Home
Administration
Details on system administration tasks such as setup and maintenance of databases and add-ons, user accounts, access rights, and migration and update procedures.
Rights and permissions
PLA 3.0 provides the features you need to control access to your data in a sophisticated and compliant manner. It combines role-based user rights with resource-based permissions, which enables you to exercise fine-grained control over who can perform particular tasks in a given context and which tasks are allowed with particular data.
Account management
Set up users, groups, and global roles. Use global roles to control who can perform particular database tasks such as setting up database policies or managing user sessions. Set up document roles and assign them to users and groups to define security contexts. Apply these security contexts to folders to control who can perform particular document tasks.
Security contexts
Assign document roles to PLA 3.0 users and groups to define security contexts. Use security contexts to implement your permission system and control who can perform which tasks on documents stored in particular folders or folder trees.
Set up security contexts
Set up additional security contexts to achieve fine-granular control over the actions particular users and groups can perform in particular folders and folder trees.
Assign security contexts to folders
Assign security contexts to folder to control what actions particular users and groups can perform in particular folders and folder trees. One folder can have only one security context at a time. A change immediately impacts the permissions for all documents in the subtree of the folder.

Get started
Explore PLA 3.0, its key features and ongoing enhancements. Learn how it fits into your environment, and how to log in and register.
User interface
PLA 3.0 supports you in your daily work by providing a set of graphical and textual user interface elements. Learn about the different elements and how to use them efficiently.
Key concepts
Details on documents and templates, the data editors and the Content editor of PLA 3.0.
Data analysis
Data analysis add-ons offer a wide range of capabilities, ranging from analytical methods over comprehensive analysis to statistical process control. PLA 3.0 also provides a set of add-ons that support and supplement data analysis add-ons.
Data import
Use data acquisition and data import add-ons to import external response values and observation data into PLA 3.0 for further processing and evaluation.
Installation
Details on the deployment and installation of licensed PLA 3.0 versions.
Licensing
Details on the licensing solution of PLA 3.0, the available licensing options, and the activation and management of licenses.
Administration
Details on system administration tasks such as setup and maintenance of databases and add-ons, user accounts, access rights, and migration and update procedures.
- Databases
  PLA 3.0 databases store all your data and also hold information such as user accounts, rights and permissions, signatures, and audit trail information. When logging in to PLA 3.0, users connect to a specific database, which sets their work environment for the session.
- Extensibility with add-ons
  PLA 3.0 consists of a framework and add-ons. The PLA 3.0 framework handles data as electronic documents. It provides the features you need to achieve regulatory compliance such as access control, data integrity, security, validation, and traceability.
- Rights and permissions
  PLA 3.0 provides the features you need to control access to your data in a sophisticated and compliant manner. It combines role-based user rights with resource-based permissions, which enables you to exercise fine-grained control over who can perform particular tasks in a given context and which tasks are allowed with particular data.
  - Account management
    Set up users, groups, and global roles. Use global roles to control who can perform particular database tasks such as setting up database policies or managing user sessions. Set up document roles and assign them to users and groups to define security contexts. Apply these security contexts to folders to control who can perform particular document tasks.
    - Global roles
      Combine database tasks into global roles and assign them to users and groups to control who can perform particular database tasks.
    - Document roles
      Set up document roles as a preliminary step in defining the security contexts you need for the database. Combine document tasks into document roles to control who can perform which tasks on documents stored in particular folders or folder trees.
    - Groups
      Set up PLA 3.0 user groups to assign them global roles and combine them with document roles into security contexts. PLA 3.0 allows you to use secure LDAP (LDAPS) directory services to map your PLA 3.0 groups to user groups defined elsewhere on your network.
    - Security contexts
      Assign document roles to PLA 3.0 users and groups to define security contexts. Use security contexts to implement your permission system and control who can perform which tasks on documents stored in particular folders or folder trees.
      - Security contexts tab
        Create, modify, and delete security contexts for the database.
      - General tab
        Configure security contexts and assigned roles.
      - Folders tab
        The following table explains the features and controls available in the Security contexts dialog.
      - Set up security contexts
        Set up additional security contexts to achieve fine-granular control over the actions particular users and groups can perform in particular folders and folder trees.
        Assign security contexts to folders
        Assign security contexts to folder to control what actions particular users and groups can perform in particular folders and folder trees. One folder can have only one security context at a time. A change immediately impacts the permissions for all documents in the subtree of the folder.
    - Users
      If you do not have access to LDAP directory services on your network, you can set up user accounts directly in PLA 3.0.
    - Define translations
      Define translations in the preferred languages of your users PLA 3.0 then displays the description in the language preferred by the current user, according to the language settings of the operating system.
  - Folder properties
    Set up folder properties to restrict the content of folders to particular document types and to documents generated from particular document templates. Set the names of folders. Customize the identification key formats of folders and of the documents and templates they contain.
  - Directory service
    Use secure LDAP (LDAPS) directory services, such as Microsoft Active Directory Domain Services, to authenticate PLA 3.0 users. You map your PLA 3.0 groups, which have PLA 3.0 roles assigned, to user groups set up on a directory server. You cannot directly assign directory users to PLA 3.0 groups.
- Update, upgrade, and migrate
  Find details on how to update, upgrade or migrate your environment to work with the latest version of PLA 3.0.
Regulatory compliance
PLA 3.0 supports you in achieving compliance with regulations such as ISPE GAMP^® 5 and 21 CFR Part 11. It also provides options to validate PLA 3.0 in your environment.
PDF downloads
Download PDF guides of current and previous framework and add-on versions.
Sample lab
Meet the team of Stegmann Labs Inc. and use our sample laboratory to explore core features and functions of PLA 3.0.
Glossary
Find definitions of terms.

Assign security contexts to folders

Assign security contexts to folder to control what actions particular users and groups can perform in particular folders and folder trees. One folder can have only one security context at a time. A change immediately impacts the permissions for all documents in the subtree of the folder.

Important: To change the security context of a folder, PLA 3.0 also has to lock all folders that inherit this change and the documents they contain. Make sure no other user has a lock on any of these folders and documents.

About this task

To change security contexts, you require the Change security context task permission.

Procedure

To change the security context of a folder:

In the Navigator, right-click the folder for which you want to change the security context.
From the context menu, select Advanced > Security context….
Result: The Change security context dialog opens, displaying the unique identification key of the folder to which the settings apply in the header.
In the Change security context dialog, from the New drop-down list, select the new security context you want to apply.
In this example, we apply the 'Lab A Security' security context.

Figure 1. Selection of a new security context for a folder

Important: Subtrees that are explicitly assigned to a different security context do not inherit the new assignment.
Confirm your selection with OK.