When using Teamcenter to manage our data, often there are users who will need to reference product information and documentation in a controlled manner.  

We cannot simply rely on the type of license that has been assigned to an account to restrict access to data that has been released to production.  

The following example outlines a supported procedure using Teamcenter Access Manager to allow a group of users to access only specific documents that have been reviewed and released to production.

When using Access Manager, we can get quite granular as to the type of documents and the status of each.  This way you can isolate the search results for these users to only provide the specific document that they are looking for without having to traverse a list of unwanted results.

In order to perform the changes we use in the example provided, we need to be a user that has DBA access defined and we also need to secure a backup of the existing Access Manager Rule Tree before we make any changes in Access Manager.  We need also to have a very clear plan that is documented and reviewed to consider any or all impacts the changes you are making will have on other data.

First we will create the Group and Role to be restricted 

Currently I have the Group "Shop Floor"

Below Shop Floor I have the Role "Viewer"

I have the User "shop" created withinthis Group / Role.

‍

If we login as the user "Shop" andsearch on the Engine, we will currently see the following results: 

‍

‍

In the remaining steps we will apply Access ManagerRules to restrict access to data in Teamcenter for the Group "ShopFloor".

‍

NEXT we will add the following rules to restrictaccess to all data… as we add the following Rules (2) into the

Has Class (POM Application Object) - Working

Has Class(Item Revision) -> Restrict Access

 Has Class(Dataset) -> Restrict Access

 As Shown Here:

‍

‍

Now we will perform the same search as shown above on theEngine to show what the user will see now with the above changes in place:

Now we do NOT see the Engine when we search on DFA-001

‍

NEXT we will add Access Manager Rules to Permit Read Access to PDF's that have the Status of Released.

‍

NOTE:

We have applied the Status (Released) to the Engine.

‍

‍

Now with the above Access Manager Rule we allow Read Access to the PDF for Data that isReleased.

FINALLY we login as the user Shop and examine the results when we search for the Engine: 

‍

‍

Now we have allowed access of Read to the PDF:

‍