- •About This Guide
- •Getting Started with Windchill Administration
- •Regarding Arbortext Content Manager
- •Regarding Pro/INTRALINK
- •Regarding PTC Windchill PDM Essentials
- •Overview
- •Regarding Global Product Development Package I
- •Logging On as the Administrator
- •Establishing Administrators
- •Organization Administrators
- •Windchill PDMLink Administrators
- •Creating a Product or Library
- •Windchill ProjectLink Administrators
- •Creating a Project or Program
- •Creating Users to Select as Administrators
- •Establishing End Users
- •Using an Enterprise Directory Service
- •Using the Participant Administration Utility
- •The Next Steps
- •Administration Overview
- •Your Installed Windchill Architecture
- •Your Installed Windchill Environment
- •Managing Your System
- •Managing User Access to Data
- •Product and Library Hierarchy
- •Program and Project Hierarchy
- •Hierarchy for Integral Windchill Solutions
- •Managing Access to Data through Access Control Rules
- •Shared Teams
- •Product, Library, Project, and Program Contexts
- •Contexts using Share Teams
- •Contexts with Private Access
- •Products and Libraries without Private Access
- •Projects and Programs without Private Access
- •Setting Up User Access to Data
- •Managing Users
- •Managing Data
- •Data Types
- •Subtypes
- •Visualization Data
- •CAD Data
- •Dynamic Document Data
- •Document Data
- •Part Data
- •Auditing
- •Managing Windchill Processes
- •Planning Object State Change Policies
- •Managing User Collaboration
- •Additional Administrative Groups
- •Post-Installation Activities
- •Overview
- •Context Administrative Items
- •Context Configuration
- •Editing the Context Configuration
- •Context Structure
- •Installed Site Context Structure
- •Editing Context Structure
- •Context Participation
- •Installed Site Context Participation
- •Roles
- •Groups
- •Editing Context Participation
- •Context Policies
- •Installed Site Context Policies
- •Access Control Rules for / (Root) Domain
- •Access Control Rules for /User Domain
- •Access Control Rule for /User/Unaffiliated Domain
- •Access Control Rules for /Default Domain
- •Access Control Rules for /System Domain
- •Indexing Rule for / (Root) Domain
- •Updating Context Policies
- •Context Data Types and Attributes
- •Installed Site Context Data Types and Attributes
- •Editing Context Data Types and Attributes
- •Templates
- •Installed Site Templates
- •Organization Context Templates
- •Workflow Templates
- •Life Cycle Templates
- •Team Templates
- •Document Templates
- •Project Templates
- •Program Templates
- •Product Templates
- •Library Templates
- •Report Templates
- •Task Form Templates
- •Editing Templates
- •Removing, Hiding, or Disabling Templates
- •Managing Document Template Preferences
- •Object Initialization Rules
- •Installed Site Object Initialization Rules
- •Adding and Changing Object Initialization Rules
- •Context Preferences
- •Creating the Contexts from which Users Work
- •Using Out-of-the-box Context Templates
- •Administering Domains and Policies
- •Context and Domain Hierarchy Overview
- •Domains in the Site Context
- •Creating Domains
- •Defining Domain-based Policies
- •Using the Policy Administration Utility
- •Specifying Policy Rules in a Context Template
- •Assigning Domains to Folders in Solutions with Products and Libraries
- •Organization Domain Algorithm
- •Using Dynamic Roles
- •Using Dynamic Roles in a New Organization
- •Using Dynamic Roles in an Existing Organization
- •Out-of-the-box Numbering Schemes
- •Changing Numbering Schemes
- •Understanding the Use of Versioning Schemes
- •Master
- •Version
- •Revision
- •Iteration
- •Initial Versioning Rules
- •Preferences for Revision Labels
- •Changing Versioning Schemes
- •Administering Preferences
- •Best Practices for Monitoring and Maintenance
- •Understanding the Site
- •Site Administration Overview
- •Typical Duties of Site Administrators
- •Creating and Managing Organizations
- •Adding and Editing Members
- •Changing Default Configuration Options
- •Managing Site-level Types and Type-specific Attributes
- •Managing Site-level Templates
- •Managing Site-level Object Initialization Rules
- •Managing Workflow Security
- •Auditing System Information
- •Creating and Managing Profiles
