See Security for all roles.


Roles Used by Maven


UAAR_BusinessAdmin [Applies to DataLog, ClickForms, Maven]
These users have access to set up Rule Sets and the Sale Index. As part of that setup, they can control the Server Responses. This includes marking responses as approved and merging responses to clean up sale data. The UAAR_BusinessAdmin role is also required to delete sales from the Enterprise database.


UAAR_MavenApi [Applies to Maven]
Used for third parties to access the read only API functions.


UAAR_MavenApiWrite [Applies to Maven]
Used for third parties to access the read only API functions.


UAAR_MavenUser [Applies to Maven]
This role is needed to log into the Maven website. It does not grant any access beyond logging in. In order to see any data or do any work users will need additional roles.


UAAR_ModelAdmin [Applies to Maven]
User can create, edit and approve models. This includes everything under the top level “Setup” item


UAAR_ModelEditor [Applies to Maven]

User can edit existing models.


UAAR_ReportCreate [Applies to Maven]
User can create a new appraisal or evaluation. This user automatically has the  UAAR_SubjectEntry permissions as well.


UAAR_ReportSupervisor [Applies to Maven]
Allows the user to apply a second signature to complete reports started by trainees.


UAAR_ReportView [Applies to Maven]
User can search for and view appraisal reports or evaluations saved in the system.


UAAR_SubjectEntry [Applies to Maven]
Allows the user to enter new subject properties


UAAR_SystemAdmin [Applies to DataLog, Maven]
This user has access to set up Database Roles and Access Groups. In order to set up Database Roles for new users, a SQL database user may need to be added. To accomplish this the UAAR_SystemAdmin role is granted the system role of db_securityadmin. If a domain account or group is given access to a database role and that user is not a user in the database, the system stored procedure sp_grantDBaccess is executed to grant that user access.

--------

UAAR_WebService [Applies to Maven]
This role should not be assigned to end users. It should be used by the service account connecting to the database from the Web Application.