Epicor Kinetic - Classic User Interface

System Setup and Management

Course
2021.2
Disclaimer
This document is for informational purposes only and is subject to change without notice. This document and its
contents, including the viewpoints, dates and functional content expressed herein are believed to be accurate as of its
date of publication. However, Epicor Software Corporation makes no guarantee, representations or warranties with
regard to the enclosed information and specifically disclaims any applicable implied warranties, such as fitness for a
particular purpose, merchantability, satisfactory quality or reasonable skill and care. As each user of Epicor software is
likely to be unique in their requirements in the use of such software and their business processes, users of this document
are always advised to discuss the content of this document with their Epicor account manager. All information contained
herein is subject to change without notice and changes to this document since printing and other important information
about the software product are made or published in release notes, and you are urged to obtain the current release
notes for the software product. We welcome user comments and reserve the right to revise this publication and/or
make improvements or changes to the products or programs described in this publication at any time, without notice.
The usage of any Epicor software shall be pursuant to an Epicor end user license agreement and the performance of
any consulting services by Epicor personnel shall be pursuant to Epicor's standard services terms and conditions. Usage
of the solution(s) described in this document with other Epicor software or third party products may require the purchase
of licenses for such other products. Where any software is expressed to be compliant with local laws or requirements
in this document, such compliance is not a warranty and is based solely on Epicor's current understanding of such laws
and requirements. All laws and requirements are subject to varying interpretations as well as to change and accordingly
Epicor cannot guarantee that the software will be compliant and up to date with such changes. All statements of
platform and product compatibility in this document shall be considered individually in relation to the products referred
to in the relevant statement, i.e., where any Epicor software is stated to be compatible with one product and also
stated to be compatible with another product, it should not be interpreted that such Epicor software is compatible
with both of the products running at the same time on the same platform or environment. Additionally platform or
product compatibility may require the application of Epicor or third-party updates, patches and/or service packs and
Epicor has no responsibility for compatibility issues which may be caused by updates, patches and/or service packs
released by third parties after the date of publication of this document. Epicor® is a registered trademark and/or
trademark of Epicor Software Corporation in the United States, certain other countries and/or the EU. All other
trademarks mentioned are the property of their respective owners. Copyright © Epicor Software Corporation 2021.
All rights reserved. Not for distribution or republication. Information in this document is subject to Epicor license
agreement(s).

ED861905
90521-10-9287-583101001
2021.2
Revision: October 14, 2021 6:23 p.m.
Total pages: 113
[Link]
System Setup and Management Course Contents

Contents
Introduction............................................................................................................................7
Before You Begin....................................................................................................................8
Audience.........................................................................................................................................................8
Prerequisites....................................................................................................................................................8
Environment Setup..........................................................................................................................................8
User Accounts.......................................................................................................................11
User Accounts Details....................................................................................................................................11
Workshop - Manage User Accounts...............................................................................................................12
Create User Account...............................................................................................................................12
Add Company........................................................................................................................................13
Test the Account....................................................................................................................................14
Startup Configurations.........................................................................................................15
Configuration Settings File.............................................................................................................................15
Multiple Configuration Files....................................................................................................................16
Workshop - Modify Configuration Setting Files.......................................................................................16
Copy the Default Configuration File.................................................................................................16
The Configuration Editor.................................................................................................................16
Run Time Arguments.....................................................................................................................................18
Workshop - Activate Run Time Arguments..............................................................................................18
System Setup........................................................................................................................20
Workshop - Company Maintenance...............................................................................................................20
Define General Settings..........................................................................................................................20
Define Email and Report Options............................................................................................................22
Enable BAQ External Datasources...........................................................................................................24
Workshop - Company Configuration.............................................................................................................25
Enter Company Details...........................................................................................................................25
Define Module Options...........................................................................................................................26
Retrieve License Info...............................................................................................................................27
Enable Tax Connect................................................................................................................................27
Workshop - Site Maintenance........................................................................................................................28
Create a Site...........................................................................................................................................28
Workshop - Site Configuration.......................................................................................................................30
Modify Site Options................................................................................................................................30
Workshop - Company and Site Rights............................................................................................................31
Assign Company/Site Rights....................................................................................................................31
Test User Account...................................................................................................................................32
Workshop - Attachment Type Maintenance...................................................................................................33
Define Storage Type for Attachments.....................................................................................................33
Automatic Data Processing..................................................................................................35
System Agents...............................................................................................................................................35

Epicor Kinetic - Classic User Interface | 2021.2 3

Contents System Setup and Management Course

Workshop - Modify the System Agent....................................................................................................36

Modify a System Agent...................................................................................................................36
Create a Schedule...........................................................................................................................38
Workshop - Manage the System Agent...................................................................................................39
Select a Schedule.............................................................................................................................39
View Task Parameters......................................................................................................................39
Process Sets...................................................................................................................................................40
Workshop - Manage Process Sets...........................................................................................................40
Create a Process Set........................................................................................................................40
Add Tasks to a Process Set...............................................................................................................41
Schedule a Process Set.....................................................................................................................42
System Monitor.............................................................................................................................................42
Workshop - Use the System Monitor.......................................................................................................43
Customization Management...............................................................................................45
Workshop - Customization Rights..................................................................................................................46
Select the User Account..........................................................................................................................46
Assign Customization Rights...................................................................................................................46
Workshop - Personalization Purge..................................................................................................................48
Use Personalization Purge.......................................................................................................................48
Workshop - Customization Maintenance.......................................................................................................49
Review, Update, and Delete Customizations...........................................................................................49
Export Customizations............................................................................................................................51
Import Customizations............................................................................................................................51
Verify Customizations.............................................................................................................................53
Run or Modify Customizations................................................................................................................54
Workshop - Dashboard Maintenance.............................................................................................................54
Review Dashboards.................................................................................................................................54
Manage and Generate Dashboards.........................................................................................................56
Workshop - Help Annotations Maintenance...................................................................................................57
Create an Annotation.............................................................................................................................57
Update an Annotation............................................................................................................................57
Workshop - Solution Management................................................................................................................58
Review Solution Elements.......................................................................................................................58
Review Solution Types............................................................................................................................62
Use Solution Workbench........................................................................................................................63
Track Your Activity..................................................................................................................................64
Add Items to Solution.............................................................................................................................66
Build a Solution......................................................................................................................................67
Image Management.............................................................................................................68
Image Category Maintenance........................................................................................................................68
Workshop - Create an Image Category and Subcategories for Parts........................................................68
Workshop - Create an Image Category and Subcategories for Employees ..............................................69
Image Defaults Maintenance..........................................................................................................................70
Workshop - Enter Image Defaults...........................................................................................................70

4 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Contents

Image Maintenance.......................................................................................................................................71
Workshop - Import a Single Image in Image Maintenance.......................................................................71
Workshop - Import an Image..................................................................................................................72
Part Maintenance...........................................................................................................................................72
Workshop - Assign an Image to a Part Record.........................................................................................72
Employee Maintenance..................................................................................................................................73
Workshop - Import an Image On-The-Fly.................................................................................................73
Security..................................................................................................................................74
Authentication (User Identity) Security............................................................................................................74
Password Policy Maintenance.................................................................................................................75
Define Password Policy....................................................................................................................75
Test Password Policy........................................................................................................................76
Password Management..........................................................................................................................77
Manage User Passwords..................................................................................................................77
Account Lockout Policy...........................................................................................................................78
Create the Policy.............................................................................................................................78
Test the Policy.................................................................................................................................79
Locked Accounts....................................................................................................................................79
Review Locked Account...................................................................................................................79
Unlock Account (User Account Level)...............................................................................................80
Unlock Account (Server Level)..........................................................................................................81
Automatic Sign On.................................................................................................................................81
Allow Automatic Sign On................................................................................................................81
Authorization (Interface) Security...................................................................................................................83
Interface Security Privileges.....................................................................................................................84
Company Security...........................................................................................................................84
Security Group Maintenance...........................................................................................................84
Workshop - Create a Security Group........................................................................................85
User Security...................................................................................................................................86
Security Manager and Global Security Manager........................................................................86
Workshop - Manage User Security............................................................................................86
Security Logic Hierarchy...................................................................................................................89
Assign Interface Security.........................................................................................................................90
Run Time Argument Menu Control..................................................................................................90
Workshop - Define Run Time Arguments..................................................................................90
Workshop - Menu Security..............................................................................................................92
Create a Security Code.............................................................................................................92
Assign Menu Security...............................................................................................................94
Test Menu Security...................................................................................................................94
Security Group Conflicts...........................................................................................................95
Workshop - Service and Method Security.........................................................................................95
Assign Service (Business Object) Security...................................................................................95
Test Service Security.................................................................................................................96
Assign Method Security............................................................................................................98
Test Method Security................................................................................................................99

Epicor Kinetic - Classic User Interface | 2021.2 5

Contents System Setup and Management Course

Workshop - Field Security................................................................................................................99

Assign Global Field Security....................................................................................................101
Data Masking.........................................................................................................................102
Security Group Field Security..................................................................................................103
Test Field Security...................................................................................................................104
Workshop - Home Page Security....................................................................................................104
Assign User Rights..................................................................................................................104
Assign Home Page Security....................................................................................................105
Test Home Page.....................................................................................................................105
Security Reports....................................................................................................................................105
Change Log Report.......................................................................................................................105
Logon Failure Audit Report............................................................................................................106
Menu Security Report....................................................................................................................106
System Activity Log........................................................................................................................106
Users Groups Report......................................................................................................................107
User Session Log Report................................................................................................................107
Cloud Environment Administration..................................................................................108
In-App and Email Notifications.....................................................................................................................108
Workshop - Manage In-App Notifications.............................................................................................108
View In-App Notifications..............................................................................................................108
Change Notifications Preferences..................................................................................................109
User Tracker.................................................................................................................................................109
Workshop - View Logged Users............................................................................................................109
Conclusion...........................................................................................................................111

6 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Introduction

Introduction

This course explores how you set up and manage the Epicor ERP application. By understanding these tools, you
control how users access and run the application as well as manage automatic processes and customizations.
You leverage several tools to configure the Epicor ERP application so it reflects the structure of your organization
and the requirements of your business. This course begins by setting up a basic user account, and then reviews
configuration settings files and run time arguments. Configuration settings (.sysconfig) files contain parameters
you can modify; these parameters then activate when a user logs into the client. Likewise, run time arguments
are switches which launch alternate menus and processes (like automatic updates) when users log in.
If you use the Multi-Site module, the Epicor ERP application can have multiple companies, and then each company
can contain multiple sites. Use these features to reflect the structure of your organization. Through these
management tools, you define how each company and site interacts with the modules licensed by your
organization. Then on user accounts, you determine which users have access to each company and site. To further
improve security, use the security tools. Through these management programs, you restrict user access to specific
programs, services, and fields.
Reports, processes, and executive dashboards can generate automatically through recurring schedules. You first
create these recurring schedules on a system agent, and then users link a report or process to these recurring
schedules. These processing tasks then activate automatically at times that work best for your organization -
generating the data when its needed and when it can be most efficiently processed.
Users can modify the application through personalizations, customizations, and other tools. You can manage
these custom modifications using a series of maintenance programs. Through the features on these programs,
you can evaluate each modification, correct errors, and remove the modification. To complete the customization
management options, you can use the Solution Management module to bundle together selected customizations,
personalizations, BAQs, and other items and distribute them from one Epicor ERP application server to another
server.
Through the security tools, you control access to the Epicor ERP application. You can control both logon access
and access to specific programs within the user interface. The password and user account lockout policies
determine how complex you wish to make user passwords and how many failed login attempts you allow. For
interface security, you assign users to security groups. You then use a series of security programs to allow/disallow
access to programs, services/methods, and fields.
Together these setup and management tools give you control over how your organization and users interact
with the Epicor ERP application. By leveraging these tools, you can maximize your investment in the application.
Upon successful completion of this course, you will be able to:
• Create a user account.
• Modify startup configurations on client machines.
• Configure companies and sites so they reflect the needs your organization and industry.
• Grant user access to companies and sites.
• Set up schedules that automatically generate data for reports and processes.
• Manage customizations, personalizations, dashboards, help annotations, and other custom items in the Epicor
ERP application.
• Create solutions that combine various items for installation in other companies.
• Restrict user access to the ERP application through the security features.

