Users and Security > Using Security Functions > Control Inventory Access by Site
  
Control Inventory Access by Site
Site security lets administrators control user access to inventory transactions at each site in a domain. Only authorized users can process transactions at secured sites.
Access is managed by user and by group. A user can access a site only if that user’s ID or group name appears in the Groups field in Site Security Maintenance (36.3.15).

Site Security Maintenance (36.3.15)
When a user enters a restricted site code in a site-controlled program, the system checks the value of the Groups field associated with the site in Site Security Maintenance. If the user does not belong to an associated group, or the user is not given specific access by user ID, an error message displays and the user cannot complete the transaction.
Programs Affected
Site security works with programs that change inventory data and have a Site field as part of the selection criteria.
Site security checks ranges of sites on batch update programs that meet the previous criteria: they affect inventory and have a Site field. This includes programs such as Regenerate Materials Plan (23.2) and Sales Order Auto Allocations (7.1.17).
Site security does not affect inquiry and report programs.
Delete and archive programs, Contract Control (11.5.24), and Quality Management Control (19.24) do not use site security.
You must set up each domain individually.
Implementing Site Security
Because of the complexities of security, it is important to plan site security carefully and to follow closely the procedures for creating user and group names and associations. Users who are not listed individually or who have no group memberships in Site Security Maintenance (36.3.15) cannot complete transactions at secured sites.
To implement site security, associate groups with users in User Maintenance or User Group Maintenance.
See Specifying Groups or Users.
Ranges of Sites
Many programs let you access a range of sites at one time. Site security controls data updates and processes for ranges of sites. If you enter a range of sites, you must have access to all of them for the update to occur.
When you enter a range of sites that includes sites you do not have access to, an error message displays for the first site code from which you are restricted. You must then adjust the site range to include only sites that you can access.