Home
Administration
Details on system administration tasks such as setup and maintenance of databases and add-ons, user accounts, access rights, and migration and update procedures.
Rights and permissions
PLA 3.0 provides the features you need to control access to your data in a sophisticated and compliant manner. It combines role-based user rights with resource-based permissions, which enables you to exercise fine-grained control over who can perform particular tasks in a given context and which tasks are allowed with particular data.
Account management
Set up users, groups, and global roles. Use global roles to control who can perform particular database tasks such as setting up database policies or managing user sessions. Set up document roles and assign them to users and groups to define security contexts. Apply these security contexts to folders to control who can perform particular document tasks.
Security contexts
Assign document roles to PLA 3.0 users and groups to define security contexts. Use security contexts to implement your permission system and control who can perform which tasks on documents stored in particular folders or folder trees.

Get started
Explore PLA 3.0, its key features and ongoing enhancements. Learn how it fits into your environment, and how to log in and register.
User interface
PLA 3.0 supports you in your daily work by providing a set of graphical and textual user interface elements. Learn about the different elements and how to use them efficiently.
Key concepts
Details on documents and templates, the data editors and the Content editor of PLA 3.0.
Data analysis
Data analysis add-ons offer a wide range of capabilities, ranging from analytical methods over comprehensive analysis to statistical process control. PLA 3.0 also provides a set of add-ons that support and supplement data analysis add-ons.
Data import
Use data acquisition and data import add-ons to import external response values and observation data into PLA 3.0 for further processing and evaluation.
Installation
Details on the deployment and installation of licensed PLA 3.0 versions.
Licensing
Details on the licensing solution of PLA 3.0, the available licensing options, and the activation and management of licenses.
Administration
Details on system administration tasks such as setup and maintenance of databases and add-ons, user accounts, access rights, and migration and update procedures.
- Databases
  PLA 3.0 databases store all your data and also hold information such as user accounts, rights and permissions, signatures, and audit trail information. When logging in to PLA 3.0, users connect to a specific database, which sets their work environment for the session.
- Extensibility with add-ons
  PLA 3.0 consists of a framework and add-ons. The PLA 3.0 framework handles data as electronic documents. It provides the features you need to achieve regulatory compliance such as access control, data integrity, security, validation, and traceability.
- Rights and permissions
  PLA 3.0 provides the features you need to control access to your data in a sophisticated and compliant manner. It combines role-based user rights with resource-based permissions, which enables you to exercise fine-grained control over who can perform particular tasks in a given context and which tasks are allowed with particular data.
  - Account management
    Set up users, groups, and global roles. Use global roles to control who can perform particular database tasks such as setting up database policies or managing user sessions. Set up document roles and assign them to users and groups to define security contexts. Apply these security contexts to folders to control who can perform particular document tasks.
    - Global roles
      Combine database tasks into global roles and assign them to users and groups to control who can perform particular database tasks.
    - Document roles
      Set up document roles as a preliminary step in defining the security contexts you need for the database. Combine document tasks into document roles to control who can perform which tasks on documents stored in particular folders or folder trees.
    - Groups
      Set up PLA 3.0 user groups to assign them global roles and combine them with document roles into security contexts. PLA 3.0 allows you to use secure LDAP (LDAPS) directory services to map your PLA 3.0 groups to user groups defined elsewhere on your network.
    - Security contexts
      Assign document roles to PLA 3.0 users and groups to define security contexts. Use security contexts to implement your permission system and control who can perform which tasks on documents stored in particular folders or folder trees.
      - Security contexts tab
        Create, modify, and delete security contexts for the database.
      - General tab
        Configure security contexts and assigned roles.
      - Folders tab
        The following table explains the features and controls available in the Security contexts dialog.
      - Set up security contexts
        Set up additional security contexts to achieve fine-granular control over the actions particular users and groups can perform in particular folders and folder trees.
    - Users
      If you do not have access to LDAP directory services on your network, you can set up user accounts directly in PLA 3.0.
    - Define translations
      Define translations in the preferred languages of your users PLA 3.0 then displays the description in the language preferred by the current user, according to the language settings of the operating system.
  - Folder properties
    Set up folder properties to restrict the content of folders to particular document types and to documents generated from particular document templates. Set the names of folders. Customize the identification key formats of folders and of the documents and templates they contain.
  - Directory service
    Use secure LDAP (LDAPS) directory services, such as Microsoft Active Directory Domain Services, to authenticate PLA 3.0 users. You map your PLA 3.0 groups, which have PLA 3.0 roles assigned, to user groups set up on a directory server. You cannot directly assign directory users to PLA 3.0 groups.
- Update, upgrade, and migrate
  Find details on how to update, upgrade or migrate your environment to work with the latest version of PLA 3.0.
Regulatory compliance
PLA 3.0 supports you in achieving compliance with regulations such as ISPE GAMP^® 5 and 21 CFR Part 11. It also provides options to validate PLA 3.0 in your environment.
PDF downloads
Download PDF guides of current and previous framework and add-on versions.
Sample lab
Meet the team of Stegmann Labs Inc. and use our sample laboratory to explore core features and functions of PLA 3.0.
Glossary
Find definitions of terms.

Security contexts

Assign document roles to PLA 3.0 users and groups to define security contexts. Use security contexts to implement your permission system and control who can perform which tasks on documents stored in particular folders or folder trees.

Navigation: System > Account management > Security contexts

Tip: By default, PLA 3.0 databases contain one predefined security context, the 'Root security context.' Automatically assigned to it are the Root folder and, by inheritance, all its subfolders.

The following figure shows the Security contexts list and related tabs:

Setup of users in PLA 3.0 — Figure 1. Setup of users in PLA 3.0


No.	Description
1	Select the top entry of the Security contexts list to display the Security contexts tab, where you create, modify, and delete security contexts for the database. For details, see the Security contexts tab topic.
2	Expand the Security contexts list and select an entry to display the General tab and the Folder tab, where you can modify the settings of this security context, create and add new role-to-subject assignments, and view a list of all folders that belong to this security context. For details, see the General tab and Folders tab topics.