You define access profiles which define authorizations on where and when access is possible. These access profiles you can then assign to 1 or multiple persons. An access profile is in this way a reusable definition. When the access profile is changed, then the access rights for all the persons who have been assigned to this access profile will automatically change. This method is most used and is in many systems the only way to assign access rights to an employee.

In this tab you can assign 1 or multiple access profiles to an employee, although in practice you often only have to assign 1 access profile for each employee.

Although in practice one can often only assign 1 access profile per employee, it is possible to define multiple access profiles for 1 employee. At multiple access profiles these are being aggregated to know the entire access authorizations of an employee.

The use of multiple access profiles can mostly be interesting in case you assign 1 common profile to a group of employees, and in case you have separate profiles for extra accesses which do not count for everyone. This last one you then assign extra to the employees who are entitled to this access right.

The access profile which determines where and when access is allowed is defined separately. For more information on this, consult the help function Access.