presented and the operation is stopped. The user might have several Business Structure Navigators open, but only the navigator for whom the test failed is affected.

A check box specifies whether the restriction should also cover creation of business

Note! The set of security use cases listed under ‘Available’and ‘Blocked’ are static and defined by the system, and not taken from any user role etc. The included use cases are those that cover functionality on the Business Structure Navigator.

In the above example, the user is removed access to all use cases except those cases covering viewing the business. The user can open the businesses, but as soon as an Edit button is clicked, the warning dialog will appear and inform the user about missing access rights.

Multiple Domain Restrictions #

When the tests in the domain restriction fail, the use cases listed under ‘Selected’ on the ‘Restriction’ tab will always be removed from the user’s granted use cases. It is possible that a user have multiple ‘Business Structure’ domain restrictions, linked through the same or different user roles. In these cases every failing restriction might subtract granted use cases from the user. It is important to bear in mind that every new restriction added to a user can only further restrict the user’s access rights.

Examples:

Example 1:
Restrict user from editing businesses that have base company ‘Alpha Bravo’

• Create user role ‘View only business with base company Alfa Bravo’.
• Assign user this role.
• Add domain restriction ‘Business Structure’ to role.
• On domain restriction, define filter ‘Business by Base Companies’ and select all base companies expect “Alpha Bravo’.
• Move all use cases not having ‘R’ as suffix into the Blocked list

Example 2:
Restrict user from editing businesses that have base company ‘Alpha Bravo ‘and reporting unit ‘Reporting Unit 1’

• Create user role ‘View only business with base company Alfa Bravo / Reporting Unit 1’.
• Assign user this role.
• Add domain restriction ‘Business Structure’ to role.
• On domain restriction, define filter ‘Composite’. Set ‘Boolean Operator’to ‘or’. Add filter ‘Business by Base Companies’ and select all base companies expect “Alpha Bravo’. Add filter ‘Section by Reporting Unit’ and add all reporting units but, ‘Reporting Unit 1’.
• Move all use cases not having ‘R’ as suffix into the Blocked list

Example 3:
Allow only editing of business with base company ‘Alpha Bravo ’ and reporting unit ‘Reporting Unit 1’

• Create user role ‘View only business with base company Alfa Bravo / Reporting Unit 1’.

Assign user this role.

Business Underwriting Limit P&C #

The amount entered is the maximum underwriting limit specified in the ‘Limit and Premium Condition’ that a user is allowed to enter.

On Non Proportional Businesses the underwriting limit is specified using ‘Our Share’field of the ‘Cover’.

On Proportional Facultative Businesses the underwriting limit is specified using the ‘Our Share’field of the ‘Main Limit’.

On Proportional Treaty Businesses the underwriting limit is specified using the ‘Our Share’field of the ‘Liability’.

Non Proportional Treaties that are Stop Loss are not covered.

This Domain Restriction applies only for P&C, and will have no effect on a Life system.

Business update After Registration Complete #

This restriction prevents a user to update a contract that has been set to registration complete.

This applies to P&C, Cede and Life

In addition, this restriction prevents a user to update information relating to an amendment that has been set to amendment complete.

This applies to P&C and Cede

Claim - Hide Columns in Find Claims #

The “Claim - Hide Columns in Find Claims” domain restriction restricts the display of Claim Name and/or Cause of Loss as both a search field and result column in Find Claims.

Applicable for P&C only.

Claim Business Attachment #

The Claim Business Attachment domain restriction allows controlling users’ access to creating and viewing and editing information on claims. The access can be based on various criteria like Level of Business,, Base Company,, Claim Disposition, etc.

A filter must be defined to filter the businesses to which the user wants to attach the claim, or for which claim dispositions the user will have restricted access. When a user opens a claim that is rejected by the filter, a set of security use cases (controlling editing and viewing the claims) is temporary removed from the user when navigating on the specific claim. The set of use cases removed can be configured when setting up the domain restriction.

The Claim Business Attachment domain restriction window is divided into two tabs. The first tab controls which tests should be performed when opening a claim, while the second tab specifies which action should be taken if any of the tests (specified on the first tab) fails.

In the above example, claims can only be created on Prop Treaty businesses.

Access Revocation Tab #

Rather than blocking the user altogether from creating and viewing and editing a claim when the filter rejects the business and/or claim, the Access Revocation tab controls which access rights should be taken away from the user when working with the specific claim. The use cases listed under Select are removed from the user’s list of granted use cases when working with the specific claim. This happens regardless of other security settings for the user.

In the above example, the user is removed access to all use cases except those cases covering viewing a claim. The user can open all claims, and headlines and claim programs, but as soon as an Edit button is clicked, the warning dialog will appear and inform the user about missing access rights.

