Authorization
This section provides information related to user authorization in OpenText Application Quality Management.
Authorization administration
User access to OpenText Application Quality Management resources is authorized based on the user’s role and group membership. See the Managing User Groups and Permissions chapter of the the help for details.
By default, the user is assigned to each project as Viewer. However, the user can be assigned to specific user groups. The same groups can exist in different projects. The membership in these user groups is per project.
The same user assigned to multiple groups receives the highest permissions. When a user belongs to multiple groups, data hiding can be affected. Check the permissions across all groups.
It is recommended to use minimal permissions when creating new groups. Make sure to select appropriate role and base permissions for the group. It is always recommended to grant minimal permissions and extend the permissions only as needed to avoid unwanted privilege escalation. For example, start with Viewer permissions and add additional permissions individually as needed.
FAQ
Question
Can OpenText Application Quality Management inherit users’ information and authorization profiles from an external repository, such as LDAP?
Answer
The information required for proper authentication is imported from LDAP.
Question
Is Role Management (access to different views and access and edit permission to separate parts) supported?
Answer
Yes, in OpenText Application Quality Management a permission module group represents the user role in the project. For details see the About Managing User Groups and Permissions section of the the help.
Question
Does OpenText Application Quality Management support limitations associated with user profiles and roles (for example, maximum number of group profiles, predefined profiles, and so on)?
Answer
OpenText Application Quality Management supports predefined user groups. For details see the About Managing User Groups and Permissions section of the the help.
Question
Is Access Control supported at Field Level?
Answer
Yes, you can define access control at the field level when defining group permissions. Also, workflow customization and data hiding further customize the access control at field level. For details, see the the help.

