Skills Curriculum 2010 - Administrator Fundamentals
Who is this article for?
Ideagen EHSQ - Formerly DevonWay Users
No elevated permissions are required.
Curriculum Objective
Introduction to Ideagen EHSQ (Formerly DevonWay)
Course 2010 - Administrator Fundamentals - DevonWay Docs
Objectives
By the end of this course, users will be able to:
- Perform administrative duties, manage login preferences, and adjust notifications
- Manage users, teams, reporting authorities, and subscriber role settings
- Assist with data analytic tools and web services settings
- Enforce and control security settings
How to use this course¶
Each course builds upon the previous course beginning with information every user needs to know adding information administrators and module developers must know.
Lessons¶
Course lessons cover topic-related features, processes, tools, tips, and tricks. The lessons work in tandem with DevonWay Docs, a built-in documentation center. Topics will be introduced in the course readings with links to a Docs page for details and descriptions.
Hands-on exercises¶
Upon completion of lesson reading materials, hands-on exercises allow users to practice their skills. Some exercises may build on each other. Skipping exercises might affect the exercise experience in future lessons.
Test and training areas are available for course exercises. As with any area, access to administrative settings is by role and reporting authority. To gain access to a testing environment with administrative access, contact a subscriber's Main Administrator.
Suggested Administrative Roles to Help Complete the Exercises:
- Area Administrator
- Data & Analysis Administrator
- Data Import Administrator
- Enhanced User Logging
- Interface Developer
- Module Developer
- Notifications Administrator
- Procedures & Forms Author
- SQL & Dataset Administrator
- Team Administrator
- User Access Control Administrator
Check Your Understanding¶
At the end of every lesson, the course will present a series of questions designed to self-assess and verify topic knowledge. Answers and links to additional documentation can be found under the referenced footnote.
Delivery Method¶
This 2000-level course is a Self-Paced training course.
In-person courses are available for administrators. Alongside essential administrative tasks, it includes instruction on application development concepts, foundational module construction, requirements gathering, testing techniques, and SQA principles. These elements are intended to enhance an administrator's ability to oversee an organization's applications effectively.
Pre-Requisite¶
The 1000-level courses cover common platform functions available to all users. Course 1010 is an introduction to the platform, common features, tools, and terminology. Course 1020 explores advanced features for reporting on child-level data, custom filters, and chart formatting.
Next Step¶
The 2000-level courses introduce tools to assist system administrators. The 2020-level course outlines administrative tools and recourses, TrakWay ticketing, platform releases, and requirement writing. Advanced module developer-level courses are offered as part of the 3000 and 4000 level courses.
Reminder
University courses will not cover applications specific to a subscriber's implementation requirements such as Condition Reports, Observations, Electronic Work Packages, etc.

Lesson 1: Understanding Subscriber Environments¶
Overview¶
Administrators are the application experts who manage system settings and functionality. They play a key role in the SQA policies that must be followed to ensure each environment stays up-to-date and secure.
Lesson Objectives¶
By the end of this lesson admins will be able to:
- Recognize the difference between the platform, applications, and modules
- Identify the four different subscriber environments
Reading¶
- The Platform is a Java-based, multi-tenant server software product designed to display the dashboard, search, reporting tools, presenting modules, and the REST interface
-
Subscriber Areas and Environments are completely isolated from each other even if they are hosted on the same physical server
- A strict SQA Process ensure that changes are properly submitted, reviewed, authorized, tested, and released
- A business processes (also called applications or modules) can be configured from a single module or multiple modules
Exercises¶
Exercise 1.1 - Environment Comparisons¶
- Login to a UAT or DVT Testing environment
- Note the difference between production and testing environments
- Dashboard settings
- Profile settings
- Roles and Record Access
- Reports
- Notifications are not sent in testing environments
- Data/field values (field prompts should be the same unless changes or updates are being made)
Check Your Understanding¶
- What language is the platform written in? 1
- How is subscriber information kept secure? 2
- What is the name of the environment where modules are built by module developers? 3