Epicor Kinetic - Classic User Interface | 2021.2 7

Before You Begin System Setup and Management Course

Before You Begin

Read this topic for information you should know in order to successfully complete this course.

Audience

Specific audiences will benefit from this course.

• System Administrators
• IT/Technical Staff
• Security Managers

Prerequisites

To complete the workshops in this course, the necessary modules must be licensed and operating in your training
environment. For more information on the modules available, contact your Epicor Customer Account Manager.
It is also important you understand the prerequisite knowledge contained in other valuable courses.
• Foundations Agenda Courses on Epicor Learning Center - These courses describe logging in to Epicor
ERP, using menus and toolbars, working with Tree view and sheets. They give you a quick overview how to
enter data in Epicor ERP, use searches to find data and work with grids. The courses in this agenda teach you
to personalize your application, print forms and reports and use trackers to view information.
®
• System Administration Course - This course explores how Microsoft SQL Server interacts with the Epicor
ERP application. Designed for database administrators, this course describes the SQL Server features
administrators manage to run the Epicor ERP application.

Environment Setup

The environment setup steps and potential workshop constraints must be reviewed in order to successfully
complete the workshops in this course.
Your Epicor training environment, in which the Epicor demonstration database is found, enables you to experience
Epicor functionality in action but does not affect data in your live, production environment.
The following steps must be taken to successfully complete the workshops in this course.

1. Verify the following or ask your system administrator to verify for you:
• Your Epicor training icon (or web address if you are using Epicor Web Access) points to your
Epicor training environment with the Epicor demonstration database installed. Do not complete
the course workshops in your live, production environment.
Note It is recommended that multiple Epicor demonstration databases are installed. Contact
Support or Systems Consulting for billable assistance.

8 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Before You Begin

• The Epicor demonstration database is at the same version as the Epicor application. The
demonstration database is installed from the Epicor Administration Console using the "Add Demo
Database" command under Database Server. See Epicor ERP installation guides for details. If you are an
Epicor Cloud ERP customer (and have licensed embedded education), the demonstration database is
installed for you.
• Your system administrator restored (refreshed) the Epicor demonstration database prior to
starting this course. The Epicor demonstration database comes standard with parts, customers, sales
orders, and so on, already defined. If the Epicor demonstration database is shared with multiple users
(that is, the database is located on a server and users access the same data, much like your live, production
environment) and is not periodically refreshed, unexpected results can occur. For example, if a course
workshop requires you to ship a sales order that came standard in the Epicor demonstration database,
but a different user already completed this workshop and the Epicor demonstration database was not
restored (refreshed), then you will not be able to ship the sales order. If you are an Epicor Cloud ERP
customer see section below.

2. Log in to the training environment using the credentials epicor/epicor.

If you are asked to log into your training environment with another User ID, for example, 'nancy' or 'bhoward',
on the initial logon, a message appears to inform you the password has expired. Perform the following steps
to set a new password:

1. To the Password Expired message, click Yes.

2. In the Current password field, enter the User ID of the user you are asked to log in as, for example,
'nancy'.

3. In the New password field, enter a new password, for example 'Train123'.
Important In Epicor ERP Cloud environment, the password must not contain user ID, must be
longer than 7 characters and include at least one uppercase letter.

4. In the Confirm new password field, re-enter the same password.

5. Click OK. The Change Password window closes and you are logged on with the new user ID.
Note Record the new password. This is important as this will be the password everyone uses
when they log on with this User ID, until the database is refreshed.

3. From the Main menu, select the company Epicor Education (EPIC06).

4. From the Main menu, select the Main site.

Kinetic Interface Specific Information

All the workshops in this course can be completed using the Classic layout. To ensure that the user interfaces
used in this course display in the Classic layout, use the steps below:

1. Navigate to Kinetic Application Maintenance.

Menu Path: System Setup > Security Maintenance > Kinetic Application Maintenance

2. From the Menu list, select the Epicor Education company.

The Company Epic Corporation pane displays.

Epicor Kinetic - Classic User Interface | 2021.2 9

Before You Begin System Setup and Management Course

Note If you need to work in a multi-company environment you will have to disable the Kinetic layout
for all the companies used in the course.

3. Inactivate the Enable Kinetic UI ON/OFF button.

4. Exit Kinetic Application Maintenance.

5. On the standard toolbar, select Options > Preferences.

6. In the window that displays, in the Form To Use field, select Classic.

7. Select OK to confirm.

8. Relaunch Epicor ERP.

Epicor Cloud ERP Specific Information

Note If you are an Epicor Cloud ERP customer, then note the following about your Epicor-hosted education
company. All logins referenced in the course (such as manager, or epicor) should be changed to be the
<site ID>-. For example, if your site ID is 98315, then wherever you are instructed to use the login epicor,
instead use 98315-epicor. The password is 'Train18!'.

Note To refresh your Epicor training data, enter a support ticket in EpicCare and include your site ID.

10 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course User Accounts

User Accounts

Each person who will access the Epicor ERP application must have a user account. This user account contains the
primary information for each user and defines both program access and system permissions.
You create user accounts within User Account Security Maintenance. You will frequently launch this program
to add and update user accounts. As users change roles within your organization, you manage what programs
they can launch and what tools they can use. User Account Security Maintenance can only be launched by users
who have Security Manager rights, so be sure at least one account is set up with this permission option.
During this section of the course, you will create a basic user account. This account is then used later throughout
other parts of this course.

User Accounts Details

Use the Detail sheet to enter basic user account information such as user ID, name, address, phone numbers,
and password information. You typically use this sheet when you are creating a new user account.
You enter this information on the Detail sheet:

User ID and Password

Each user account has a User Identifier (ID) and a Password, and users are prompted for these items when they
log into the application. The User ID displays in many entry programs like Sales Order Entry and Purchase Order
Entry; this feature indicates who created the initial record. The User ID field is alphanumeric and can be up to 20
characters long.
Tip Consider using employees' network login ID as their Epicor ERP application User ID. The network login
ID defaults in the Name field when users log into the Epicor ERP application. If you use Information Worker,
the network login ID is used to integrate Information Worker with the Epicor ERP application.

Address and Contact Information

Use this area to enter the mailing address, the e-mail address, and phone numbers for each user. These fields
are optional and are used for reference purposes only. Some users must be set up in other areas of the application.
For example, a sales force member would also be set up in Work Force Maintenance with a sales role. In this
situation, consider leaving the address and contact information blank in the user account record and place a note
in one of the fields to direct people to the Work Force record for the address and contact information.

Disable Account
Select the Disable Account check box to temporarily or permanently stop a user account. You may also want to
disable an account if someone is on an extended leave or if someone leaves the company. Once an account is
disabled, that user cannot log into the application. They will receive an Invalid log on message.
Tip The application defines a new account as disabled by default. You can then complete the setup for a
user before activating the account.

Epicor Kinetic - Classic User Interface | 2021.2 11

User Accounts System Setup and Management Course

Workshop - Manage User Accounts

The following exercises illustrate how you create and activate user accounts.

Create User Account

Do the following to create a user account.

1. Navigate to User Account Maintenance.

Menu Path: System Setup > Security Maintenance > User Account Security Maintenance

2. Click the New button.

The fields on the Detail sheet activate for data entry.

3. Enter the User ID for this user. For this workshop, enter XXX_User (where XXX are your initials).
When the user launches the Epicor ERP application, the user first needs to enter this identifier value and
then enter a password. You will not be able to access this password through User Account Maintenance,
but you can clear this password and manage when it expires.

4. Now enter the Name, Address, City, and other contact details. Enter the values you need in these fields.
This information is primarily for your reference. As described previously, you can enter this user information
in other programs like Work Force Maintenance or Employee Maintenance. If this is the case, consider
leaving these fields blank and just enter a reference stating which program contains the user's contact
information.

5. Click the Language drop-down list to review the languages available. If this user needs to display the
interface in a different language from the default, you can select it from the drop-down list. However since
this user will use the default language, leave this value blank.
When the Epicor ERP application is installed, you select a default language that displays for all users. You
can use this drop-down list to override the default. If the selected language pack is installed, the interface
text uses strings from the language pack. To determine what language to display, the system first checks
the user account, then the default language specified in the .sysconfig file, and lastly checks the current
Windows language.

6. If you select a different language for the user, you may also need to select a different Format Culture. Click
this drop-down list to review the cultures available. This value defines cultural modifications the selected
language requires to display properly on the interface. If this user can use the default format culture, leave
this value blank.
Each Format Culture code defines the date format, number format, currency symbols, field layout, and other
items applicable to a world culture. For example, a culture code can change the interface so the user can
read and enter data from right to left instead of left to right.

7. Through the Single-Sign On feature, you can set up accounts so users can automatically log into the
application using their Windows account. When users launch the application, they avoid the login window.
You activate this feature by selecting the Require Single Sign-On check box and then entering the Domain
and Domain User ID values.
Do not activate this feature during this workshop. Later in this course, you will set up automatic sign on
using Password Policy Maintenance.

12 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course User Accounts

8. The License Timeout Minutes value defines how many minutes this user account can be inactive before
the application releases the account license. This field cannot be set for less than 15 minutes.
Through this feature the user remains connected, but this person's license times out and is released for
other users. This allows additional users to log in. When the user returns, this person is automatically granted
a license (if one is available). This functionality helps maintain work environments where a user’s client
installation is idle for long periods of time and other users need to log into the application.

9. You can limit this user to only see a specific set of programs by entering a menu identifier in the Client
Start Menu ID field.
When this user logs in, only the modules or module nodes available under this menu display on the Main
Menu. For example if you enter the identifier for the Job Management module, only the programs in this
module display on the Main Menu.
You use Menu Maintenance to find the menu ID you need. This feature is described more detail later in the
Security section of this course.

10. Now in the Password Expires Days field found in the Account Actions group box, enter how long the
user's password can be active. For this workshop, enter 75.
The current password for this user account can now stay active for 75 days.

11. A requisition is a request for material from a supplier, and it can be used to acquire parts for a job or
miscellaneous item. To give users the ability to create these records, select the Allow Requisitions check
box.

12. To indicate how long before the data refreshes in the Shop Tracker, enter a value in the Shop Tracker
Refresh Minutes field. The default value is 10 minutes.

You next add the companies this user account can access.

Add Company

Before you can activate this user account, it must have access to at least one company and site.

1. Click the Down Arrow next to the New button; select New Company.
The Company > Detail sheet displays.

2. Click the Company drop-down list and select Epicor Education.

The Available Sites list displays the current sites set up for this company.

3. Select the Main Plant site option and click the Right Arrow button.

4. To complete the user account, you need to activate it. Return to the Detail sheet and click the Enable
Account button.
The Set Temporary Password dialog is displayed.

5. In the E-mail temporary password to field, enter a valid e-mail address you have access to. When you
click OK, the system generates a temporary password and e-mails it to the user. This feature assumes
e-mailing is configured for the company you work with. Contact your system administrator, if needed.
Tip The user can login using the temporary password up to three times and each time will be prompted
to enter a conforming password to replace the temporary password. If Password Policy Maintenance
is set up to allow blank passwords, you can also use the Set temporary password to blank check box.
When you allow blank password, users have three login attempts with blank password and each time
they are prompted to enter a proper password.

Epicor Kinetic - Classic User Interface | 2021.2 13

User Accounts System Setup and Management Course

6. Click Save.

7. Open and the email account you specified, check for the email labeled Temporary Epicor Password and
copy the temporary password into a clipboard.

The user account is active. The new user can now log into the Epicor ERP application.

Test the Account

You will use this account later in this course, so you need to set up the password for this new user account.

1. Return to the Home screen.

2. Click your mouse on the arrow at the bottom of the window; a toolbar pops up. Select the Change User
button; this button is on the far left on the toolbar (the person icon).
The Login window displays.

3. For the User name, enter XXX_User (where XXX are your initials). Enter (paste) the temporary Password
specified in the email and hit Enter.

4. The Password Expired dialog box displays. It asks you if you want to change the password; click Yes.
The Change Password dialog box appears.

5. Again, enter the Current password from the e-mail.

6. Now enter the New Password and then enter it again in the Confirm new password.
Important Be sure you remember this password. You will use this password again later in the course.

7. Click OK.
The Epicor ERP application launches, and it uses the permissions you set up on the new user account. Close
the Tip of the Day window, if necessary.

8. Click on the Menu tile.

9. Notice you can access the modules in the Main Plant site, but you don't have access to Evanston, Los
Angeles, Orange County, and Rockford sites.

10. You need to logon as a system administrator again. Click your mouse on the arrow at the bottom of the
window; a toolbar pops up. Select the Change User button; this button is on the far left on the toolbar
(the person icon).
The Login window displays.

11. Login using the epicor/epicor system user account.

The Epicor ERP application now launches with the permissions and menu access options available with this
account.

14 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Startup Configurations

Startup Configurations

You can modify application launch settings throughout your system and on specific workstations. To do this, you
leverage configuration settings files and run time arguments.
By using different startup configurations and run time arguments, you define how the application runs on each
workstation and interacts with the server.
For example, if you want the application help hosted on a separate server from the deployment server, you would
modify the configuration settings file by entering the server's URL in the helpServerURL attribute. You would
then update this parameter on configuration setting files you use throughout the company. You can also change
how the application launches on a specific workstation with these tools; for example you can activate a run time
argument that launches the application using the MES interface.

Startup Flow

Configuration Settings File

When you launch the application, it activates the configuration settings file. This file defines the settings for the
client installation, including the server connection, user settings, sort method, and many other options.
The application cannot launch unless it locates a configuration settings file. If the .exe file can see the
[Link] file or an alternate .sysconfig file you have defined through a run-time argument, the application
launches.
This section explains how you modify the .sysconfig files. It also describes one of the most common changes,
setting up a user to automatically log into the system.

Epicor Kinetic - Classic User Interface | 2021.2 15

Startup Configurations System Setup and Management Course

Multiple Configuration Files

As a best practice, you should never update the [Link] file. Instead make copies of this default file
and then modify the copied .sysconfig files as you need.
You make a copy of this file by using the copy and paste functions in Windows Explorer. By copying the
[Link] file, you will always have the original settings available for reference. This also creates a backup
file you can use to restore the original configuration settings.
By using alternate .sysconfig files, you can experiment with different startup configurations. To indicate which
alternate .sysconfig file you will launch through each client, you add a run time argument to the Epicor ERP
application's desktop icon. You will learn how to do this later during the Run Time Arguments section of this
course.

Workshop - Modify Configuration Setting Files

The following exercises demonstrate how you modify configuration settings files.

Copy the Default Configuration File

You should always make a copy of the [Link] file and then modify the copied file as you need.
To make a copy of the default configuration file:

1. Launch Windows Explorer.

2. Navigate to the C:\Epicor\ERP10\[Version]\ClientDeployment\Client\Config directory.

The configuration files available for your client installation display in this folder.

3. Right-click on the [Link] file; from the context menu, select Copy.

4. Now right-click on an empty space in the window; from the context menu, select Paste.
The default - [Link] file displays.

5. Right-click this file. From the context menu, select Rename.

6. Change this file name to [Link] (where XXX are your initials).

You can now modify this .sysconfig file to use the settings you need.

The Configuration Editor

After you copy the [Link] file, you can modify the settings in this file. You do this using the Configuration
Editor.
This tool is automatically installed with your client application. Use Windows Explorer to locate and launch this
program.

1. Open your Client Installation folder. In this example, you open the C:\Epicor\ERP10\[Version]\Client directory.

2. Locate and double-click the [Link] icon.

The Please select a configuration file window displays.

3. Notice this window automatically displays all the files contained within your Config folder. Select the file
you want to edit. In this example, you select the [Link] file (where XXX are your initials).

16 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Startup Configurations

4. Click Open.
The Configuration Editor displays.

5. The configuration file settings are divided into several sheets. Available sheets:

a. The Application sheet displays all the settings that apply to the overall application. You define settings
like AppServerURL, ResourceFile, and Version here.

b. The User sheet contains the settings you can adjust for the specific user on this client workstation.

c. The Deployment sheet contains the settings for moving, or deploying, files from your server to the client
installation.

d. The Help sheet contains the settings that define the directory paths for the application help, on-line
support, and the Feature Summary. Use these options to define where this configuration file looks for
documentation and support resources.

e. Use the Sort sheet to define the method used globally to sort strings within the application. Your options
are stringSort and wordSort. You can also create exceptions to the default sort method on this sheet.

f. You may also have a Tools sheet. If you have the Software Developer Kit (SDK) installed in your
environment, use the settings on this tab to define the connection to the SQL server database. This
database connection is required to link the SDK to your Epicor ERP application.

To change a setting, enter an expected value in its field. An expected value is a parameter compatible with
the setting.
Tip For details on the settings contained on these sheets, read the Settings – The Complete List topic
in the application help. You can also review the Startup Configurations chapter in the Epicor
Implementation User Guide.

6. You want to modify this .sysconfig file so that search programs automatically display when users launch a
program, and only 50 records appear at a time in the search results. Click the User tab.

7. Locate the DefaultSearchPageSize setting. This value controls the maximum number of records returned
by a search for display within the search results. Lower values generally make more efficient use of server
and network resources; for this example, enter 50.

8. Now locate the FormOpenMode setting. By default this setting is blank, which indicates no special processing
occurs when a UI form opens. For this setting you can enter either AutoSearch or AutoPopulate. AutoSearch
causes the primary search for each UI form to display, while AutoPopulate causes the program to automatically
launch with records. For this setting, enter AutoSearch.

9. Click Save.

10. Click Close. This configuration file is saved with the new settings.

The selected configuration file now has your revised settings. You next add a run-time argument to the Epicor
ERP application icon so it launches using your [Link] file (where XXX are your initials).

Epicor Kinetic - Classic User Interface | 2021.2 17

Startup Configurations System Setup and Management Course

Run Time Arguments

Each workstation can be set up to launch the application in a specific mode. These modes, or Run Time
Arguments, activate when a user double-clicks on the application icon.
Several run time arguments are available. You can for example, indicate that instead of the default Main Menu,
the application launches either the Dashboard or the MES interface. As described previously, you can launch the
application using a different configuration file so it uses the settings you defined in the alternate .sysconfig file.
Run time arguments are also useful when you are customizing programs. Normally during runtime, you can have
several favorites groups that autoload their programs into memory. This improves the performance of these
programs. However you cannot customize autoloaded programs. To disable this feature while you are customizing,
you enter the /AUTOLOADSUPPRESS run time argument.
You can also use multiple run time arguments at the same time to further define how the application launches
on the workstation. For example, you want a workstation to only use the MES interface and you also want it to
update to the latest version. For this workstation, you use both the /MES and /UPDATE run time arguments.

Workshop - Activate Run Time Arguments

You add run time arguments to the properties of the Epicor ERP application icon. During this workshop, you add
an argument that launches the configuration settings file that contains your search display options.

1. Close the Epicor ERP application.

2. On the desktop for the workstation, right-click the Epicor ERP application icon.

3. A Context Menu displays; select the Properties option.

4. The application’s Properties window appears, displaying the Shortcut tab.

5. In the Target field, enter a [Space] after the target directory path.

6. Enter a right slash ( / ) or en dash ( - ), followed by the run time argument. Enter
C:\Epicor\ERP10\[Version]\Client\[Link] /config=[Link] or
C:\Epicor\ERP10\[Version]\Client\[Link] -config=[Link] (where XXX are your initials).
Tip For details on the available run time arguments, review the Run Time Arguments List topic in the
application help or the Startup Configurations chapter in the Epicor Implementation User Guide.

7. Click Apply.

8. Click OK.

9. Return to the desktop and launch the Epicor ERP application. Log in using the XXX_User credentials you
created.

10. Now navigate to Sales Order Entry.

Menu Path: Sales Management > Order Management > General Operations > Order Entry
The Sales Order Search program displays.

11. Click Search.

The Search Results grid displays 50 results.

18 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Startup Configurations

You need to log back into using the system manager account. From the Home screen, click the Settings tile.
Select General Options and launch the Change User... option. Enter epicor/epicor and log back into the Epicor
ERP application.

Epicor Kinetic - Classic User Interface | 2021.2 19

System Setup System Setup and Management Course

System Setup

You set up the structure of your organization through companies and sites. Each company and site has a unique
set of programs that handle transactions within this area of the organization.
A company is a related section of business functions. How you structure companies within the Epicor ERP
application reflects how your organization runs its various areas of business activity. A company could represent
a product line, a different location, a recent acquisition, and so on. A site defines a location, like a distribution
or manufacturing center, for which your organization needs to separately record and track transactions.
Tip To use multiple companies and sites, you must have the Multi-Site module. This module contains the
programs and network protocols that allow companies to share global records like customers and invoices.

You create companies using the Epicor Administration Console. Use this separate program to create the SQL
databases and application servers that run the Epicor ERP application. You can then create multiple companies
for each application server. After you set up the companies through this console, they appear the next time you
log into the Epicor ERP application. You then launch the Company Maintenance and Company Configuration
programs to define the system and module options for each company.
Each company can have multiple sites, and unlike companies, you create sites within the Epicor ERP application.
You launch the Site Maintenance and Site Configuration programs to define the system and module options
for each site.
This section of the course guides you through how you set up the companies and sites that make up your
organization. It also illustrates how you grant users access to additional companies and sites.

Workshop - Company Maintenance

After a system administrator creates a company through the Epicor Administration Console, users can access it
from the tree view in the Epicor ERP application.
Each company has its own unique set of module groups that users launch separately from other companies. To
begin setting up the overall parameters for the new company, launch Company Maintenance. This set up
program contains the primary options used across the company. Use this program to specify the company's
default address, make email and reporting setup, or add external BAQ sources.

Define General Settings

The General Settings sheet contains the primary information you need to define, including the company address
and URLs for linking the company to other Epicor ERP applications.

1. Click the Menu tile and navigate to Company Maintenance.

Menu Path: System Setup > Company/Site Maintenance > Company Maintenance
Important This program is not available in Classic Web Access.

The program displays the General Settings sheet by default. Notice the current company's identifier displays
in the Company field.

2. Use the Company Info section to enter name and address information for the current company. For this
workshop, enter a Phone number.

20 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course System Setup

This address information is used on various reports and records to identify they originate from this company.
Note Use the Time Zone field to enable time zone at the company level, so that each company can
be configured independent of the application server time zone.

3. The Logo Image group box contains fields you use to specify the logo image for your company. The logo
displays on the Home Page.
Tip There are no limitations on size for logos that can be selected. The height and width adjust to fit
in the available space, maintaining the logo's aspect ratio.

4. If this company will use Service Connect, define how the current company links to this separate application
through the fields in the Service Connect Options group box. For this workshop, do not enter values in
these fields.

5. The options available in the Activity Tracking group box indicate how you want to record user actions at
the current company.

a. System Activities - Select this check box. The activity log now tracks updates to the application like
BAQ definitions, dashboard definitions, customizations, BPM directives, and so on.

b. Personalization - Select this check box. The activity log tracks user personalizations in the current
company.
Tip You review each system and personalization change through the System Activity Log Tracker.
Menu Path: System Setup > Security Maintenance > System Activity Log

6. If this company will run Enterprise Search, use the fields in this group box to link this company to the
search index. Enterprise Search is an optional search feature which you can use to retrieve indexed content
from within your Epicor ERP application and then quickly launch specific programs to display the data
returned from the search.

a. Search URL - Defines the Uniform Resource Locator (URL) for Enterprise Search. For example:
[Link]

b. Global URL - Verify this check box is selected. This indicates the Search URL is the global location for
Enterprise Search. Users can then search for records located in other companies within your organization.

7. Now use the Web Access section to indicate how this company connects with the web form version of the
Epicor ERP application.

a. Web Access URL - Defines the uniform resource locator for the Epicor Web Access forms. For example:
[Link]

b. MetaData Output Path - Defines the directory location used by this company to receive metadata.
When metadata generates through Epicor Web Access, this metadata is stored in this directory path.
For example: C:\Inetpub\wwwroot\EpicorWebAccess

8. If this company uses Epicor Enterprise Performance Canvas, use the Performance Canvas URL field to
indicate the web location that contains this company's performance canvases.
Each performance canvas is a visual display of selected information from your Epicor ERP database. To use
this functionality, the Epicor Enterprise Performance Canvas must be installed and active on your system.

Epicor Kinetic - Classic User Interface | 2021.2 21

System Setup System Setup and Management Course

9. Click the Home Page Layout drop-down list to define a default layout for the current company. If you use
the Modern Shell interface, you can select a default Home page layout from this list. When new users log
in, this default company Home Page layout displays.
Note To learn how to create Home Page Layouts, review the Personalization course or the
Personalization chapter in the Customization User Guide.

10. Select the Dynamic Grid Currency Columns Format check box if you want each currency to be displayed
in its own numeric format. Clear (de-select) this check box if you want the base currency format to be
displayed on all currencies in grid columns.

11. The Help group box contains fields you use to specify the uniform resource locator (URL) for the application
help and the Epicor education courses. When users launch the application help or the embedded courses,
the system looks for this content in these server locations.
Optionally you can specify the Epicor Help URL and the Education Courses URL fields in the URLs in the
.sysconfig file within the client\config folder. The URL values you define in the .sysconfig file override the
URL values you enter in Company Maintenance. You can then have default URL locations you use across
companies. To do this, open the [YourFileName].sysconfig file in a text editor, locate the <helpSettings>
section, and modify the <courseServer uri> and/or <helpServer uri> settings.

12. When you finish defining the general settings, click Save.

Define Email and Report Options

Use the Email and Reporting sheet to indicate how you will distribute email through the current company. This
sheet also has the fields for setting up print form options as well as SSRS reporting parameters.

1. Click the Email and Reporting sheet.

2. The Port field specifies the email link port number for distributing global alert messages with attachments.
Enter an unused port number in this field. When a user receives a global alert message and clicks on the
attachment, the Epicor ERP application retrieves the record attached to the alert email. For this workshop,
validate that 7778 displays.

3. Use the fields in the Global Alert From section to indicate where global alert messages are sent.

a. Email Address - Specifies the default From email address used to send global alert email. This address
appears in the From field on the global alert messages. For this workshop,
administrator@[Link] displays.

b. Email Label - Specifies the default From label used to send global alert email. This label displays on the
global alert messages. For this workshop, enter Epicor Alert.

4. The Print Options group box contains fields that define how reporting is handled in the current company.

a. Allowed Report Style - Use this drop-down list to select what report generation systems are available
to use in the company. Select SSRS Only.
Tip You can also select the Crystal and SSRS option. Use this option if you used Crystal Reports
in a previous Epicor version, and you need to run these legacy Crystal Reports while your
organization makes the transition into SSRS reports.

22 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course System Setup

b. Work Station Method - This selection defines what method is used to calculate the workstation ID.
The method determines what reports a user can print or preview in the System Monitor. For this
workshop, select Machine Name + User ID.

c. Epicor SSRS Portal - This value defines the uniform resource locator (URL) the current company uses
for the Epicor SQL Server Report Portal web site.
Tip Use the Configure Epicor SSRS Service Utility to verify the URL you enter in this field. This
program is located on your server. To do this, log into your server machine and press the Windows
+ F keys to display the Charms bar. From the Search drop-down list, select the Everywhere
option. Enter Configure and then select the Configure Epi SSRS Service option. The Configure
Epicor SQL Report Monitor displays. Review the value in the Epi SSRS site field.

5. The Auto-Print Defaults section indicate the default printers used for printing reports and labels.

a. Reports Printer - Select the default printer this company uses for reports. Whenever a user within the
selected company prints a report, the report is sent to this printer machine.

b. Labels Printer - Select the default printer this company uses to print out label forms. Whenever a user
within this company prints labels, the labels are sent to this printer machine.

6. Enter a user account in the ODBC Connection fields to define the default user account this company needs
for an Open Database Connectivity (ODBC) connection. If you will generate Crystal Reports within this
company, this default user account connects with SQL server and users can then generate Crystal Reports.
Enter the user name and password you need in these fields.

7. Use the fields in the SMTP group box to set up how email is sent between users in the current company.

a. SMTP Server - Use this field to enter the name of the server. For example: ExchangeServer

b. Port - Specifies the SMTP port number that handles your company email. This value is the port number
on the SMTP Server, for example, 25 (default port number).

c. Use SSL - Use this option to specify that SMTP communication is encrypted using SSL/TLS protocols.

d. You can connect to the SMTP Server using the following ways:
• Authenticate Anonymously - used for performing anonymous access to your exchange server. In
order to use this feature, anonymous access must be allowed on the SMTP server.
• Use Specified Credentials - used to connect to your email server using the specified account. When
selected, this option enables User and Password fields. Use these fields to enter your SMTP account
credentials.
If Use Specified Credentials is selected, but no User name is entered, the application uses the AppPool
account to connect to SMTP server.

8. You can use the fields in the SSRS Report Server group box to link the current company to a different
web server location. After you save this company record, you will override the default location.

a. Override Defaults - Select this check box to indicate you need to enter a different reporting web server
location. Selecting this check box activates the rest of the SSRS Report Server fields.

b. Base URL - Defines the Uniform Resource Locator (URL) for the SSRS Report Server. Enter the web site
location that contains this server. This value is typically [Link]

Epicor Kinetic - Classic User Interface | 2021.2 23

System Setup System Setup and Management Course

c. Server Name - Indicates the name of the database for the Report Server. Which value you enter in this
field depends on how you have set up your system. This database can be the same database used by
the Epicor application, a separate database on the SQL Server, and a database on a different SQL Server.

d. Authentication - Defines how the SQL Server user account is validated by the Epicor application. You
can select either Windows Authentication or SQL Server Authentication.

e. User/Password - Enter the user account that has access to the server machine. If you select SQL Server
Authentication, enter the user name for the SQL Server user account that accesses the server machine.
If you use Windows Authentication, enter an Internet Information Services (IIS) user that has browse
rights.

f. SQL DB Name - Defines the name of the SQL Server database that contains the data from where you
want the reports to generate.

g. After you enter the information for the alternate SSRS Report Server, click the Test Connection button.
You should receive a message that the connection with the alternate SSRS Report Server is established.

9. When you finish setting up the email and form options, click Save.

Enable BAQ External Datasources

Use the BAQ External Datasources sheet to activate the external datasources used for the current company.

1. Click the BAQ External Datasources sheet.

2. In the Datasources grid, review the external databases created in External Datasource Maintenance.
Select the Enabled check box next to the EPIC03-AWCustAddress_EPIC03 datasource.
Users can now access these databases through the External BAQ Designer.
Tip For more information about creating external datasources, review the External Datasource
Maintenance topics in the application help.

3. If you do not want to run security checking against the selected datasource, select the Skip Filter check
box.

4. Likewise if you want to skip security for a specific group in the datasource, navigate to the Filter Groups
grid and select the Skip Filter check box.

5. If the selected filter group uses a BAQ constant to filter data, you can use the Filter Definitions grid to
override this constant. The current value of the BAQ constant displays in the ConstantValue field. To do
this, clear the Use Default check box.

6. Enter a custom constant in the FilterValue field.

7. When you finish defining the BAQ external databases and their filters, click Save.

24 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course System Setup

Workshop - Company Configuration

Use Company Configuration to define the module options for companies in the Epicor ERP application. Use
these options to define how this company interacts with the modules licensed for it.
Each company has its own set of modules and programs. Users within each company can engineer parts, make
sales orders, request quotes, manage financial information, and so on. You can quickly switch between companies
by clicking different company icons from the Main Menu. Besides being different in name, you can further define
the separate companies by creating different visual styles for each company. When users switch companies, they
can then identify the current company based on the different look of the interface.
Tip To create different company styles, you use the Styling and Themes functionality. For more information,
review the Styling topics in the application help or the Styling and Themes chapter in the Customization
User Guide.

Enter Company Details

You access the Detail sheet to enter the main financial and schedule information for the current company.

1. Navigate to Company Configuration.

Menu Path: System Setup > Company/Site Maintenance > Company Configuration
The Detail sheet displays; its fields contain information about the current company. Notice the Company
Info group box contains information you entered in Company Maintenance.

2. Enter the Federal ID. This value specifies the federal tax identification number you will use this company.
Be sure to enter the punctuation you may need to validate this number. For example, 33-027799.

3. Now enter the state tax identification number in the Tax ID field. For this workshop, the Illinois code,
6691968, should display.

4. Use the Tax Liability drop-down list to specify the tax region used for all reports used the current company.
You can then report on taxes both inside or outside the selected region. If the country already has a tax
region associated with it, this region displays by default. However you can change this value.

5. If your company will use the Electronic Data Interchange (EDI) feature set, enter the EDI Code for the
supplier assigned to this company. Before you can run EDI options to import or export data, you must enter
this identifier in this field.

6. Click the Production Calendar... button to find and select the base production calendar you wish to use
for scheduling and material requirements planning (MRP) at this company. Find and select the calendar from
the available options.
Tip You create production calendars in Production Calendar Maintenance. Review the application
help or the Epicor Implementation User Guide for more information about how to create these
calendars.
Menu Path: Production Management > Job Management > Setup > Production Calendar
Important This program is not available in Classic Web Access.

Epicor Kinetic - Classic User Interface | 2021.2 25

System Setup System Setup and Management Course

7. Likewise, click the Fiscal Calendar... button to find and select the base fiscal calendar you will use with this
company. The financial records users enter in this company then follow this financial schedule.
Tip You create fiscal calendars in Fiscal Calendar Maintenance. Review the application help or the
Epicor Implementation User Guide for more information about how to create these calendars.
Menu Path: Financial Management > General Ledger > Setup > Fiscal Calendar

8. Click the Employment Code drop-down list to select either the Regular Form 941 (Option R) or the
Regular Form 944 (Option F) tax form.
The option you select depends on the tax form this company will file. The application uses your selection
when W2 forms are exported by W2 Processing to generate the W2 files.

9. Select the Kind of Employer radio button to define tax exempt status, if needed, for the company. By
default, the None Apply radio button option is selected.

10. When you finish modifying the company details, click Save.

Define Module Options

You primary use Company Configuration to define the options for each module. These options affect how the
module runs within the current company.
This workshop is intended as a tour to show you where the main sheets and module sheets are located. For
details on the options you can change on each module sheet, review the application help or the Company
Configuration chapter in the Epicor Implementation User Guide.

1. Navigate to the Modules > All Modules > General sheet.

This sheet contains the main options that apply to all the modules. Use this sheet to define the default site,
default warehouses, and costing method for the current company.

2. The Localization tab contains a series of sheets you use to reflect legal requirements for a specific country
or region.

a. Use the Detail sheet to select a localization, define Restrictions on Hazardous Substances (RoHS) options,
and set up taxing requirements.

b. The Intrastat tab contains sheets that define how this company will handle Intrastat codes and reports.
To turn on the Intrastat features, access the Intrastat>Detail sheet and select the Active check box.

c. Modify the options on the Invoice Banking References sheet to indicate how this company will use
optical character recognition (OCR) numbers or banking reference numbers on sales and purchase
invoices.
Tip Banking reference numbers (Customer Identification Numbers, or KID numbers) are required
in some countries to match and allocate electronic payments to invoices.

d. Country Specific Options - Depending on the country specific functionality (CSF) you have installed,
an additional sheet may also appear that contains options you need to define so the company can conduct
business in a specific country.
If you have a CSF component installed, review the application help for documentation for the specific
CSF feature set.

26 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course System Setup

3. The rest of the tabs organize the options by module groups. For example, click on the Sales tab.
Sheets for each module within this group display. You can now access the options for the Quote, Order,
CRM, Case Management, and Demand modules. You use the module sheets to configure how the current
company interacts with each module.

4. Click the Case Management tab. You use the fields on this sheet to define some key default options for
the Case Management module.

5. Now click the Workflow Group... button to find and select the group you will use with case management.
You use workflow groups to establish a series of tasks to perform on a specific case and define who will
complete these tasks.

6. Use the Task Set drop down list to select the series of tasks required to complete each case.

7. Select the Auto Complete Tasks check box to indicate when a milestone is marked complete, all tasks
included in a milestone tasks are also marked complete. This saves time, as users do not have to manually
complete each task on the Task Tree in Case Entry.

8. Continue to click on different module sheets to define the overall options for each module. When you finish
making changes to the company configuration, click Save.

Retrieve License Info

In this workshop, check enabled and licensed modules.

1. Navigate to the License Tracker tab. This sheet contains information about licensed and/or enabled
modules/CSFs, and number of licensed users for various license types for customers who do not have access
to the Epicor Administration Console.

2. Click on Retrieve License Info button.

a. To check enabled and licensed modules, navigate to License Modules section.

b. To check enabled and licensed CSF modules, navigate to CSF Modules section.

c. To check available, active, and maximum number of users for the license types that you have available,
navigate to User License section.

Note If the module is not licensed and you have questions about its functionality, contact your Epicor
Customer Account Manager.

Note If the module is licensed but not enabled, you should submit the EpicCare case to enable it.

Enable Tax Connect

Use the options under the Actions menu to activate the Tax Connect functionality for the current company.
The Tax Connect service eliminates determining sales tax jurisdictions of ship-to addresses, maintaining tax codes
and rates, and dealing with jurisdiction-specific and commodity-specific taxation rules. Epicor Tax Connect uses
hosted, on-demand address validation, sales tax calculation, and sales tax reporting and returns generation. This
service is run by Avalara® AvaTax®. To use this service, you need licenses for both Epicor Tax Connect and
Avalara®AvaTax® .
Do the following to activate this service:

Epicor Kinetic - Classic User Interface | 2021.2 27

System Setup System Setup and Management Course

1. Click Actions > Tax Connect.

2. From the sub-menu, select the Tax Connect Enabled option.

A check now displays next to this option.

3. Now from the sub-menu, select the Test Connection option.

You receive a message that the Tax Connect service is running.

4. Click OK.

Workshop - Site Maintenance

Use Site Maintenance to add and update sites available in the current company. A site defines a location, like a
distribution or manufacturing center.
When a company is created in the Epicor ERP application, one site record is created automatically by default. This
site record is the default site selected for each part created within Part Maintenance for the current company.
To add more than one site record through this program, license the Multi-Site module. You can then set up as
many sites as you need for each company.

Create a Site

During this workshop, you add a new site to the current company.

1. Navigate to Site Maintenance.

Menu Path: System Setup > Company/Site Maintenance > Site Maintenance

2. Click the Down Arrow next to the New button; select New Site.
The fields on the Detail > Detail sheet activate for data entry.

3. Enter the Site ID that will help you quickly identify this site. Enter XXX_Site (where XXX are your initials).
This value displays throughout the application within various programs and reports.

4. For the Name, enter XXX Site (where XXX are your initials).

5. Enter your name in the Manager Name field. This value identifies the person in charge of this new site.

6. Click Save.

7. If another site will perform equipment maintenance at the new site, select a Maintenance Site from the
drop-down list.
This optional value is available if you use the Maintenance Management module. You select a maintenance
site when the current company has multiple sites and a maintenance team is responsible for maintaining
the equipment at one or more site locations. You then consolidate the maintenance demands through one
site. If you do not select a maintenance site, maintenance transactions are handled by the current site.

8. You now define various production and scheduling details for this site. Click the Planning tab.

9. From the Scheduling Send Ahead For drop-down list and select Production.

28 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course System Setup

This options specifies if the start-to-start job operation offset will be used for Production or Setup time.
• If you choose Production, the production time of the secondary operation is scheduled to start XXX
minutes (where XXX is the number of minutes defined in the operation) after the production starts on
the primary operation.
• If you choose Setup, a secondary operation with a start-to-start relationship will schedule setup to begin
XXX minutes (where XXX is the number of minutes defined in the operation) after the production starts
on the primary operation.
Tip For more information on the fields on the Planning group box, review the Site Maintenance
topics, the Scheduling Technical Reference Guide, and the MRP Technical Reference Guide. This
documentation is available in the application help.

10. Select a Production Calendar for the new site. This calendar determines how many hours for production
are available each week. Click the Calendar ID... button.
The Production Calendar Search window displays.

11. Click Search.

The production calendars available in your Epicor ERP application display in the Search Results grid.

12. Select the D5H16 (5 Days 16 Hrs per day) option and click OK.
This calendar indicates that this site has 16 hours of production capacity available five days each week.
Tip You create production calendars in Production Calendar Maintenance.
Menu Path: Production Management > Job Management > Setup > Production Calendar
Important This program is not available in Classic Web Access.

13. Click on the Address sheet to enter the Mailing Address and Phone/Fax details for the new site. Place
an address in these fields.

14. Now click the GL Controls tab.

You use this sheet to select the general ledger controls used to record financial transactions for the new
site. GL controls define the account and journal contexts used to generate GL accounts for the site.

15. To add a new GL control, click the Down Arrow next to the New button; select New Site GL Control.

16. Click the Type... button to select the GL Control Type that contains the general ledger controls you wish
to use.

17. Now click the Control... button to select a general ledger control available in this general ledger control
type.

18. When you finish setting up the site, click Save.

Epicor Kinetic - Classic User Interface | 2021.2 29

System Setup System Setup and Management Course

Workshop - Site Configuration

Use Site Configuration Control to define how each site interacts with various functions in the Epicor ERP application
such as the Inventory Management, Production Management, Shipping/Receiving, Time Management, and
Expense Management modules.
After you have created site records, you then create warehouses, productions calendars, and other items for your
site. You then launch Site Configuration Control to define parameters for several application and module
functions.

Modify Site Options

This workshop is intended as a tour to show you where the main sheets and module sheets are located. For
details on the options you can change on each module sheet, review the application help or the Sites chapter in
the Epicor Implementation User Guide.

1. Navigate to Site Configuration Control.

Menu Path: System Setup > Company/Site Maintenance > Site Configuration
Important This program is not available in Classic Web Access.

2. Click the Site... button to find and select the Main site.
The Main plant site record populates the sheets in this program.

3. Click on the Modules tab to access the configuration sheets for each module. Work with your distribution
and production managers to determine the values to define for each module.

4. Notice tabs organize the options relating to Inventory Management, Time and Expense, Production
Management, Advanced Material Management (AMM), and Shipping/Receiving. Some tabs have
multiple child sheets that contain several options. For example, select the Inventory Management tab.

5. You use the Inventory Management > General > Detail tab to define the warehouses the site uses.

a. In the Receiving warehouse, select Receiving Area.

b. For the Shipping warehouse, select Shipping Area.

c. For the DMR Processing, select MRB Pending.

d. Now from Inspection drop-down list, select Inspection Area.

e. For the General warehouse, select Main.

Tip To learn about the rest of the fields on this sheet, review the Site Configuration Control >
Modules > Inventory Management > General > Detail topic in the application help.

6. You can define a number of items on the other Inventory Management sheets:

a. Use the Shared Warehouses sheet to indicate which remote warehouses share inventory with this site.

b. You use the Transfer Definition and Transfer Resources sheets to define transfer orders by setting
up the definitions for transferring part quantities and the resources involved in transfer orders.