- •Configuring External Vaults or Replication Sites to Optimize Performance
- •Configuring and Managing CAD Publishing Utilities
- •Manage Package Configurations
- •Creating, Updating, and Managing Reports
- •Managing Calendar Settings
- •Monitoring Enterprise Systems Transactions Log
- •Purge, Archive, and Restore Jobs
- •Managing Searches
- •Creating and Managing Access Control Policy Rules
- •Viewing and Managing Access Control Rules for Objects
- •Creating Public Information Page Tabs
- •Managing Arbortext Editor Installation Bundles
- •Managing Overall System Configuration
- •Making Program Contexts Visible
- •Administering the Windchill Mobile App
- •Out-of-the-Box Site Configuration
- •Site Administration Best Practices
- •For All Windchill Solutions
- •Managing User Licenses
- •Establishing Site Administrators
- •Enabling Display of Quantity, Unit, and Reference Designator Attributes on Substitute Parts
- •Displaying Alias Attribute Information for a Workflow Primary Business Object on the My Tasks Table
- •For Windchill Solutions with Products and Libraries
- •Setting Object Initialization Rules
- •Setting Up Enhanced Life Cycle Templates
- •Overriding and Reassigning Life Cycle and Team Templates
- •Enabling Set Revision While Creating a New Object
- •Understanding Organizations
- •Organization Administration Overview
- •Managing Organization Members, Groups, Roles, and Shared Teams
- •Managing Organization-level Types and Attributes
- •Managing Organization Templates
- •Auditing Activities Within the Organization
- •Creating and Managing Access Control Policy Rules
- •Viewing and Managing Access Control for Objects
- •Creating and Managing Profiles
- •Configuring Numbering and Versioning Schemes
- •Monitoring and Managing Viewable Publishing
- •Viewing Reports
- •Importing and Exporting Information
- •Purging, Archiving, and Restoring Jobs
- •Managing Preferences
- •Undoing a User Checkout
- •Creating Public Information Page Tabs
- •Administering the Windchill Mobile App
- •Out-of-the-box Organization Templates
- •Context Structure
- •Context Participation
- •Context Access Control Policies
- •Access Control Rules
- •Default Domain Rules
- •System Domain Rules
- •Private Domain Rules
- •Organization-specific User Domain Rules
- •/Default/PDM Domain Rules for General (PDM) Template
- •Default/PDM Domain Rules
- •Default/Project Domain Rules
- •Context Data
- •Creating an Organization Context
- •Owning Organization Participants
- •Setting Up Domains for Use with Owning Organization Participants
- •Using the Organization Utilities Page
- •Changing an Established Internet Domain
- •Best Practices
- •For All Windchill Solutions
- •Email Addresses
- •Displaying Alias Attribute Information for a Workflow Primary Business Object on the My Tasks Table
- •For Windchill Solutions with Products and Libraries
- •Setting Object Initialization Rules
- •Setting Up Enhanced Life Cycle Templates
- •For Windchill Solutions with Projects and Programs
- •Allowing All Organization Members Read Access to Project or Program Content
- •Overview
- •Managing Team Members and Roles
- •Establishing Roles
- •Controlling the Visibility of Actions
- •Overriding Profiles
- •Moving Objects
- •Additional Product and Library Team Information
- •Managing Folders
- •Managing Templates
- •Managing Object Initialization Rules
- •Viewing and Managing Access Policies
- •Configuring Numbering and Versioning Schemes
- •Managing the Life Cycle of Parts, Documents, CAD Documents, and Dynamic Documents
- •Managing Viewable Publishing
- •Managing Preferences
- •Undoing a User Checkout
- •Importing and Exporting Information
- •Configuring External Vaults or Replication Sites to Optimize Performance
- •Creating a Product
- •Creating a Library
- •Administering Teams
- •Product Design Template
- •Out-of-the-box Subfolder for wt.maturity.PromotionNotice Objects
- •Out-of-the-box Context Participation
- •Out-of-the-box Context Access Control Policies
- •Team Roles and Groups
- •Rules for the GUEST Group
- •Default Domain Rules for the GUEST Group
- •System Domain Rules for the GUEST Group
- •Rules in Default Domain for the MARKETING Group
- •Rules in Default Domain for the PROCUREMENT ENGINEER Group
