Authorization troubleshooting

Roles and resources

In order to see the UI views of Material Management in the Web Portal, then one of the following roles should be assigned to the user: MaterialManagement_User or MaterialManagement_Expert or MaterialManagement_Admin

As every other module Material Management uses different roles and resources for authorization.
Material Management comes with already predefined roles:

Roles
Role	Rights	Description
MaterialManagement_User	Read	This role is used for reading access to the module.
MaterialManagement_Recovery_Admin	Read	To access the block recovery endpoint, which is critically effecting performance, so PO must be contacted before usage
MaterialManagement_Expert	Read, Add, Modify	This role is used for reading and writing access to the module.
MaterialManagement_Admin	Read, Add, Modify, Delete, FullAccess	This role is used for administration of the module. This includes reading, writing and deleting data.
MaterialManagement_Monitoring_User	custom	This role is intended for users of Material Monitoring. The user can only use the Monitoring section in the Portal.
MaterialManagement_DesktopClient_User	custom	This role is intended for users of Desktop clients(such as Material Info Panel and MatClimateControl). The user can only use the desktop clients.
MaterialManagement_DesktopClient_Admin	custom	This role is intended for users of Desktop clients(such as Material Info Panel and MatClimateControl). The user can update configuration and use the desktop clients.
MaterialManagement_Warehouse_Admin	custom	This role is intended for users of the warehouse processes(like INTEGMA and IFNS). The user can only execute the warehouse processes.

These Roles have some resources(privileges) bound to them, in Material Management there are the following resources:

Resources
Resource	Type	Types of access	Description
MaterialManagement-Views-TopLevelEntry	view	read	The resource for the Material Management Menu Item in the Portal.
MaterialManagement-Views	view	read	The resource for the Views (except Monitoring) of Material Management.
MaterialManagement-Views-Monitoring	view	read	The resource for the Monitoring View of Material Management.
MaterialManagement-Events	api	read, add, modify, execute, delete	The Events resource for Material Management.
MaterialManagement-Labels	api	read, add, modify, execute, delete	The Labels resource for Material Management.
MaterialManagement-OnSetupLabelCreationRules	api	read, add, modify, execute, delete	The resource for the OnSetupLabelCreationRules endpoints of Material Management.
MaterialManagement-Materials	api	read, add, modify, execute, delete	The Material resource for Material Management.
MaterialManagement-Blocks	api	read, add, modify, execute, delete	The Blocks resource for Material Management.
MaterialManagement-BlockingRules	api	read, add, modify, execute, delete	The BlockingRules resource for Material Management.
MaterialManagement-Block-Recovery	api	read	The Blocks resource for MaterialManagement - block recovery.
MaterialManagement-Msd	api	read, add, modify, execute, delete	The Msd resource for Material Management.
MaterialManagement-Processes	api	execute	The Processes resource for Material Management.
MaterialManagement-RuntimeConfiguration	api	read, add	The RuntimeConfiguration resource for MaterialManagement.
MaterialManagement-Monitoring	api	read, add, modify, execute, delete	The Material Monitoring resource for MaterialManagement.
MaterialManagement-Monitoring-EndMonitoring	api	execute	The resource to End Monitorings in MaterialManagement.
MaterialManagement-Monitoring-DisposeMonitoring	api	execute	The resource to Dispose Monitorings in MaterialManagement.
MaterialManagement-MonitoringConfiguration	api	read, add, modify, execute, delete	The Material Monitoring Configuration resource for MaterialManagement.
MaterialManagement-PrinterConfiguration	api	read, add, modify, execute, delete	The Material Monitoring PrinterConfiguration resource for MaterialManagement.
MaterialManagement-DesktopClients	api	execute	Permission to execute the DesktopClient applications.
MaterialManagement-Warehouse-Easn	api	execute	Permission to execute the EASN process.
MaterialManagement-Warehouse-Grto	api	execute	Permission to execute the GoodsReceiving process.
MaterialManagement-Warehouse-Pairing	api	execute	Permission to execute the Pairing process.
MaterialManagement-Warehouse-Repack	api	execute	Permission to execute the Repack process.
MaterialManagement-Warehouse-IFNS	api	execute	Permission to execute the IFNS MatLabelCheck process.
health	urn:com:bosch:bci:operation	execute	Get service status via information
MaterialManagement-OSS-Documents	urn:bosch:nexeed:mat:ossdocuments	read	The resource for the OSS documents of MaterialManagement.

To check what role you are currently having, you can check it within the Portal.

Check roles in portal

In order to check the assigned roles in the portal, you must have access to the Access Management Module. After that navigate to the Users menu, as shown in the picture below:

After that click on the specific user, and switch to the Assigned Roles tab, here you can see all the Roles you have currently assigned to your account.

In the example above, the current user is called admin, after selecting this user in the table, the side panel opens, where you can see the Assigned Roles, in this scenario the current user has the MaterialManagement_Admin Role assigned, so the user has every right.

Check resources in portal

In order to check your assigned roles in the portal, you must have access to the Access Management Module. After that navigate to the Roles menu, as shown in the picture below:

After that click on the specific role you want to check and switch to the Privileges tab. Here you can see every ressource bound to that role.

In the example above, after selecting the current role (in this case the MaterialManagement Administrator), you can see the assigned resources in the table from the side panel. The last column shows you which exact type of access the role has.