Multiple Domain Restrictions #

When the tests in the domain restriction fail, the use cases listed under Selected on the Restriction tab will always be removed from the user’s granted use cases. It is possible that a user have multiple Claim Business Attachment domain restrictions, linked through the same or different user roles. In these cases every failing restriction might subtract granted use cases from the user. It is important to bear in mind that every new restriction added to a user can only further restrict the user’s access rights.

Restrict User’s Access to Create and Update Other than Informational Claims for a Specific Base Company #

1. Open the User Role tab in the Access Security Manager window.
2. Select the Domain Restrictions tab.
3. Select New in the pop-up menu. You see the Create New Domain Restriction wizard.
4. Select the Claim Business Attachment in the domain restriction list, and click Next.
5. Select Composite.
6. In the Composite Filter window, select Add filter from pop-up menu.
7. Select filter Business by Base Company, and click OK.
8. Select Base Company filter, and select Edit Filter from pop-up menu.
9. Move the Base companies that shall be restricted for user from Reject to Select, and click Save.
10. Repeat steps 6 - 9 for filter type Claim by Claim Disposition.
11. Select Boolean Operator OR.
12. Open the Access Revocation window.
13. Select all use cases that shall be restricted for user. When Base Company and Disposition rejects the claim.
14. Click Finish.

Claim Certification of Claim Payments #

Prevents a user to close a worksheet where the booked amount for specified entry codes exceeds a defined amount. The domain restriction may be added numerous times to the same user role.

Claim Data Protection Access Right #

This domain restriction grants access to view loss sensitive information, as defined in Claim System Parameters which otherwise is hidden from user. Note that if Data Protection Parameter is activated, information is protected from all users unless they have this Domain Restriction defined.

1. Open the User Role tab in the Access Security Manager window.
2. Select the Domain Restrictions tab.
3. Select New in the pop-up menu. You see the Create New Domain Restriction wizard.
4. Select the Claim Data Protection Access Rights in the domain restriction list, and click Next.
5. You see the Data Protection Country Groups And Reporting Units window.
6. Select one or more Country Groups (mandatory) in the upper container (refer to Claim Data Protection Country Groups earlier in this chapter), and if required, one or more Reporting Units (these are Profit Center Hierarchies) in the lower container.
7. Click Finish.
8. Repeat the above steps to add the same Domain Restriction with a different definition, if required.

The user has access to view loss sensitive data for Cedents (or Insureds) located within the Country Group, where the claim is linked to an insured period section with a Reporting Unit belonging to the selected Hieracrhy.

Insured Object Cession Business Attachment #

A filter defines which businesses are allowed to be attached to new ‘Insured Object Cession’ being created. Rejected businesses are not allowed to create insured object cessions on. The restriction allows for example only cessions to be created on businesses having a defined set of reporting units.

Cessions are created on the ‘Add Child Cession’and ‘Create Child Cessions’ menu choices on the ‘Structure’ tab on a business. Cessions are also created from menu choice ‘Assign…‘at the ‘Cessions’ tab when viewing an Insurable Object.

Life Claims Set Released Status Indicator #

The Domain Restriction feature controls the accounting status of Claim Account Costing Items (ACIs).

Key Rules Applicable only to Life across all statuses where ACIs are calculated. When the accumulated claim liability for an insurable object exceeds the defined threshold, the ACI status is set to Suspended. If the restriction is defined in a specific currency, the accumulation is calculated in that currency using the most recent daily exchange rate on the claim event date.

Scope of Application Can be applied at both: Type of Claim __Level of Claim The Type of Claim is optional. If not specified, the restriction applies to both Individual and Standalone Claims.

Status Considerations Excluded from accumulation: Ceded Outstanding statuses. Included in accumulation: Transaction Reversal, Adjustment Reversal, and Cancelled statuses. Included from accumulation: Paid, Ceded Paid, In Payment, Special Paid statuses.

Applicability This restriction is applicable to SICS Life.

Life Insurable Object Unique External Identifier #

The Domain Restriction controls user access to sensitive insurable object data.

Key Rules Specific Individual Life Identifier Types can be selected and allowed for a user. Users can only create insurable objects with the allowed identifier types. When the domain restriction is enabled, an identifier is mandatory. If no Life identifier types exists on an IO, it is treated as restricted and excluded from searches. Merge operations: Only IOs within the Domain Restriction are visible for selection; therefore, merges with restricted IOs are not possible.

Access Restrictions Users cannot view insurable objects when accessed from claims, cessions, or any other linked objects if the identifier type is not allowed under the domain restriction. For Joint Life or Group Insurable Objects, if even one individual insurable object has a restricted identifier type: The entire joint life or group insurable object is restricted. It will not appear in searches or be accessible from claims or cessions.

Applicability This restriction is applicable to SICS Life.