- •Rules in Default Domain for the QUALITY ENGINEER Group
- •Rules in Default Domain for the DESIGNER Group
- •Rules in Default Domain for the MANUFACTURING ENGINEER Group
- •Rules in Default Domain for the DESIGN TEAM LEADER Group
- •Rules in Default Domain for PROMOTION REVIEWERS Group
- •Rules in Default Domain for CHANGE REQUEST REVIEW BOARD Group
- •Rules in Default Domain for PROMOTION APPROVERS Group
- •Rules for PRODUCT MANAGER Group
- •Default Domain Rule for PRODUCT MANAGER Group
- •System Domain Rule for PRODUCT MANAGER Group
- •Rules in Default Domain for CHANGE ADMINISTRATOR I Group
- •Rules in Default Domain for CHANGE ADMINISTRATOR II Group
- •Rules in Default Domain for TEAMMEMBERS Group
- •Rules in System Domain for TEAMMEMBERS Group
- •Rules in Default Domain for COLLABORATION MANAGER Group
- •Rules in Default Domain for VARIANCE APPROVERS Group
- •Rules for SHARED TEAM MANAGER Group
- •Default Domain Rule for SHARED TEAM MANAGER Group
- •System Domain Rule for SHARED TEAM MANAGER Group
- •Rules for OPTION ADMINISTRATOR Group
- •Default Domain Rules for OPTION ADMINISTRATOR Group
- •System Domain Rules for OPTION ADMINISTRATOR Group
- •Rules in Default Domain for OWNER
- •Out-of-the-box Object Initialization Rules
- •General Product and General Library Templates
- •Out-of-the-box Context Participation
- •Out-of-the-box Context Access Control Policies
- •Team Roles and Groups
- •Rules for the GUEST Group
- •Default Domain Rules for the GUEST Group
- •System Domain Rules for the GUEST Group
- •Rules in Default Domain for CHANGE REQUEST REVIEW BOARD Group
- •Rules in Default Domain for PROMOTION APPROVERS Group
- •Rules in Default Domain for PROMOTION REVIEWERS Group
- •Rules for PRODUCT MANAGER and LIBRARY MANAGER Groups
- •Default Domain Rule for PRODUCT MANAGER and LIBRARY MANAGER Groups
- •System Domain Rule for PRODUCT MANAGER and LIBRARY MANAGER Groups
- •Rules in Default Domain for CHANGE ADMINISTRATOR I Group
- •Rules in Default Domain for CHANGE ADMINISTRATOR II Group
- •Rules in Default Domain for TEAMMEMBERS Group
- •Rules in System Domain for TEAMMEMBERS Group
- •Rules in Default Domain for COLLABORATION MANAGER Group
- •Rules in Default Domain for VARIANCE APPROVERS Group
- •Rules for SHARED TEAM MANAGER Group
- •Default Domain Rule for SHARED TEAM MANAGER Group
- •System Domain Rule for SHARED TEAM MANAGER Group
- •Rules for OPTION ADMINISTRATOR Group
- •Default Domain Rules for OPTION ADMINISTRATOR Group
- •System Domain Rules for OPTION ADMINISTRATOR Group
- •Rules in Default Domain for OWNER
- •Updating Access Control Rules
- •Part to Document Relationships
- •Revised or Saved Part to Related Document
- •Document Version Used with Reference Link
- •Part to Part Relationships
- •Revised or Saved Parent Part to Child Part
- •Document to Document Relationships
- •Best Practices for Object Initialization Rules
- •Creating and Editing Projects and Programs
- •Managing Team Members and Roles
- •Controlling the Visibility of Actions
- •Establishing Roles
- •Overriding Profiles
- •Moving Objects
- •Managing Routing
- •Limiting Edit Privileges for All Action Items
- •Managing Templates
- •Managing Preferences
- •Importing and Exporting Information
- •Undoing a User Checkout
- •Viewing and Managing Access Policies
- •Managing Utilities
- •Part to Document Relationships
- •Revised or Saved Part to Related Document
- •Document Version Used with Reference Link
- •Part to Part Relationships (Projects Only)
- •Revised or Saved Parent Part to Child Part
- •Document to Document Relationships
- •Overview of Windchill Participants
- •Windchill Users
- •Windchill Groups
- •Windchill Organizations
- •Working with LDAP Directory Services
- •Searching for Participants in Administrative Clients
- •Best Practices for Windchill PDMLink and Windchill ProjectLink
- •Searching for Users and Groups
- •Managing Users
- •Changing User Passwords
- •Naming a User's Personal Cabinet
- •Associating Users with Profiles
- •Editing the Domain of a User
- •Deleting Users
- •Changing the Organization to which a User Belongs
- •Synchronizing Users with LDAP
- •Managing User-defined Groups
- •Working with User-defined Groups that are Maintained in a Directory Server
- •Deleting User-defined Groups
