Archibus Security Groups

%CAD

This security group is typically used to give a user visibility to all CAD layers/elements, but only through roles, not through unrestricted editing rights.
In practice, it allows:

• Viewing all CAD elements in floorplans
• Access to all drawing layers (rooms, equipment, assets, boundaries, etc.)

This group is designed to give C‑suite users access to:

• High‑level portfolio dashboards
• Executive summary reports
• Financial roll‑ups
• KPI scorecards
• Space and occupancy summaries
• Lease and cost analytics
• Strategic planning reports

It is read‑only in most implementations.
Users.

Depending on your configuration, this gives users access to:

• Edit space attributes
• Editing of asset records
• Editing of maintenance data
• Editing of lease or portfolio fields
• Editing of project or cost data

…but only within modules the user already has access to.

Visibility to review‑restricted data across domains:

• Finance review fields
• Lease review fields
• Real Property review fields
• Maintenance review fields
• Space review fields

Review of sensitive info that is not editable.

Add new values from Select Values lists inside the Maintenance Console.

Create new:

• Problem Types
• Trades
• Craftspersons
• Equipment
• Locations
• Tools

• Mobile asset surveying
• Real-world asset validation
• Field data collection and updates
• Synchronization with Archibus Asset Management"

Register new assets in the field

Add new equipment or asset items

Capture the required validated data

Associate assets with divisions, departments, standards, buildings, etc.

Use “background (validating) data” provided by the facility manager

This includes:

• Equipment standards
• Departments and divisions

Only users in the Finance security group can view and edit fields.

Holding salary data

Only users in the Finance security group have access to the Analyze Finances process.

Users assigned to a role containing this security group can:                                     

• Approve and Reject transactions (the core function)
• Update the official Government Real Property Inventory (posting approved transactions)
• Add Age

Also functionally defined rather than given a short internal name.

Capabilities include:

• Create bookings across all departments, but still with date and approval restrictions.
• View bookings for all departments.
• Limited booking authority compared to Hoteling Administration.

This group grants limited elevated privileges, but not full administrative control.

Capabilities include:

• Create bookings for rooms assigned only to the user’s division/department.
• Book only future date ranges (not past/active bookings).
• View bookings assigned to them or their own division/department.

This group has full control over all hoteling operations.

• Create bookings for any employee, any division/department, any time (even in the past).
• Change division/department of an existing booking.
• View all bookings across the entire organization.
• Cancel any booking, even retroactively.
• Appr

In Archibus, a PO Approver (Purchase Order Approver) is typically a user who has permission to:

• Approve purchase orders
• Review procurement requests
• Release or reject POs
• Access specific procurement views or workflows

This is controlled through security groups, roles, and workflow rules.     

PROCESS OWNER isn’t a built‑in, universal Archibus security group.

It’s a role name many organizations create themselves to designate the person who owns a workflow or business process.

Archibus is highly configurable, the exact group name varies by implementation.

RESERVATION APPROVER      

   Reservations Approver  

Approve reservations for rooms/resources they are allowed to approve.

Similar to Assistant but limited to their own/for-them reservations.

All reservation features, can cancel multiple reservations.

RESERVATION SERVICE DESK    

A Review User is someone who can:

• View records
• Run reports
• Look at workflow status
• Review data without editing it
• Sometimes approve or comment, depending on configuration

Review features of RPLM that show summary and KPI features.

Review and edit features of RPLM.

A Tenant Reports security group is generally designed for users who need to:

• View lease information
• Run tenant‑specific reports
• Review occupancy or rent data
• Access dashboards or KPIs
• See space or portfolio summaries

For space, department, and move managers who would like to get a better handle on their space use and how it supports their businesses, this application provides self-service access to space usage reports and space inventory statistics.  

By accurately tracking space inventory, occupancy, and mana...

• View floor plans
• Browse rooms, space data, occupancy
• Use Space Book for reference (but no survey/posting capability)

• Download floor plans and space data
• Survey employee occupancy
• Record room use and occupancy percentages
• Update room and employee allocation data directly from the field

VIEW-ALL-WORK-REQUESTS    

The user can see every work request in the system, regardless of requester, department, problem type, or SLA owner.
In the Search & Manage Service Requests view, the system displays the Service Desk Manager filter field. Leaving it blank shows all work requests.

This security group overrides the..

WORKSVC-MOB