What you will learn
Section titled “What you will learn”Translate a job responsibility into an access matrix.
Prerequisites: IFS Cloud essentials. No IFS login is needed for this written exercise. Estimated reading time excludes practice.
The concept
Section titled “The concept”IFS Cloud permission sets organize access. The documented model distinguishes end-user roles from functional roles, and grant structures can give users indirect access. Assess the effective grants, not just one visible assignment. Exact role design must follow your release and organization’s access policy.
A worked scenario
Section titled “A worked scenario”A coordinator needs to view handovers and update their reference. A supervisor also approves exceptions. Giving both users a broad administrator role makes the example work but does not establish an appropriate design.
Work through it
Section titled “Work through it”- List tasks as verbs: view, update, approve, administer.
- Assign each task to a business role before discussing technical grants.
- Identify which projection or feature supports the task with an authorized administrator.
- Test allowed and denied actions using representative users.
Try it yourself
Section titled “Try it yourself”Build a two-role matrix for coordinator and supervisor. Decide who can read, update a reference, approve an exception, and administer access.
See a suggested answer
Both roles read; the coordinator updates a reference; the supervisor approves exceptions. Access administration belongs to a separate responsibility. This is a fictional role design, not a delivered IFS permission-set definition. Have the business owner approve it before mapping grants.
Check your understanding
Section titled “Check your understanding”Copying all grants from a powerful user to resolve a single error. Investigate the missing task and the effective grant structure.
Expected result: a written answer that explains your decision and identifies what still needs confirmation in the actual environment.
Cleanup: none; this exercise changes no IFS data.
Sources and review status
Section titled “Sources and review status”IFS Cloud 26R1 documentation. Source consulted 2026-09-23. The scenario and exercise are original fictional examples. This concept draft has not been reviewed by an IFS specialist or executed in an IFS environment.
Apply this lesson in the handover-reference project.