- •Managing Organizations
- •Deleting Organizations
- •Windchill Participant Status
- •Pending Users
- •Replicated Users
- •Activating Pending and Replicated Users
- •Best Practices for Assigning Domains to Participants
- •Receiving Administrative Notifications
- •Managing the Participant Cache
- •Automatically Purging Entries from the Participant Cache
- •Manually Purging Entries from the Participant Cache
- •Maintaining the Connections between Participant Objects and their Directory Server Entries
- •Registering a non-Windchill User
- •Profile Management
- •Creating Profiles
- •Profiles as a Visibility Control Mechanism
- •Default Profile Behavior for a New User
- •Global Default Settings
- •Overriding Profiles in an Application Context
- •Default Visibility for Application Context Managers
- •Out-of-the-Box Profiles
- •Profile Actions and User Interface Elements
- •Default Settings for Actions
- •Overview
- •Context Teams
- •Shared Teams
- •Understanding Life Cycles
- •Overview
- •The Life Cycle Model
- •Windchill Solutions
- •Life Cycle States
- •Basic and Advanced Life Cycles
- •Basic Life Cycles
- •Advanced Life Cycles
- •Managing Life Cycle Processes
- •Out-of-the-box Life Cycle Templates
- •Windchill PDMLink
- •Using the Product Design Template
- •Access Control for Parts Established Through the Product Design Template
- •Windchill ProjectLink
- •Security Labels and Agreements
- •Working with Life Cycle Templates
- •Life Cycle Properties
- •Defining Life Cycle Phases and Gates
- •State-based Revision Sequences by Life Cycle State
- •Transition Rules
- •Example of Defined Transitions
- •Transition Defaults
- •Role Mappings
- •Associating Life Cycles with Object Types
- •Defining Life Cycle Access Control Rules
- •Associating a Workflow Process with Phases and Gates
- •About Life Cycle Iteration
- •Importing and Exporting Life Cycle Templates
- •Promotion Process
- •Out-of-the-Box Workflow Processes using the Promote Transition
- •Manual Selection of Life Cycle and Team Templates
- •Defining Additional Life Cycle States
- •Best Practices
- •Life Cycle Support in Windchill ProjectLink
- •Life Cycle Teams in Windchill ProjectLink
- •Restrictions on Moving Objects Between Contexts
- •Understanding Workflow
- •Overview
- •Managing Workflow Security
- •Workflow Creators
- •Restricting Workflow-Embedded Java Code
- •Administrative Groups
- •Disabled Areas of the User Interface
- •Workflow Iteration
- •Testing an Edited Workflow Process Template
- •Using the Workflow Template Editor
- •Working with Workflow Templates
- •Navigating a Process Diagram
- •Placing Process Nodes
- •Declaring Variables
- •Defining an Assigned Activity
- •Defining a Subprocess
- •Defining Connectors
- •Defining Links
- •Process Manager Toolbar Access Control
- •Viewing Workflow History
- •Selecting Events
- •Using the Workflow History Viewer
- •Workflow Instance States
- •Out-of-the-Box Workflow Templates
- •Change Management Workflows
- •Change Activity Workflow
- •Change Notice Workflow
- •Change Request Workflow
- •Problem Report Workflow
- •Promotion Request Approval Process Workflow
- •Promotion Request Review Process Workflow
- •Variance Workflow
- •Out-of-the-Box Process Images
- •Workflow Template Execution Flags
- •Process Flags
- •Activity Flags
- •Both Process and Activity Flags
- •Modifying Execution Flags
- •Running SetConfiguration
- •Saving Your Work
- •Using Task Form Templates in a Workflow
- •Creating Task Form Templates with Adobe Forms Software
- •Electronic Signatures
- •Setting Up for Electronic Signatures
- •Requiring Electronic Signatures in a Workflow
- •Best Practices
- •Access Control and Workflow Templates
- •Using a Single Workflow in a Life Cycle Having Multiple States
- •Workflow Process Support in Windchill ProjectLink
- •Understanding Context Templates
- •Out-of-the-box Context Templates
- •Create a Context Template with a New Input File
- •Create a Template from the Current Context
- •Create a Context Using Export
- •Creating Business XML Files for Context Templates
- •Organization Templates
- •Product and Library Context Templates
- •Program and Project Context Templates
- •Required Contents of ZIP File Used for Importing a Context Template