Lesson 2: Administration¶
Overview¶
Administrators must have the appropriate role to perform various duties. Users can be assigned many different roles and the same role can be applied to many different modules. Having the User Access Control Administrator or the Team Administrator role does not grant an admin the ability to create or modify Team objects. A user must also be assigned to a Subscriber Administrator role in a designated area to create and modify Team objects.
Lesson Objectives¶
By the end of this lesson, admins with the appropriate role will be able to:
- Modify user settings and reassign work
- Manage user roles
- Assign roles by mass
- Assist with login settings
- Assign users to teams
- Monitor changes using the Admin Audit Trail
- Define subscriber and module roles
Reading¶
- Admins can manage users and reassign objects that are connected to various functions like task assignments, reporting, notifications, etc.
- Each role serves a different purpose
- The User Access Control role has ultimate responsibility for that environment, as this role can assign all other roles including administrative roles
- Admins can assign user roles using the mass update
- Admins can manage SSO and username/password login behaviors
- Admins can assign a collection of users to teams that can perform functions such as task assignments, reporting, etc.
- Admins maintain changes to reference modules such as the Person or a Team module that contains subscriber specific fields
Note: These modules may also be connected to a Person or Team Interface - Admins can select and enable subscriber or module roles connecting the role to multiple modules
Exercises¶
Exercise 2.1 Roles¶
- Add a role to a user
- From the Administrative Settings User screen, search for and select a user
- In the right-hand panel, select Edit Roles and add a new role
- Reassign work to a different user using the instructions under Docs
- Review the mass update process to update multiple users to new roles
Exercise 2.2 Login¶
- Review company login policies and become familiar with administrative responsibilities
Exercise 2.3 Teams¶
- Add a user to a team using the Team administration screen
- From the administrative settings Team screen, select a team
- Under Team Members, add a New Member and Effective Dates
- Add a user to a team using the Team module
- In the module search at the top of the screen, search for a Team
- Select a Team to review the additional options in the Team module
- Notice that when a team is not managed by an interface, the team can be assigned to a team owner to manage
Exercise 2.4 Subscriber Roles¶
- Adjust a Subscriber role
- From the administrative Subscriber Roles screen, select a role from the Roles list and add a new API Role.
- Users with the role can now assign users from the API role to an object
Check Your Understanding¶
- Which roles are standard roles available in all environments?4
- Can a user with the Personal Role Administrator role assign themself to the Module Developer role?5
- Can Teams be deleted?6
- Can a user with the User Administrator role grant administrative rights to other users?7