Partners - Create Business Partner with Status #

When creating Business Partners, the status of the partner, must be one of the statuses selected on the restriction.

Partners - Edit Business Partner with Status #

When editing Business Partners, the status of the partner, must be one of the statuses selected on the restriction. If this is not true, the user is prevented from starting the edit. This applies for the main properties screen on the Business Partner window.

Partners - Change Status to Approved for Business Partner of given Business Partner Types #

When this Domain Restriction is assigned to a user, it restricts the user from changing the status to Approved, and from Approved to any other status for any other than the selected Business Partner Types.

If no Business Partner Type is selected, it means that the user which has this Domain Restriction, is not allowed to Approve any Business Partner regardless of Type.

Partners - Creation of Approved Business Partner for given Business Partner Types #

When this Domain Restriction is assigned to a user, it restricts the user from creating a new Business Partner with status Approved, except for the selected Business Partner Types.

If no Business Partner Type is selected, it means that the user which has this Domain Restriction, only can create a new Business Partner in status Provisional.

Reference Data Access View #

This domain restriction allows restriction from viewing certain data types in Reference Data Maintenance.

After selecting this domain restriction in the Create New Domain Restriction wizard, the name and code of all the data types available for selection will be listed.

Selected: The selected data types (restricted) cannot be viewed by the user in Reference Data Maintenance.

Available: The data types not selected (unrestricted) can be viewed by the user in Reference Data Maintenance.

Relevant when: The user has access rights to read the Reference Data Maintainance (controlled by Security Use Case ‘Reference Data Administration’, but certain data types should not be visible for the user.

Applicable for: P&C, Life

Reference Data Access Delete #

This domain restriction allows restriction from deleting values and dependencies for certain data types in Reference Data Maintenance.

After selecting this domain restriction in the Create New Domain Restriction wizard, the name and code of all the data types available for selection will be listed.

Selected: Values or dependencies of the selected data types (restricted) cannot be deleted by the user in Reference Data Maintenance. Deleting restricted reference data will trigger validation message

Available: Values or dependencies of the data types not selected (unrestricted) can be deleted by the user in Reference Data Maintenance.

Relevant when: The user has access right to read the Reference Data Maintenance and delete reference data (controlled by Security Use Case ‘Reference Data Administration’), but should not be allowed to delete reference data for certain Data Types.

Applicable for: P&C, Life

Reference Data Access Execute #

This domain restriction allows restriction from editing or creating values or dependencies for certain data types in Reference Data Maintenance.

After selecting this domain restriction in the Create New Domain Restriction wizard, the name and code of all the data types available for selection will be listed.

Selected: The selected data types (restricted) cannot be modified by the user in Reference Data Maintenance. Editing or creating values or dependencies for the restricted reference data types will trigger validation message.

Available: The data types not selected (unrestricted) can be modified by the user in Reference Data Maintenance. Their values and dependencies can be created or changed.

Relevant when: The user has access right to read and modify Reference Data Maintenance (controlled by Security Use Case ‘Reference Data Administration’ and Domain Restriction ‘Reference Data Access View’), but should not be allowed to edit or create values or dependencies for certain data types.

Reversal of Settled/Partially Settled Balances #

When this Domain Restriction is assigned to a user, it restricts the user from reversing a detail if it belongs to a Settled /Partially Settled balance, restricts the user from reversing a balance if it Settled / Partially Settled and restricts the user from reversing a worksheet if it contains a balance that is Settled / Partially Settled.

This applies to P&C, Cede and Life.

Accounting Alternative Exchange Rate Tables Used By Base Company #

When this Domain Restriction is assigned to a user, the user is limited to the Selected user defined Exchange Rate Categories when assigning which Exhcange Rate Categories to be used as Default for a Base Company in the Base Company Specific Settings.

This Domain Restriction have two select Available forms. one is for Day Rate categories and another is for period rate categories. And for each type of categories the users will be able to select/restrict only user defined categories.

Restrict Self User Role Modification #

When a domain restriction is assigned to a user role, users associated with that role are subject to the following constraints:

1. Modification Limitations on Role Definitions: #

• Users with domain-restricted roles cannot modify the definitions of any roles, especially in terms of Security Administration Use Cases and Domain Restrictions.
• Only users with the System Administrator role, who themselves are not subject to the same domain restriction, may change user roles or perform operations related to Security Administration.

2. Permissions and Restrictions for Domain-Restricted Users: #

• They must not be able to assign the System Administrator role to anyone, nor should they be able to edit this role.
• They must not be able to remove domain restrictions from any user role, including their own.
• They may assign themselves to other user roles, provided that this action does not result in:
  • Gaining the System Administrator role.
  • Removing the existing domain restriction.
• They may assign or remove other users from user roles that include domain restriction, if such operations do not violate above rules.

This applies to P&C, Cede and Life.