- •Contents of Top-level XML File for Imported Templates
- •Managing Context Templates
- •Filtering Template Visibility
- •Enabling Templates
•Key contact list for organization administrators.
•Documents describing organization-level types, document templates, life cycle templates, and workflow process templates.
Managing Organization-level Types and Attributes
Organization administrators can create and modify subtypes and relationship constraints in the organization context; however, they cannot create or modify global attributes, units (quantities of measure and measurement systems), or global enumerations unless they are part of the Attribute Administrators group. You can use existing global attributes, units, and global enumerations created by the site administrator on types for your organization.
When subtypes and attributes are created within an organization context, they are kept separate from all other organizations and remain private.
For more information about types and attributes, see the help available from the
Type and Attribute Management utility.
Managing Organization Templates
An organization context can define a number of document, life cycle, and workflow process templates that can be used by all the application contexts within the organization. To ensure consistency and maximize efficiency, an organization may want to define templates for specifications, presentations, reports, proposals, meeting minutes, and so forth. Life cycle and workflow process templates may be associated with each of the defined templates. Each organization inherits the templates defined in the site and can either use these site-defined templates or override them by defining organization-specific templates with the same name.
The organization can inherit the product, library, project, and program templates defined at the site level, or you can override these templates by defining templates for your organization. If Windchill ProjectLink is installed, you can create project and program templates. If Windchill PDMLink is installed, you can create product and library templates. For more information, see Understanding Context Templates on page 393 .
You can restrict which templates are made available to the applications within your organization by choosing to hide certain templates at the organization level. By only hiding templates, you limit the templates displayed by default and still allow context managers to override which templates are hidden in their particular application context. If you want to prevent a template from being used, you can disable it.
For more information, see the help from Organizations Templates table.
146 |
PTC Windchill® Basic Administration Guide |
Managing Organization-level Object Initialization
Rules
You can configure how attributes (such as number) are displayed and generated using the Object Initialization Rules Administration utility. This utility defines how the initial attribute values for the object are established, how the attributes are displayed, and can determine basic relationships, such as life cycle association, when an object is created.
The Object Initialization Rules Administration utility is available from the Site or Organizations Utilities page. The rules established by the parent site are inherited by each organization context by default, but they can be overridden at the organization level. The rules are defined in XML format; you can view and update them.
For more information, see the Object Initialization Rules chapter of the PTC Windchill Specialized Administration Guide.
Auditing Activities Within the Organization
The auditing framework allows the system to capture historical information of who did what that caused changes in the Windchill database. The security auditing feature also provides a mechanism to retain historical records of security related events, such as privilege changes, team changes, and denial of access. Security audit reporting is helpful in highly regulated industries where it is necessary to identify events that may have resulted in a potential security breach.
Out-of-the-box, only the Organization Usage events are enabled. Any other specific events that you want captured must be individually enabled by the site administrator.
