Adding new users - Infor documentation is contradictory to our experience

I am writing up a guide for our team, to add new users in LSF10 security. I decided to look up a couple of things as I never really knew what some of the values were for, and I noticed this section:

Add Environment Information (Basic) for the New User
This topic describes how to complete Screen 3 of the Add User Wizard. This screen is for populating the Locale field and for ensuring that the Data Are/ID field is populated is populated.
Note: If you are upgrading to Lawson System Foundation from an earlier version, you might have data in fields like User Group, Printer Group, and so on. These are either carry-overs from the earlier releaseand, in some cases, default values. They can be ignored in Version 10.

I certainly cannot ignore the User Group field. In fact, if I don't add it in LID (USERGRPDEF) the user will not be able to log in to the portal at all.

Does anyone else have a different experience with this field?

I also noticed this section:

To add basic Environment information
1 From the Add / Modify Environment Information screen, select a Locale and then move into theData Area/ID field.
2 If Data Area/ID is not populated, select the appropriate data source now.
Typically, this field will be pre-populated with what you selected for Product Line on the Add RM Information screen (Screen 1 of the wizard). Make sure that it matches Product Line from the Add RM Information screen.

I have never, EVER, had this field to be pre-populated after I enter the product line on the RMID screen. I always have to add it here as well as on the first screen.

Anyone else find this to be different from their own experience?

I was actually looking for an explanation of why this field needs to be populated - i.e., what it does for the user. But that information is not provided either.

I appreciate any thoughts on this.

Find more posts tagged with

Comments

Derick Safarian

In my experience, the requirement is that ANY of these fields on the Environment screen is required. It doesn't matter which field you populate, as long as you populate at least one of them. When you populate any of these fields, a user record is created in the GEN Data Area. If you don't populate one of these fields, then the record is not created in the GEN data area, and that's when the user is unable to log in to Portal.

Legacy Contributor

The only field that we have to add is the product line. It is never pre-populated. We never put anything in the User Group Field. If we don't fill in the product line then the user cannot log in.

0712131256598360.doc

Legacy Contributor

Actually - I believe a user should be able to login to Portal even if GEN information is not populated (e.g. EMSS users are set that way). However, such user will not be able to run jobs or do any tasks that require Environment identity.

0906221040039255.pdf

Robert Canham

Our experience has been that if they're not using the privileged identity for their access (such as you would set for EMSS users) they have to have the full environment information to login. We see portal role errors if they're not in a user group.

Legacy Contributor

It may depend on how you use the system. I'm on V10 with Portal RQC and Portal S3 users. I must also add users to a Env Group we use ALL using usergrpdef. Product Line does populate automatically on the ENV screen but I don't believe it is required there. All my old users who were copied over from V9 to V10 don't have that field populated and they have no access issues.

asztudenyak

Here is another one this is from page 124 | Resources and Security Administration Guide:

In previous releases of Infor Lawson System Foundation, all users needed identities on the Environment / OS service. As of SP2 and later, this is no longer the case. Online-only users do not need these identities. If you have online-only users who have identities on this service, you do not have to remove them. When you add new online-only users, skip this procedure.

HUH??? Our users absolutely need environment identities to access the application! How can this documentation be so incorrect???

Or are they meaning "online users" are only those that use only ESS??

anthony-sisneros

You need an environment identity only for batch users. That is because they need to access the file system and look at their batch reports. The document states "Online-only users". For Online-only users, they use the ONLINE priviledged identity that you defined for all Online-only users.

asztudenyak

Therefore my last statement

"Or are they meaning "online users" are only those that use only ESS?? "

is true. THAT was my question. The documentation is very confusing on this point. ESS-only users (which is how we identify them, as ALL of our users are working "online") DO need an identity service, but they do not need the environment identity.

Copyright © 2025 Infor. All rights reserved.