Security Rights 101! This is harder than it looks! Need help with Security Rights set-Up

Hi,

Now that we are a year into the system my organization is getting all staff out of System Admin and back into their proper User Groups. It took us a week just to get all of the settings in there (since we have no idea what half of the security objects mean and they are much more granular than our old system).

The Help System was great, but that only got us so far. Now that everyone has been playing in their new worlds for the week (our go-live for the new set-up is July 1, so we are having staff go back and forth between their new access and system admin this week to see what they are missing), here are some of the issues we've come across:

1.User Group needs access to setting up new Price Type Layers
-For example, when building a brand new performance instead of copying, no price types exist and you need to build a new "Ticket Layer 1." What Security Objects are needed for that?

2.User Group needs access to change default sales times of a performance, but nothing else on the General screen. Is that even possible?
-We want our Shift Leads to be able to change the sales times in a pinch if someone arrives a few minutes late to an event, but we want to block them from changing anything else on that page.

3. User Group needs access to view and use Price Types in QuickSale and Order Details, but literally nowhere else!
-Our Visitor Services Associates need to be able to use different price types to sell in QuickSale, or change numbers of tickets on a price type in Order Details (for a pre-booked Group sales), but they need to be blocked from doing anything else with Price Types.

If someone could help me get the Security Access settings right for these few things I would appreciate it. We are also having issues with Lists and Extractions, but I don't want to go down the Control Group rabbit hole yet.

  • Hi Chelsea!

    Security Groups was one of my first tasks when I joined our consortium staff several years back. The Security Documentation is such a helpful resource (https://www.tessituranetwork.com/Help_System_v151/Content/Security/Table%20of%20Security%20Objects.htm) and we've gotten spoiled in recent years with the additional page that lists grouping by functional areas (https://www.tessituranetwork.com/Help_System_v151/Content/Security/Security%20Objects%20Grouped%20by%20Functional%20Area.htm). 

    Note, we are still in v15, so I'm not sure if things have changed at all if you are in v16.

    In answer to your specific questions:

    1. I believe this would be Tkt Setup Pricing Price Grids

    2. I don't believe the General Tab of Ticketing Setup is that granular, and a quick search of the documentation isn't lending any other answers there. Happy to be wrong if someone does know the answer here.

    3. This will be managed by your Price Types/User Group tab in Pricing Setup>Price Types in Tessitura or can be managed in Security on the Maintain Groups interface (Price Types button) or Assign Rights to Groups and select Price Types and associate with the correct user group. As long as the Visitor Services user group doesn't have ticketing setup rights, they should be able to sell these price types but not do any configuration. 

    Hope this helps!

  • I think you're right on #2, and also I believe just changing the default sale date on the general tab won't actually change the date on the Mode of Sale you need for selling tickets. If you want to change the actual sales time you'll need to do that on the MOS tab. 

  • To change sales times we usually end up changing all 3 (the general tab, the MOS tab, and the individual price types on the pricing tab).

  • 1. I gave this group full rights to the Pricing Grid, yet when I go through the process (I put myself into that group to test it), I can get through the first pop-up for the ticket layer set-up, but then when it gets to clicking and moving the other needed price types, it won't let me click anything and the "Set" button is completely greyed out. Not sure what setting fixes that. In the "Assign Rights to Groups" sections, I also gave this group access to all of the price types they will need, so I'm not sure why it's not working,

    2. I figured as much. Definitely something I might add to the idea board.

    3. Ok, I think my issue is more about my VSA's not adding any ticket types to a group order that don't belong there. For example, If we have our performance set up with the following Price Types "Landscape" (which is one of the student tours), "Chaperone" and "Collage" (which is their paired studio activity), we don't want the associates to be able to add in "Underwater" (a completely different tour for a completely different age bracket) or any other combination of tickets. For groups, we only want them to adjust the number of tickets for each type that is already there, not add new ones. That mistake hasn't happened yet...I'm just trying to avoid it so that it never does.

  • 1. I would maybe reach out to Tessitura Support on this. I'm playing with it in my TEST system and the Tkt Setup Pricing Price Grids setting is what controls this... but I'm not able to replicate what you are seeing. When I give full rights to my user groups they are able to add the price types and click Set on the layers. 

    3. I almost wonder if you could assign those specific price types to the MOS that the VSAs use, but not give their user group rights to them. We do this with Pricing Rules on TNEW when we have a price type change. We assign the price type to the Web MOS but not the Web User Group and the price type is available only when triggered by the pricing rule. You might test it and see if they can load an existing order and adjust quantities as you'd like them to.

  • 1. Thanks, I'll reach out to them today to see what's up.

    3. That's a good idea! I'll play around with it and see if it works!

  • Ok, I have another issue! All of the groups that need ticketing setup have access to all of their performance building and price types  in the set-up screen, but nobody has access on the Ticket Orders Screen! 

    These staff members need to be able to attach orders to the performances they built, and right now they can't! How do I fix that?! 

  • Are you saying they do have access to the Ticket Orders Screen, but they are not able to add the performances they set up to the order? There's a couple of reasons why that might be the case. Can you provide a bit more detail about what they are seeing/not seeing on the orders screen?

  • First thing I'd look at: does the user group have access to the MOS

  • So I figured out one problem. Tessitura for those User Groups was defaulting to Back Office (which we've never used, at least not yet). Once I switched it to the Groups or Rentals MOS I was able to find all of the missing performances.