Security Matrix

The security matrix screen is where we manage access rights for the different integration features. These can be set for specific Salesforce Profiles – or for the user.

Note: Even if the access rights for a screen are modified in the Security Matrix, a user with a "System Administrator" profile will still have default access to the screen due to their administrative privileges.

1. Click on the “GUMU Settings” application, Administration page will contain the Security Matrix Module.

2. On clicking the Security Matrix Module, you will be redirected to the Security Matrix screen. This screen will allow you to setup the Integration Screens access rights to specific Salesforce Profile(s)\User(s).

1. Below are the standard GUMU™ functional permissions that are either maintained or granted to Users or Profiles via the Security Matrix managed by the Salesforce Administrator.

• GUMU Settings: The GUMU settings column defines which User/Profile has access to this entire GUMU settings app – which includes making changes within this Security Matrix. If for a particular User/Profile, the Salesforce Admin wants to provide access to the “GUMU Settings App” then he needs to mark the value as, if the checkbox is not checked, then that User/Profile won’t have the appropriate rights to access the “GUMU Settings”.

• ERP Details: The ERP details column controls access to the screens that display live data from Sage accounting – so – not the data that has been synchronized but rather reaching out to Intacct to check for current data. If the ERP Details check box is left unchecked for a particular User/Profile, then they won’t be able to access the Real-time data (Sales Order, AR Inquiry, and the Customer’s information) against the Accounts.

• Promote Customer: If this checkbox is left unchecked for a User/Profile, then it will restrict that user by not allowing them to promote the Account from Salesforce as Customers to Sage.

• Promote Order: If this checkbox is unchecked for a User/Profile, then it will restrict those users by not allowing them to promote the Orders from Salesforce to Sage ERP System.

• Update Customer: Last but not least, if the Salesforce Admin wants to restrict the User/Profile from passing on the update of a linked Account record to the Customer record in Sage, then they have to keep the checkbox unchecked. If checked, the updates will be passed over to the related Sage Customer record.

1. Using the below screen, the Salesforce System Administrator can allow/restrict access of a User and Profile to any GUMU features by just checking/unchecking the checkbox against the specific user.

The details of each screen field are stated below:

Security Level	Detail
Profile	This will display the User Profile(s) list in the grid and the admin user can provide access rights against the profiles. It would provide an additional feature to apply profile access rights settings to Associated profile user(s).
User	This will display the Users(s) list in the grid and the administrator can provide access rights against the User(s).

1. Let us understand the Security Matrix with a scenario: In the below image, the System Administrator has provided the user i.e., GUMU Testing access to only five modules GUMU Settings, ERP Details, Promote Order, Promote Quote, Update Customer. When the user logs into Salesforce and tries to Promote a Customer, it does not allow the user to do a promotion.

1. Following error message will be displayed: