Access to CLIF works on two levels. Access roles decide which menus and pages someone can open. Department roles decide what they do on submissions: write them, review them or approve them.
Signing in#
CLIF uses your Microsoft work account (Microsoft Entra ID). There is no separate CLIF password. The first time someone signs in,
CLIF creates their user automatically from their Microsoft name and email, with the default access role
(parameter DefaultUserAccessRoleName).
Click your name at the top right to open Settings: your email, your language (culture), your theme and Sign out.
Users#
Organization Mng → User → Users. Pick a user on the left to see their details.
| Field | Description |
|---|---|
| Full name, Email | From the Microsoft account; read-only. |
| Login provider | How the user signs in; read-only. |
| Theme, Culture, Time zone | The user's display preferences. |
| Exclude from approval emails | The user receives no approval emails (useful for administrators who hold roles only for testing or cover). |
| Is Active | Inactive users receive no emails. Untick when someone leaves. |
Click Save after changes. Sync Active Directory refreshes the employee directory from Microsoft 365.
Department roles#
Department roles make someone a submitter, reviewer or approver for a department. There are two ways to assign them:
- By user: Organization Mng → User → User - Department - Role. Pick the user; the grid shows one row per department and one column per role. Tick the boxes.
- By department: on Organization Mng → Department → Departments, click the person icon (Assign users to roles) on a department and add users to each role.
| Role | Level | In tiers |
|---|---|---|
| Submitter | Level 1 | Presubmission, Submission |
| Submission approver | Level 2 | Presubmission, Submission |
| Review User | Level 1 | Approval, Validation, Confirmation |
| Review approver | Level 2 | Approval, Validation, Confirmation |
A role can be given to someone in a department only if that role is enabled for the department (Organization Mng → Department → Department - Roles). Someone who should create submissions needs a role in their department; otherwise it is not offered as Submitting department.
Access roles#
Access roles control the menus. The standard access roles are General user, Low admin, High admin and Super admin. Assign them on:
- Organization Mng → User → User - Access roles: pick a user, tick their access roles;
- Organization Mng → User → Access role - Users: pick an access role, tick its users.
Menus and page permissions#
Every page is a menu item. A user can open a page only if the menu item is linked to one of their access roles; menus show only the items the user may open. Pages opened from a submission (preview, print, stamping) follow the submission.
| Page (Organization Mng → Menu) | Use it to |
|---|---|
| Menus | Create menus and sub-menus; choose icon, position and whether it sits in the top (T) or left (L) menu. |
| Menu Items | Register pages: name, position and page URL. |
| Menu - Menu Items / Menu Item - Menus | Place pages in menus. |
| Menu Items - Roles / Roles - Menu Items | Decide which access roles may open each page. |
DefaultUserAccessRoleName). Everyday users only need the left menu (My Tasks, My Emails, My Reports);
keep the Settings, Administration, Logs and Platform menus for administrators.
Roles#
Organization Mng → Roles lists every role with three flags: Is Access Role, Is Department Role and Is Contact Role (contact roles describe partner contacts, such as CEO or Project manager).