Home
Administration
Details on system administration tasks such as setup and maintenance of databases and add-ons, user accounts, access rights, and migration and update procedures.
Rights and permissions
PLA 3.0 provides the features you need to control access to your data in a sophisticated and compliant manner. It combines role-based user rights with resource-based permissions, which enables you to exercise fine-grained control over who can perform particular tasks in a given context and which tasks are allowed with particular data.
Account management
Set up users, groups, and global roles. Use global roles to control who can perform particular database tasks such as setting up database policies or managing user sessions. Set up document roles and assign them to users and groups to define security contexts. Apply these security contexts to folders to control who can perform particular document tasks.
Security contexts
Assign document roles to PLA 3.0 users and groups to define security contexts. Use security contexts to implement your permission system and control who can perform which tasks on documents stored in particular folders or folder trees.
Set up security contexts
Set up additional security contexts to achieve fine-granular control over the actions particular users and groups can perform in particular folders and folder trees.

Get started
Explore PLA 3.0, its key features and ongoing enhancements. Learn how it fits into your environment, and how to log in and register.
User interface
PLA 3.0 supports you in your daily work by providing a set of graphical and textual user interface elements. Learn about the different elements and how to use them efficiently.
Key concepts
Details on documents and templates, the data editors and the Content editor of PLA 3.0.
Data analysis
Data analysis add-ons offer a wide range of capabilities, ranging from analytical methods over comprehensive analysis to statistical process control. PLA 3.0 also provides a set of add-ons that support and supplement data analysis add-ons.
Data import
Use data acquisition and data import add-ons to import external response values and observation data into PLA 3.0 for further processing and evaluation.
Installation
Details on the deployment and installation of licensed PLA 3.0 versions.
Licensing
Details on the licensing solution of PLA 3.0, the available licensing options, and the activation and management of licenses.
Administration
Details on system administration tasks such as setup and maintenance of databases and add-ons, user accounts, access rights, and migration and update procedures.
- Databases
  PLA 3.0 databases store all your data and also hold information such as user accounts, rights and permissions, signatures, and audit trail information. When logging in to PLA 3.0, users connect to a specific database, which sets their work environment for the session.
- Extensibility with add-ons
  PLA 3.0 consists of a framework and add-ons. The PLA 3.0 framework handles data as electronic documents. It provides the features you need to achieve regulatory compliance such as access control, data integrity, security, validation, and traceability.
- Rights and permissions
  PLA 3.0 provides the features you need to control access to your data in a sophisticated and compliant manner. It combines role-based user rights with resource-based permissions, which enables you to exercise fine-grained control over who can perform particular tasks in a given context and which tasks are allowed with particular data.
  - Account management
    Set up users, groups, and global roles. Use global roles to control who can perform particular database tasks such as setting up database policies or managing user sessions. Set up document roles and assign them to users and groups to define security contexts. Apply these security contexts to folders to control who can perform particular document tasks.
    - Global roles
      Combine database tasks into global roles and assign them to users and groups to control who can perform particular database tasks.
    - Document roles
      Set up document roles as a preliminary step in defining the security contexts you need for the database. Combine document tasks into document roles to control who can perform which tasks on documents stored in particular folders or folder trees.
    - Groups
      Set up PLA 3.0 user groups to assign them global roles and combine them with document roles into security contexts. PLA 3.0 allows you to use secure LDAP (LDAPS) directory services to map your PLA 3.0 groups to user groups defined elsewhere on your network.
    - Security contexts
      Assign document roles to PLA 3.0 users and groups to define security contexts. Use security contexts to implement your permission system and control who can perform which tasks on documents stored in particular folders or folder trees.
      - Security contexts tab
        Create, modify, and delete security contexts for the database.
      - General tab
        Configure security contexts and assigned roles.
      - Folders tab
        The following table explains the features and controls available in the Security contexts dialog.
      - Set up security contexts
        Set up additional security contexts to achieve fine-granular control over the actions particular users and groups can perform in particular folders and folder trees.
        Assign security contexts to folders
        Assign security contexts to folder to control what actions particular users and groups can perform in particular folders and folder trees. One folder can have only one security context at a time. A change immediately impacts the permissions for all documents in the subtree of the folder.
    - Users
      If you do not have access to LDAP directory services on your network, you can set up user accounts directly in PLA 3.0.
    - Define translations
      Define translations in the preferred languages of your users PLA 3.0 then displays the description in the language preferred by the current user, according to the language settings of the operating system.
  - Folder properties
    Set up folder properties to restrict the content of folders to particular document types and to documents generated from particular document templates. Set the names of folders. Customize the identification key formats of folders and of the documents and templates they contain.
  - Directory service
    Use secure LDAP (LDAPS) directory services, such as Microsoft Active Directory Domain Services, to authenticate PLA 3.0 users. You map your PLA 3.0 groups, which have PLA 3.0 roles assigned, to user groups set up on a directory server. You cannot directly assign directory users to PLA 3.0 groups.
- Update, upgrade, and migrate
  Find details on how to update, upgrade or migrate your environment to work with the latest version of PLA 3.0.
Regulatory compliance
PLA 3.0 supports you in achieving compliance with regulations such as ISPE GAMP^® 5 and 21 CFR Part 11. It also provides options to validate PLA 3.0 in your environment.
PDF downloads
Download PDF guides of current and previous framework and add-on versions.
Sample lab
Meet the team of Stegmann Labs Inc. and use our sample laboratory to explore core features and functions of PLA 3.0.
Glossary
Find definitions of terms.

Set up security contexts

Set up additional security contexts to achieve fine-granular control over the actions particular users and groups can perform in particular folders and folder trees.

Note: You can set up any number of security contexts.

Procedure

Setting up security contexts requires the following general steps:

Use the Account management to create the security context you want to use.
Assign the relevant document roles to the new security context.
Use the Navigator to assign the new security context to a folder.

Example

You want to set up a permission system for laboratory A. Personnel for this laboratory will be supervisors and operators. You set up two user groups:

Group 'Lab A Supervisors' with the 'Functional Administrator' document role.
Group 'Lab A Operators' with the 'User' document role.

You create a new 'Lab A Security' security context and assign the document roles of your groups. If you now change the security context of all relevant folders to 'Lab A Security,' the existing permissions are replaced, and your new permission setup is activated.