Lesson 3: Area Tools¶
Overview¶
Area Administrators manage Administrative Tools, view, and modify preferences. They create and modify components, update toolbar buttons, and generate new "Create New" menu options. As a manager of their area, they are given access to troubleshooting screens like the Activity Dashboard and Search Logs.
Lesson Objectives¶
By the end of this lesson, admins will be able to:
- Create login messages
- Reassign user notifications
- Monitor performance reports
- Manage reporting authorities (RA)
- Set platform preferences
- Monitor platform batch job schedules
- Review search logs
- Create components
Reading¶
- Access to the Login Page Preferences screen allows admins to enter login messages, set access limitations, and specify a user's reporting authority
- Admins can manage user notifications and reassign them to other users
- Performance Statistics display user engagement information for admins to monitor
- The Activity Dashboard, while not commonly used by admins, tracks background processing jobs
- Careful consideration should be taken before making modifications to Reporting Authorities
- Admins can manage a host of company-level customization options, set password restriction policies, set anonymous access controls, change standard email overrides, update weekly email settings, and other useful settings through the Preferences screen
- Admins can view a listing of all "Back-end" batch-job schedules defined in the system
- Search Logs display a list of users who are logging into a session
- Using the Components admin screen, admins can create, modify, and manage elements that are visible to all users such as 'Create New' Buttons, Toolbars, or Dashboard Components
Exercises¶
Exercise 3.1 - Login Preferences¶
- From the Login Page Preferences screen, select "+ Message" to add a new message
- Add text by clicking the Message field
- Select/unselect Enable
- select where and when the message should appear, Messages Window, Login Page, or Show During Downtime
- Note how to require a Reporting Authority and select the required options from the Reporting Authorities list
Exercise 3.2 - Notifications¶
- From the Notifications screen, select a field to filter the result list
- Select edit from the Notifications grid
- Edit the notification fields
- To add or remove a user from the notification delete or search for and select from the recipient list
Exercise 3.3 - Performance Statistics¶
- From the Performance Statistics screen select a date and session details to see users engaged with the software and the session id
Exercise 3.4 - Activity Board¶
- When background, import, and print jobs are running in the Activity Dashboard will display job information
Exercise 3.5 - Reporting Authorities¶
- Review a RA*, noting the Code, Details, and Sequence options
*It is important to remember, changing an RA could have potential impacts on the security and/or the functionality of the system.
Exercise 3.6 - Preferences¶
Do not save exercise changes
Saving exercise changes can have potential impacts on the security and/or the functionality of the test environment.
- From the Preferences admin screen Global Preferences tab, review Global Preference settings
- Optimistic and Pessimistic Record Locking can be managed under the Concurrency Control tab
- Under the Password Policy tab, note that admins can reset all passwords or change various settings for companies who use the username and password option
- User SSO can be managed under the SSO Settings tab
- An Anonymous Access link can be used to collect object data for users with the appropriate Role and RA
- Review the list of Transient Features that have been built but not yet enabled.
Exercise 3.7 - Schedules¶
- Create a new schedule selecting the Frequency, how often it reoccurs, the day of the month or week, and hour
- Once a schedule is selected in a module, the module and a description will appear in the Where Used grid
Exercise 3.8 - Search Logs¶
- Select a date and time range that is only a few hours apart and search to view the system logs for that time.
Exercise 3.9 - Components¶
- Create a new menu
- Give the new menu a name before search and select from the Available Items list
- Select "Create New" from the tool bar to view the new "Create New" menu
- From the Toolbar Buttons option add a toolbar button
- Give the new button a title and place a link inside it by searching from reports, dashboards, external URL's, objects, "Create New" buttons, and messages before saving the button
- Select the home screen to view the new toolbar button
- Create a new Dashboard Component
- Give the new components a title and place the links to a component element inside the component before saving.
- Change the display mode to Detail
- If the element is a report change the display to Full
- Add the component to a dashboard from the left-hand toolbar dashboard icon
Check Your Understanding¶
- When a user profile is disabled will notifications they created continue to be sent?8
- Does a Reporting Authority (RA) give access to data?9
- How many toolbar buttons can an administrator create?10

Lesson 4: Data & Analysis Tools¶
Overview¶
Data & Analysis Admins play an important role in collecting and analyzing data that aids decision-makers. These admins are responsible for importing data, creating data sets, building dataset queries, and managing SSRS and trending reports.
Lesson Objectives¶
By the end of this lesson, Data and Analysis admins will be able to:
- Understand how a SSRS reports are generated
- Assist with importing and exporting data into modules
- Manage data roles
- Create Trend reports
Reading¶
- SQL & Dataset admins have access to the Query Builder and can query the back-end database using a Structured Query Language (SQL) query
- SQL & Dataset admins can create a Dataset that combines information from one or more modules into one database view for reporting
- Data Import admins use the Data Import tool to load data into existing modules
- Data & Analysis admins can grant access to custom Microsoft SQL Server Reporting Services (SSRS) reports and charts by role or schedule report jobs periodically
- Data & Analysis admins can produce Trending Reports to track occurrences over time
*Trending is also covered under Course 1030
Exercises¶
Exercise 4.1¶
- *Coming Soon
Check Your Understanding¶
- Can data be changed using the Query Builder tool?11
- If key fields are improperly set during a data import will duplicate objects be created?12
- Can admins grant access to custom reports by role?13