30 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course System Setup

c. You define the Serial Tracking and Cycle Counting for parts manufactured and/or distributed through
each site.

7. Click on the Time and Expense tab.

These settings determine whether labor hours and/or incurred expenses entered by employees require
approval by other authorized employees. If approval is required, you also define approver rights.

8. Now click the Production tab.

These settings define the prefixes used on unfirm, firm, and kanban jobs at the site. You can also define
some production yield parameters and other production options.

9. Use the Maintenance sheet to determine the job template for maintenance jobs at this site. You can also
enter a job prefix for the maintenance jobs; this prefix automatically displays in front of the generated job
numbers.

10. Click on the Advanced Material Management (AMM) tab.

You use these settings to indicate how the site interacts with the Material Request Queue and other AMM
functionality.

11. Click on the Shipping Receiving tab.

Through this functionality, you enter the various manifests this site uses for General, International, FedEx,
and UPS shipping. You also define how shipment Billing is handled by the current site.

12. Click on Services sheet. This sheet includes the Sync to FSA check box used to integrate the selected site
with the Epicor Field Service Automation (FSA) application.

13. When you finish modifying the site configuration parameters, click Save.

Workshop - Company and Site Rights

After you create the company and site structure for your organization, you can then determine which users can
access specific companies and sites.
If you work in a multi-company environment, each user can access one or multiple companies. When users log
in, they can only access the companies and sites for which they have security rights. After you determine the
companies the user can access, you can then limit the sites within each company the user can open. When they
attempt to switch to a secured company or site, an information message displays explaining they cannot access
this node.
You assign companies and sites to user accounts through User Account Security Maintenance.

Assign Company/Site Rights

Through this workshop, you will assign additional companies and sites to the XXX_User account (where XXX are
your initials).

1. Navigate to User Account Security Maintenance.

Menu Path: System Setup > Security Maintenance > User Account Security Maintenance

2. In the User ID field, enter XXX_User (where XXX are your initials).

Epicor Kinetic - Classic User Interface | 2021.2 31

System Setup System Setup and Management Course

3. Navigate to the Company > Detail sheet.

4. Expand the tree view on the left and verify EPIC06 company is selected.

5. Notice your new site displays in the Available Sites list. Highlight the XXX Site (where XXX are your initials)
and click the Right Arrow button.

6. Now add another company to this user account. Click the Down Arrow next to the New button; select
New Company.

7. Click the Company drop-down list and select the Epicor USA.

8. If the user will use the Manufacturing Execution System (MES), select the appropriate Employee for this
user at this company; select Claire Stevens.
This employee record will be used for MES transactions entered by the current user.
Tip You create the employee records that appear on this drop-down list in Shop Employee
Maintenance.
Menu Path: Production Management > Job Management > Setup > Employee

9. Optionally, select a Work Station for this user account. Workstations, or packing stations, establish the
scale and manifest interface for shipping and receiving at this company. If the user is involved with shipping
and receiving, select the work station for the user. Select the Shipping Station (Weight) option.
Note You create the workstation records that appear on this drop-down list in Workstation
Maintenance.
Menu Path: Material Management > Shipping / Receiving > Setup > Workstation

10. If this user can update time and/or expense records for employees in this company, select the Can Update
Time for All Employees and/or Can Update Expenses for All Employees check boxes. For this workshop,
do not select either check box.

11. Now determine the sites this user can access. The Available Sites list displays the current sites in the selected
company. Highlight Rockford from the list and click the Right Arrow button.

12. Click Save.

13. Close User Account Security Maintenance.

Test User Account

Now test this account to verify the companies and sites you selected display.

1. Return to the Home screen and click the Settings button.

2. Click the Change User... option.

The Log in window displays.

3. Log in with the XXX_User account (where XXX are your initials).

4. Click on the Menu tile.

32 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course System Setup

Notice you can now access the companies and sites you defined on the account.

Workshop - Attachment Type Maintenance

Use Attachment Type Maintenance to define how the company handles and stores file attachments to records.
You can attach files to various records throughout the application. These files can be stored in either a server
®
directory location, a SharePoint or DocStar site library, as well as in cloud storage - DropBox or Google Drive.
When users attach files, they are saved within this central location to ensure other users in the company can
access them. During this workshop, you will set up your attachments to be store in a server folder.
Tip For more information on how you set up the entire document attachment system, review the Enterprise
Content Management chapter in the Epicor Implementation User Guide.

Define Storage Type for Attachments

Complete this workshop to set up a server folder to store file attachments.

On your application server, navigate to C:\EpicorData\Companies\EPIC06 and create a new folder called
Attachments.

1. Launch the Attachment Type Maintenance program.

Menu Path: System Setup > Company/Site Maintenance > Attachment Type Maintenance.
Menu Path: System Management > Document Management > Attachment Type Maintenance.

2. In the Storage Type field, select File System.

3. Click the Base URI button to select a folder that will store file attachments.
For this workshop, specify the following URI - C:\EpicorData\Companies\EPIC06\Attachments.

4. Then select a file Transfer Type that will be used to move file attachments to the specified file system
location. For this workshop, select the File Transfer Using Service type to move the attached files to the
central file location using the application pool, simplifying security. The Client System Direct Copy type
copies the files directly from the client installation out to the central file location. This type uses the shared
directory access permissions on the client machine to determine if the user can attach or view the files.
Note Here you define the default option for the company. If necessary, you can also select different
file transfer options for specific document types in Document Type Maintenance. This flexibility
allows using the Client System Direct Copy transfer type to restrict access to sensitive documents.
Review the Enterprise Content Management chapter in the Implementation User Guide for
suggestions on when to use each transfer type.

Note Cloud ERP users can only use the Client System Direct Copy option for transferring files.

5. Select the Enabled check box to apply this setup.

Enabled Attachment Types are added to the list of Storage Type options on the Document Type Maintenance
and can be tied to a specific document type.

6. Select the Company Default option.

If an attached file is not tied to any document type, it is saved to the central location specified in the default
attachment type. Adding such file results in error if no default attachment type is defined in the system.

Epicor Kinetic - Classic User Interface | 2021.2 33

System Setup System Setup and Management Course

7. Click Save.

Note To avoid conflicts when attaching a file with the same name as the file that already exists in the file
system location, in the .sysconfig file, use the <DuplicateAttachmentMode> setting in the <appSettings>
node to define how you want to resolve these conflicts. Select the Prompt option to display a window
that asks the user to enter a different Attachment ID. Select the AutoDateStamp option to automatically
add the current date to the end of the Attachment ID.

34 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Automatic Data Processing

Automatic Data Processing

You can generate data when you need it so the refreshed data is available for use through processes, reports,
and entry programs. By setting up the automatic data processing features, you can automatically generate data
through a regular schedule you define.
Important This topic or section describes functionality or uses a process that is only available to on-premise
Kinetic installations.

You do this by first creating the schedules you need in System Agent Maintenance. You can create interval
(hours/minutes/seconds), daily, weekly, or monthly schedules. These schedules are then available on drop-down
lists throughout the application. Users assign specific reports, processes, and executive queries as tasks to each
schedule. When a schedule activates, the selected tasks run, refreshing data they contain and generating the
results for display in reports/dashboards or use in other programs.
To further control how the data is automatically processed, organize the tasks to run in a specific sequence
through process sets. This feature is important when one process needs to calculate data required during the
next process. For example, to generate schedules for display on the scheduling boards, you need to first run the
Calculate Global Scheduling Order process and then the Global Scheduling process. To accomplish this, you first
create a Scheduling process set. You add the Calculate Global Scheduling Order and Global Scheduling processes
to this process set and indicate you want the Calculate Global Scheduling Order process to run first. You then
assign the process set to an automatic schedule.
You can check on the status of automatic processing by launching the System Monitor. This management tool
displays the scheduled tasks, active tasks currently running, and the tasks that recently completed processing.
You can also review the reports that were recently generated.
The next section takes you through creating schedules and process sets. It also explains how to assign programs
to schedules and process sets, and then how to manage automatic processes through the System Monitor.

System Agents

Use System Agent Maintenance to modify the system agent, define schedules that occur during specific
intervals, and create rules to divide processing between different application servers. A powerful tool, use System
Agent Maintenance to streamline the flow of data throughout your company.
When you first install the Epicor ERP application or update your existing application, the system agent is
automatically created. You use the Detail sheet to modify how the system agent interacts with the application
server. You can only have one system agent, so you cannot delete it. However if the system agent is accidentally
deleted by an external method, you can create a new agent using System Agent Maintenance.
You will primarily use System Agent Maintenance to define schedules users select on reports, processes, and
executive queries. Each schedule is set up to activate at regular, specific intervals - seconds, minutes, days, weeks,
and months. When the system clock activates a schedule, all the tasks assigned to this schedule run. Depending
on the task, this could cause a specific report to generate and print, a business activity query to export, a global
alert to be sent, and so on.

What Can Be Automated

Many reports and process programs throughout the application have a Schedule list. If a program has this list,
you can automate it through the system agent.

Epicor Kinetic - Classic User Interface | 2021.2 35

Automatic Data Processing System Setup and Management Course

All schedules you create through System Agent Maintenance appear on this Schedule list. To automate the
program, first select the Recurring check box. This activates the Schedule list. When you select a schedule other
than Now, this program is added to the selected schedule's tasks. When the system agent launches the selected
schedule, this program runs automatically.
You can automate these types of programs:
• Processes - These application programs can become tasks, like the Mobile Connect Server Process, the
Business Activity Query Export Process, Process MRP Process, and so on. For a complete list of the
processes you can automate, review the System Agent Processes Working With topic in the application
help.
• Reports - Most reports have a Schedule list. Your users can select a schedule for various reports. This report
default is linked to each user record, so your users can automate the specific reports they need. When the
report is linked to a schedule, it then generates and prints through the system agent. For more information
on reports, review the Report Defaults topic.
• Executive Queries - You use executive queries to create a cube of data gathered for display on an executive
dashboard. You define the cube of data you wish to collect within the Executive Query program; for more
information, review the Executive Query topics.

Task Agent Rules

You can also create task agent rules that distribute the processing load to different application servers. This
improves application performance by causing a resource heavy process, like MRP Processing, to run on an
application server that can better handle this load, and then creating an different task agent rule that moves a
group of financial reports that require less processing to a different application server. These tasks can now run
simultaneously, improving how quickly they generate data.
This performance tuning feature is beyond the scope of this course. However you can learn how to set up task
agent rules in the Performance Tuning Guide in the Distribute the Load section. This guide is located in the
System Management > Working With > node in the application help. The Performance Techniques course also
explores task agent rules along with other techniques you can use to improve application performance.

Workshop - Modify the System Agent

Do the following exercises to make changes to the company's system agent.

Modify a System Agent

When you first install the Epicor ERP application or update your existing application, a default system agent is
automatically created. Use the Detail sheet to indicate how each system agent interacts with the application
server.
This series of steps are intended as a tour. Because the system agent is already set up in the Education environment,
there is not much that can be modified in this exercise.