For more information, see the PTC Windchill Specialized Administration Guide.
Creating and Managing Access Control Policy Rules
The Policy Administration utility is used to create access control policy rules. You can create organization-level policies that apply to the entire organization from
Organizations Utilities. To establish site-level policies, create those policies that apply to all organizations in the system from Site Utilities.
You can define policies that control the level of access to information by organization members. For example, you may want to provide read access to all documents of type Engineering Specification to an engineering group in your organization. In this case, you need to first define an Engineering user-defined group and populate it with the appropriate members, then define a document type of Engineering Specification in your organization. Finally, you need to use the Policy Administration utility to define the access policy based on the document type, the group or groups provided access, and the access level.
Understanding Organizations |
147 |
Another way to centralize the administration of access control policy rules is to |
|
use the dynamic roles that are available from the Roles tab in the Policy |
|
Administration utility. By using dynamic roles, you can create access control |
|
policy rules using a domain established in the organization context that apply to |
|
the members of roles in the local and shared teams that inherit the rules. For |
|
additional information, see Using Dynamic Roles on page 100 |
. |
For more information about access control, see the PTC Windchill Specialized |
|
Administration Guide. |
|
Viewing and Managing Access Control for Objects
You can view both the ad hoc and policy access control rules that are set for objects (such as folders, parts, and documents) and then manage the ad hoc access control rules for the objects. Navigate to the object, and select the Manage Security action. From the Manage Security window, you can view access control for the object and set ad hoc access control rules for the object.
For more information, see the PTC Windchill Specialized Administration Guide and the online help available from the Manage Security window.
Creating and Managing Profiles
You can dynamically control which actions are visible to user, or group of users, within your organization by associating that information with a profile. Profiles are not an access control mechanism; they are a user interface control mechanism. A profile represents a typical category of user within a company and is based on the roles and privileges associated with that particular user category.
Profiles expose only the necessary functionality and information needed by a user. They create a focused and simplified user interface, reducing confusion by eliminating areas of the user interface that could be distracting.
For more information about profiles, see Profile Management on page 290
Configuring Numbering and Versioning Schemes
You can configure the number and versioning schemes used to uniquely identify parts, documents, and other objects in the organization. The organization context inherits the site-level schemes, but can optionally define its own schemes. In general, when a company is hosting Windchill for its internal users, the numbering and versioning schemes should be defined at the site level; you should not override the site-level schemes by defining schemes at the organization level.
For more information about numbering, see Administering the Numbering of
Parts, Documents, CAD Documents, and Change Objects on page 104
148 |
PTC Windchill® Basic Administration Guide |
For more information about versioning schemes, see Administering the Versioning |
|
of Parts, Documents, and CAD Documents on page 105 |
. |
Monitoring and Managing Viewable Publishing
You can monitor and manage the publishing of viewable files that are optionally generated when CAD models are checked into products, libraries, and projects. You can also configure and update the watermarks used by the visualization tool when viewing document and part content.
For more information, see the PTC Windchill Visualization Services Guide.
Viewing Reports
You can access several predefined reports for information contained within your organization.
For more information on available reporting functionality, see the online help available from Organizations Reports.
Importing and Exporting Information
You can exchange information with another server, or between servers, or between a server and a file system using the Windchill import/export utilities. These utilities read and write system information in the Windchill XML format. The workflow and life cycle administration utilities accessible to you integrate the import/export functions.
For more information, see Importing and Exporting Life Cycle Templates on page 326 and the help available from the Workflow, Template Administration utility.
Purging, Archiving, and Restoring Jobs
You can create and manage purge jobs with the Purge Management utility. If you have the applicable functionality installed, you can create purge jobs to permanently remove data from the Windchill system or create an archive of the data to restore at a later time. This would apply to viewing, restoring, and deleting the contents of projects and programs.
Managing Preferences
Using the Preference Management utility on the Organizations Utilities, you can manage preferences at the organization level. Preferences set at the organization level affect all application contexts and users within the organization. Some preference values can be overridden by application contexts within the organization, unless locked at the organization level.
Understanding Organizations |
149 |