Lesson 5: Web Services (Interfaces)¶
Overview¶
The exchange of data with outside systems that connect to applications through a REST API can be configured to trigger a data refresh. The Interface Developer Role can view the results of recent interface runs, resend messages, and maintain configuration information about web services. Customer IT personnel writing interfaces should ensure that they are familiar with relational database concepts.
Lesson Objectives¶
By the end of this lesson, admins will be able to:
- Coordinate REST API connections
- Establish best-practice standards
- Generate document repositories
Reading¶
- Admins can work with their Technical Account Managers (TAMs) to connect Web Services/REST APIs to outside systems to applications by calling the REST API
- IT Admins need to understand Web Services/REST API, assist module developers write interfaces, and create subscriber best practice standards
- Admins can distribute PDF notification reports and archive to document repositories
Exercises¶
Exercise 5.1¶
- Identify company interfaces
- Review company interface procedures and policies
- Confirm company reporting and notification needs
Check Your Understanding¶
- Can platform releases affect interface field data?14
- Does a REST connection require programming work by a customer?15
- Can REST results be archived to document repositories?16

Lesson 6: Module Development¶
Overview¶
Applications are created and maintained using Module Builder a tool used by Module Developers for importing, exporting, copying, creating, modifying, and managing modules. Administrators assigning Module Developer, Viewer, and Importer roles must enforce Module Builder configuration guidelines and SQA policies.
Lesson Objectives¶
By the end of this lesson, admins will be able to:
- Review module developer topic discussions
- Manage access to Module Developer licenses
- Define cross-module behaviors
- Monitor module import history logs
Reading¶
- The Module Developer tool is used to build and test modules without the need for custom configuration.
- Administrators who have been granted a Module Developer license can manage Module Developer roles to users as a Module Viewer, Module Importer, or Module Developer.
- The Import module tool allows for the importing of module definition XML files from other areas
- The Export module tool allows for the exporting of individual modules or packages of modules to be imported into another area
- The Cross-Module Functions screen lets developers define behavior that can apply to many modules at once
- The Module Tools screen displays the history and set customizations (overrides) to apply during a module import
Module Developer Requirements
Module development is beyond the scope of this course. Please see Courses 3000 and 4000 for more information. After this training and assuming a user has the appropriate access, they can use Module Builder to explore the configuration of the modules in their build or test areas.
Disclaimer
Module Administrators and Module Developers are required to document all changes and follow the SQA process. Any help completing changes or resolving incidents that were caused by a Module Administrator or Module Developer will be covered under the subscriber's support plan, not maintenance.
Exercises¶
Exercise 6.1¶
- Review Module Developer license requirements
- Review the SQA Policies and Procedures
- Identify company users who may have or could benefit from Module Developer training or access
- Identify company users who are responsible for assisting Module Developers with Import or Export tools.
Check Your Understanding¶
- What role does TrakWay play in the SQA process?17
- Who is responsible for the Release Plan where Module Builder changes are promoted to the production environment?18
- Can a user with the Module Importer role make changes to a Module?19
- What can some of the Module Tools do?20

Lesson 7: Sharing Dashboards¶
Overview¶
Area Administrators can share dashboards with individual users, users with specific roles, or a team. Users without an admin role are only able to share a dashboard using the dashboard's URL.
Lesson Objectives¶
By the end of this lesson, admins will be able to:
- Share a dashboard with users based on their role or team
- Using the role option, request that the shared dashboard by set as a default dashboard
Reading¶
- Admins can share dashboards by role, team, or to individual users and request that the dashboard be set as the default dashboard based on their role
Exercises¶
Exercise 7.1¶
- From the left-side dashboard region hover over a dashboard and click the Share icon
- Select a role and toggle on the "Set as Default Dashboard" option select cancel or apply
- Review the list of teams
- Search for an individual
Check Your Understanding¶
- Can users with a participant role share a dashboard with a team?21
- Are requested default dashboards automatically set?22
- If a user deletes a dashboard that they have shared, is it automatically deleted everywhere?23