1. Return to the Home screen and click the Settings tile.

2. Click Change User... and login using the epicor/epicor account.

3. Return to the Home screen and click the Menu tile. Navigate to System Agent Maintenance.
Menu Path: System Setup > System Maintenance > System Agent
Important This program is not available in Classic Web Access.

When the program launches, the SystemTaskAgent automatically displays on the Detail sheet.

36 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Automatic Data Processing

4. Optionally enter a different Description for the system agent.

5. By default the Auto Start check box is selected. This indicates the system agent is running. If you need to
turn off this system agent, clear this check box.

6. Use the Processing Delay field to regulate how long the system agent waits before looking for new tasks.
Enter 30 (seconds) in this field.
If you have a fast server that can accommodate the network traffic, enter a lower number. A value of 10
indicates ten seconds must pass before the system agent looks for new tasks to run; a value of 60 indicates
a minute must pass before the next batch of tasks is processed.

7. The User Name and Password fields define the name and password of the user who logs onto the
application server (AppServer). Enter the user name and password combination in these fields; this account
is validated against the existing user accounts in the database. If the application cannot find a valid user
name/password combination, an error message displays.
Important This user account must also have permission to use the system agent. You set up this
permission within User Account Security Maintenance; find the user account you need, navigate
to the Options sheet, and select the Allow Session Impersonation check box.

8. If you use a load balancer to improve performance, the Appserver URL field defines the main application
server that handles load balancing. An optional field, enter the URL for this application server when you
need to improve the performance of Material Requirements Planning (MRP) sub processing or other sub
tasks. (As of this writing, only MRP currently runs as a sub task.)
Note The application server (AppServer) you enter must use the same Net TCP Binding Configuration
as your main application server. The endpoint binding defines how this application server checks for
authentication certificates through Internet Information Services (IIS). You can verify whether this
application server uses the same binding by reviewing the properties for both application servers in
the Epicor Administration Console.

9. If your application server (AppServer) is set up for the UserNameSSLChannel endpoint binding type, enter
the DNS Endpoint Identity for your server. When you use this type of endpoint binding, the system
authenticates the client's connection to the application server through a Secure Sockets Layer (SSL) X509
certificate. Some processes, such as Purchase Order Suggestions and Material Requirements Planning (MRP),
need to call this Domain Name System (DNS) identity to run their child tasks. Be sure to enter the machine
name in this field.

10. You next define the various directories used with the application server connection. The Server Data
Directory defines the root directory for files created by tasks run by the system agent. This directory should
be a shared location. Typically it is a local directory located on the same machine that runs the application
server. For example, C:\EpicorData10.

11. The Client Data Directory is the name of the root directory for common client files such as configuration,
photos, and drawings. This should be a shared directory, normally on the same machine where the application
server is running. For example: \\Server\EpicorData10

12. The Client Program Directory defines the location of the server deployment directory. You must enter
this path using the UNC convention. Typically this value uses the \\Server\Epicor10\Server format.

13. The Status group box indicates the current state of the system agent and when it was started.

14. When you finish modifying the system agent details, click Save.

Epicor Kinetic - Classic User Interface | 2021.2 37

Automatic Data Processing System Setup and Management Course

Create a Schedule

You can create as many schedules as you need. These schedules display as options on reports, processes, and
other tasks you can link to a recurring schedule.

1. Click the Down Arrow next to the New button; select New Schedule.

2. Navigate to the Schedules > Detail sheet.

3. The Schedule Number defines each schedule as it is added to the system agent. This number is automatically
assigned.

4. Enter a Description for the schedule. For this workshop you need a schedule that runs once every Sunday,
so you enter Sunday Tasks in this field.

5. Click the Next Run drop-down list to define the first date during which this schedule should run. Select
today's date.

6. Select a Schedule Type. You can select an Interval (hours/minutes/seconds), Daily, Weekly, or Monthly,
Once, or Startup schedule type. Select the Weekly type.
The Weekly sheet becomes active.

7. You want this schedule to run one time each week. Enter a "1" in the Recur every <value> week(s) field.

8. From the On: drop-down list, select Sunday.

Notice the next date on which the Sunday falls is calculated and displays in the Next Run field. You cannot
change this date. However you can still change the time on which the schedule activates on this calculated
date.
Tip For other schedule types, you can change both the date and time. Weekly schedules are unique,
as the application needs to find and use the next available date on the schedule to prevent activation
errors.

9. To activate the schedule, select the Enabled check box.

10. When you finish, click Save.

11. As tasks run using this schedule, you can review them within System Agent Maintenance. To do this, navigate
to the Schedules > Tasks > List sheet.
Tip You can also review them through the System Monitor; this program is explained later in this
course.

Your new schedule is available throughout the application. Users can select it on reports, processes, executive
queries, and process sets.

38 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Automatic Data Processing

Workshop - Manage the System Agent

The following workshops illustrate how to use the system agent.

Select a Schedule

After you enter the schedules, you can set up programs to run using a specific schedule. These programs
automatically refresh and generate data when the schedule activates them.
During this workshop, you set up the Production Detail report to automatically generate its data through the
weekly Sunday schedule you previously created.

1. Navigate to the Production Detail report.

Menu Path: Production Management > Job Management > Reports > Production Detail

2. Select the Schedule during which you want this report to generate. Because you want this report to generate
on Sunday, select the Sunday Tasks schedule.

3. You now indicate you want this report to run each time the system agent launches the Sunday Task schedule.
To do this, select the Recurring check box.

4. Lastly indicate these selections are the default values you want for this report. From the Actions menu,
select Save Defaults.
Tip Additional options are available on this Actions menu. To restore the program to its original
parameters, select Get Defaults. To clear the current default parameters, select Remove Defaults.

5. Close the Production Detail Report window.

Now each time the system agent launches the Sunday Tasks schedule, the Production Detail report automatically
generates. This report would then be available for users when they arrive for at work on Monday. You can verify
this report has run by launching the System Monitor.

View Task Parameters

When tasks are assigned to a schedule, you can review and change their parameters directly through System
Agent Maintenance.

1. Return to System Agent Maintenance.

2. Click the Refresh button.

3. Use the Tree View to expand a schedule with tasks assigned to it. Select the Sunday Tasks schedule.

4. Now expand the Sunday Tasks node. The Production Detail report is listed under this node.

5. From the Actions menu, select View Task Parameters.

6. The selected task (report, process) displays.

7. Define the parameters you want to use for this process.

8. When you finish, click the Submit button.

Epicor Kinetic - Classic User Interface | 2021.2 39

Automatic Data Processing System Setup and Management Course

Process Sets

Use Process Set Maintenance to create process sets; these records group together related tasks you want to
run automatically.
You mainly use process sets when you have tasks that need to run through a specific sequence. Process sets can
contain an extensive number of tasks - like reports, processes, and executive queries. When the process set is
activated by the system agent, these tasks automatically run in the sequence you define.

Workshop - Manage Process Sets

The following workshops demonstrate how you create and use process sets.

Create a Process Set

You will create a process set that closes and completes jobs. It will then generate the Job Traveler.

1. Navigate to Process Set Maintenance.

Menu Path: System Management > Process Sets > Process Set Maintenance
Important This program is not available in Classic Web Access.

2. Click New on the Standard toolbar.

3. Use the Company drop-down list to define the company inside which this process set is available. Users
within this company can then select this process set. If you are in an Epicor ERP environment, you can create
process sets for either all companies or the current company. For this workshop, select the All option.

4. Enter the Process Set ID; this value is the identifier for this process set throughout the application. Enter
JobTasks.

5. Enter a Description for the process set. This value displays on drop-down menus; enter Job Tasks Process
Set.

6. If this process set is required for the application to run, select the System Process check box. Users cannot
modify or delete system process sets. For this workshop, do not select this check box.

7. Optionally, select the Allow Simultaneous Processing of Tasks check box to cause the process set to
asynchronously run and complete tasks.
These tasks run at the same time, improving performance. Activating this option causes the application to
ignore the task sequence defined in the Process Set Tasks grid. For this workshop, do not select this check
box.
Tip If the tasks only generate a small amount of data and you have the system resources to handle
these tasks simultaneously, consider selecting this check box.

8. As tasks are added to this process set, they display within the Process Set Tasks grid. However no tasks
are currently added to this process set, so the grid is empty.

9. Click Save.

40 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Automatic Data Processing

10. Close the program.

This process set is now available. Executive queries, processes, and reports can be added to this process set.

Add Tasks to a Process Set

For this example, you add the Job Traveler report, the Auto Job Closing Process, and the Auto Job Completion
Process to your new process set.

1. Navigate to the Job Traveler report.

Menu Path: Production Management > Job Management > Reports > Job Traveler

2. Click the Save Process Set button.

The Save to Process Set window displays.

3. Click the Process Set drop-down list and select the Job Tasks Process Set.

4. Click OK. The Job Traveler is added to this process set.

5. Close the Job Traveler.

6. Now launch the Auto Job Closing Process.

Menu Path: Production Management > Job Management > General Operations > Auto Job Closing Process

7. Repeat the previous steps. Click the Save Process Set button.

8. Select the Job Tasks Process Set and click OK.

9. Close the Auto Job Closing Process.

10. To add the last task, launch the Auto Job Completion Process.
Menu Path: Production Management > Job Management > General Operations > Auto Job Completion
Process

11. Repeat the previous steps. Click the Save Process Set button.

12. Select the Job Task Process Set and click OK.

13. Close the Auto Job Completion Process.

14. Now review the sequence this process set uses when it launches each task. Return to Process Set
Maintenance.
Menu Path: System Management > Process Sets > Process Set Maintenance
Important This program is not available in Classic Web Access.

15. Click the Process Set ID button to find and select the JobTasks process set.

16. The tasks you added to this process set display within the Process Set Tasks grid.
Notice each task is assigned a number. In this example, the Job Traveler is run first, the Auto Job Closing
Process is run second, and the Auto Job Completion Process is run third. When a schedule activates this
process set, the tasks launch in this order.

Epicor Kinetic - Classic User Interface | 2021.2 41

Automatic Data Processing System Setup and Management Course

17. You want the Job Traveler to print after the close and complete processes. Highlight the Job Traveler and
click the Move Down button until the Job Traveler is below the Auto Job Completion Process.

18. Click Save.

19. Close Process Set Maintenance.

When the process set activates, it now processes the tasks in this sequence:

1. Auto Job Close Process

2. Auto Job Completion Process

3. Job Traveler

Schedule a Process Set

To cause the tasks assigned to this process set to activate, assign the process set to an automatic, recurring
schedule. When the recurring schedule activates, the tasks assigned to the process set run in the sequence you
defined.

1. You assign a schedule to a process set within the Schedule Process Set program.
Menu Path: System Management > Process Sets > Schedule Process Set

2. Click the Process Set drop-down list to select the process set you need. Select the JobTasks process set.

3. Click the Schedule drop-down list and select the Sunday Tasks schedule.

4. This activates the Recurring check box. Select this check box to indicate this process set launches each time
the selected schedule activates.

5. Enter a User Description that identifies the purpose for the process set. When you review tasks on the
System Monitor, this description displays. Enter Job Refresh for the Week.

6. Click the Submit button.

Now each time the system agent launches the Sunday Tasks schedule, this process set activates. The task runs
in the sequence you defined.