Lesson 8: Security Settings¶
Overview¶
Administrators play a vital role in ensuring a company's information is secure and that the data contained in the system meets the company’s requirements.
Lesson Objectives¶
By the end of this lesson, admins will be able to:
- Identify security setting needs such as
- login settings
- IP restrictions
- Reporting Authorities, Role, and Record Access Control
- Classified Information
- Access deactivation
Reading¶
- Administrators play a vital role ensuring the security settings meet subscriber requirements
- Security best-practices should be reviewed and approved by the subscriber’s security department
- Confidential data settings must be set to protect against unintentional, unlawful, or unauthorized access, disclosure, or theft
Exercises¶
Exercise 8.1 - Security Options¶
- Review Password policies and confirm that they match the system rules and behaviors
- Confirm Session Timeout settings for when a user's session should be terminated
- Review company Single Sign On (SSO) policies
- The platform can force the use of SSO for all users, meaning that users cannot log in directly without using SSO.
- Become familiar with active directory connections and user and person objects
- Review and address questions or issues identified under Security Best-Practices and Confidential Data
Check Your Understanding¶
- Can a hosted company force the use of SSO access?24
- What role can grant other users an administrative role?25
- What is Data Confidentiality?26

Course Conclusion¶
Throughout this course, participants have been introduced to vital information, guidelines, and tools every administrator should know. By actively exploring the administrative settings, experimenting with different options, and engaging in practical exercises, administrators can deepen their knowledge, gain confidence in their ability to improve functionality and monitor accessibility and security.
Upon completing the 2010 level courses, administrators are encouraged to participate in the Level 2020: TrakWay, Resources, and Requirements Gathering Course. Participants should have administrative access and understand the business process rules for the applications they manage. The course will cover submitting a TrakWay ticket, administrative tools, and how to write requirement requests and the manage platform releases.

- Java ↩
- By putting them in their own database or a shared database but segregating the data by foreign key. ↩
- Build ↩
- Administrative Roles ↩
- No, they can not grant thyself Administrative, Subscriber, and Module-based roles ↩
- No, the Team can be inactivated and members removed but it cannot be deleted. ↩
- No, only User Access Control Administrators can grant administrative roles to other users ↩
- No. All notifications created by that user will cease working. ↩
- Yes. Reporting Authorities give users access to the data, while Roles give users access to objects. ↩
- Administrators can create up to five (5) toolbar buttons. ↩
- No. The information cannot be changed, however, Query Builder does allows access to all application data regardless of reporting authority, role, and record access control restrictions. ↩
- Yes. Use care when setting key fields, the system will update existing records that match on the combination of key fields and create new objects that don’t exist. ↩
- Yes. These reports will appear in the user’s Reports shortcut under the category “Custom Reports and Charts.” ↩
- No. The REST API interfaces with modules through the module metadata layer, so new releases of the platform are guaranteed to not affect the fields belonging to a module. ↩
- Yes. While this programming is simple customer personnel will need to write the interface. ↩
- Yes, the results can be saved as a .pdf document and the document saved in a repository. ↩
- TrakWay is used to track and outline software changes throughout the lifecycle of the module builder request ↩
- The customer in coordination with the TAM ↩
- No, users with the Module Importer role can only view modules in the read-only mode. ↩
- Module Developer Tools are located on the Module Developer Administration Screen ↩
- No, only Area Admins have access to this tool. ↩
- No, users can override the admin's wishes and choose their own home dashboard. ↩
- No, the user will see a notification icon warning them the dashboard will be removed within 30 days. Users can duplicate the dashboard, making their own copy, if they wish to keep it. ↩
- For customers using a hosted environment, a company can choose to Force SSO access to the system by IP address, or a range of IP addresses. This would typically be the external IP address of company firewalls. Remote users would need to connect to their company’s VPN (Virtual Private Network) before connecting to Ideagen. ↩
- User Access Control Administrator role ↩
- Protecting data against unintentional, unlawful, or unauthorized access, disclosure, or theft. ↩