System Monitor

Use the System Monitor to verify the processes, reports, and other scheduled tasks you have run.
This program interacts with the data by displaying items scheduled to run within your Epicor ERP application.
The sheets in the System Monitor display records that indicate a specific program such as a report, executive
query, or process (for example, Process MRP) is run. The status of the record determines the sheet where each
record displays. Use the System Monitor to do the following tasks:
• Manage - Review the status of the item being run.
• Preview - Click the Print Preview button to preview a report/form on your screen before it prints. This
functionality is only available on the Reports sheet.

42 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Automatic Data Processing

• Print - Click the Print button to print a generated report/form. You can also reprint reports/forms. Use this
function to reprint a report (for instance, the Stock Status Report) from a previous date. This functionality is
only available on the Reports sheet.

Workshop - Use the System Monitor

The System Monitor automatically runs when you first launch the application.

1. From the System Tray, double-click the System Monitor icon. You can also access this program from within
the Epicor ERP application.
Menu Path: System Setup > System Maintenance > System Monitor
Important This program is not available in Classic Web Access.

The System Monitor displays.

2. The Active Tasks sheet shows tasks currently in process. These include reports, processes, and executive
queries.

3. To end a task, highlight it and then click the Delete button.

4. Use the History Tasks sheet to review the reports, processes, and executive queries recently run on the
application server (AppServer). To view details for standard and APR reports, use the Report Details sheet
and the Report/Task Logs sheet.
Tip You can further limit how long a record displays on the History Tasks by defining the retrieval
properties you wish to use. This feature is described later.

5. Use the Scheduled Tasks sheet to review and work with tasks scheduled to run at a later time.

6. You can end a scheduled task by highlighting it and then clicking Delete.
The task is removed from the Scheduled Tasks grid.

7. You can verify that scheduled reports ran on the Reports Detail sheet. If a report failed to generate, this
issue displays on this sheet as well.
Tip While the report programs run on the application server, they generate physical files. These files
are the data source the System Monitor (running on the client) uses to perform the actual printing.
The task agent works through the tasks assigned to the application server, and by default this program
runs a purge of the reports approximately every 15 minutes. To keep a specific report file available
for a longer length of time, use the Archive Period field on the report/form program. When you
enter a value in this field, the task agent does not purge it until the system clock passes this defined
Archive Period.

8. You can further refine how long the System Monitor displays information and determine how the System
Monitor notifies you about errors, report results, and process results. To do this, click Actions > Retrieval
Properties.
The Retrieval Properties window displays.

9. Select the status notification balloons you want to appear. Available options:

a. Popup on successful Reports - Displays a balloon notification each time a report generates without
error.

Epicor Kinetic - Classic User Interface | 2021.2 43

Automatic Data Processing System Setup and Management Course

b. Popup on Report Errors - Displays a balloon notification when a report fails to generate.

c. Popup on successful Processes - Displays a balloon notification each time a process generates without
error.

d. Popup on Process Errors - Displays a balloon notification when a process fails to generate.

10. You next determine how long you want report tasks to display on the Reports tab. Define these options:

a. Report Interval Type - Indicates the interval you use to measure the cutoff for report records. You can
select a Days, Hours, or Minutes time interval. You can also select the Records option; this limits the
number of records that display on the Reports tab.

b. Report Interval Span - Use this numeric field to define either how much time can pass in days, hours,
or minutes before a record is removed, or the maximum number of records that can display on the
Reports tab.

11. Now determine how long you want tasks to display on the History Tasks tab. Define these options:

a. History Interval Type - Indicates the interval you use to measure the cutoff for the task records. You
can select a Days, Hours, or Minutes time interval. You can also select the Records option; this limits
how many records display on the History Tasks tab.

b. History Interval Span - Use this numeric field to define either how much time can pass in days, hours,
or minutes before a record is removed, or the maximum number of records that can display on the History
Tasks tab.

12. When you finish selecting your retrieval options, click OK.

The System Monitor is an important tool that helps you manage tasks sent to the server - both manual and
automatic tasks. Use this program to verify data processing generates as expected.

44 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Customization Management

Customization Management

The Epicor ERP application contains a diverse suite of customization tools. Through these tools, users can modify
the application to better reflect the needs of your organization and industry.
Customization refers to a series of related tools embedded in the Epicor ERP application. The customization tools:
• Personalization - Each user has limited access to personalize the look of programs and grid layouts. Certain
users can also have additional personalization rights to modify how fields are placed on the interface. These
changes are linked to a specific user account, so other users cannot access these personalized programs.
• Customization - Users can also create customization layers of programs which are available to the entire
company. Besides manipulating program interfaces, users can also add new fields and entire sheets to programs.
They can also enter custom code that runs unique processes.
• Styling - Users can modify the look and feel of the application through the styling tools. Users with styling
rights can create new themes that change the color, font, and other characteristics of the interface. This
functionality is typically used to differentiate between companies and sites available in the Epicor ERP application.
• Dashboards - Through the dashboard functionality, users with dashboard developer rights can create custom
views of data. They can first create a custom business activity query (BAQ) that pulls in data from one or
multiple tables. These BAQs can be read only views or updatable BAQs through which users can enter company
specific data. These users then define what columns display from each BAQ and they can also create calculated
fields to further customize the data results. These BAQs can then be placed on custom dashboards where the
data is further organized through grids and charts. If the BAQ is updatable, these dashboards can be custom
entry programs.
• Localization - The localization tools display the interface using different language and culture options. These
users can change the base strings to the selected language, and then update specific strings to reflect usage
specific to a region or culture.
• Business Process Management (BPM) - By creating method, data, and updatable BAQ directives, users can
better manage data transactions. Users can intercept data before it's recorded to a database, send alert
messages to selected users, and other automatic data monitoring tasks.
• Help Annotations - The application help system can be customized to document processes and procedures
specific to your company or area within your company. Each topic in the application help can contain two
annotations, a User annotation and a Company annotation. User annotations are personalized help notes
linked to a user account; only the specific user can display these annotations. Company annotations are
custom help notes available for all users in a specific company.
• Solution Management - When users finish customizing the application, they need a way to distribute their
new items – custom programs, business objects, new dashboards, Business Process Management directive
groups, user-defined codes, extended properties, and so on – at the same time. Users can bundle these items
together using the Solution Workbench. This program can track current user's activity, for example, new
dashboards, and then automatically add these items into the solution. Another way of adding objects is to
select existing database items, such as previously created customizations, menu items, and so on. Users then
bundle these items together by creating a .cab file. This single file can be distributed and imported into another
Epicor ERP application environment.
You grant users different levels of customization rights through User Security Maintenance. By controlling who
can modify the Epicor ERP application, you reduce the chance an issue occurs from a poorly created customization,
personalization, and dashboard. You also have a better idea of what customization layers are added to the system,
so you can prepare these custom programs for a smooth transition when you upgrade the system.
This section of the course explores how you manage customization rights. It also shows you the management
programs available for monitoring the personalizations, customizations, dashboards, and help annotations. The
section concludes with Solution Management overview - through this section you will learn how to use solution
types, get to know predefined solution elements, and add custom items into the solution.

Epicor Kinetic - Classic User Interface | 2021.2 45

Customization Management System Setup and Management Course

Workshop - Customization Rights

You assign user access to the customization tools through User Account Security Maintenance. To do this, you
select a user account and then identify the customization tools this account can access.

Select the User Account

Verify you are logged in using the epicor account.

1. Navigate to User Security Maintenance.

Menu Path: System Setup > Security Maintenance > User Account Security Maintenance

2. Click the User ID... button to find and select the XXX_User account (where XXX are your initials).

The user account displays. You can now activate the permissions available through this user account.

Assign Customization Rights

This section is intended as a tour of the rights you can assign to each user account. Many of these rights activate
customization and personalization tools.

1. Click the Options sheet.

This sheet displays the privileges available for each user account.

2. To grant access to the customization tools, you select the Customize Privileges check box.
This user can then switch the Epicor ERP application to Developer Mode and create customization layers
for most programs.

3. You can select the Allow Personalization check box to give this user access to Personalization mode.
This user can then change fonts, font sizes, colors, and tab stops on program interfaces; these changes only
appear when the user logs in with this account.

4. To grant localization privileges, you can select the Allow Translation check box.
This user can then select different language sets for the text strings displayed throughout the application.
This user can also run the Translation Utility to modify the default language strings to reflect regional
spellings and phrases.
Important Selecting this check box slows down performance. This option causes the translation
functionality to load with each form. As a best practice, create a separate account for this user that
has translation privileges. When the user needs access to Language Maintenance and the other
translation tools, the user logs in with this specific translation account.

5. You select the Dashboard Developer check box to give the current user right to switch the dashboard
program into Designer Mode.
This user can then modify existing dashboards or create new ones.

6. Select the SSRS Report Designer check box to grant this user access to the SSRS report designer tools.
This user can then create, download and upload the SSRS reports. For more information, review the SQL
Server Reporting Services (SSRS) topics within application help.

7. To give this user access to the entire business process management (BPM) feature set, you select the BPM
Advanced User check box.

46 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Customization Management

This user can then work with the source code that runs each method directive.

8. You select the BAQ Advanced User check box to indicate the current user can create updatable business
activity queries (BAQs).
This user can then create BAQs that allow data entry; these BAQs can then be placed on dashboards to
create custom entry programs.
Important To create updatable BAQs, the current user must also have BPM Advanced User rights.
Because updatable BAQs run through business process management (BPM) methods, the current user
requires permission for both advanced BPM and advanced BAQ to create and modify updatable BAQs.
This user can also create BPM methods that activate when users enter or modify data through an
updatable BAQ.

9. You select the Allow Creation of Cross Company BAQ check box to give this user the ability to build
BAQs that can store data from multiple companies.

10. You can select the Can Create Solutions check box to indicate a user can build a solution in the Solution
Workbench by exporting and packaging objects that are part of the solution into a .cab file.

11. To provide a user with the ability to install solutions created in the Solution Workbench, you select the Can
Install Solutions check box.

12. You activate the Can Maintain Predictive Search check box to indicate the current user can create and
edit predictive searches. These configurable search programs pull in unique search results. Selecting this
check box causes Predictive Search Entry to appear on context menus.

13. You select the Can Maintain Quick Search check box to indicate the current user can create and edit quick
searches. These configurable search programs pull in unique search results. Selecting this check box causes
Quick Search Maintenance to appear on context menus.

14. You can select the Can Maintain Enterprise Quick Search check box to create Enterprise Quick Search
entry items that return values back to search fields. When granted, user can right-click search fields and see
Enterprise Search Quick Entry menu item (if Enterprise Search is installed and configured).

15. To give this user access to the styling tools, you select the Can Maintain Themes check box. This user can
then modify the look and feel of the application. This feature set is used when a user wants to create different
interface styles for different companies.

16. You activate the Can Publish Home Page Layouts check box to indicate the current user can create and
modify Home Page layouts. This user can then add/remove tiles, select colors, update splash screen text,
define favorite programs, and so on. Other users can then select these Home Page layouts, and they can
also be defined as default layouts for new users.

17. You define help annotation rights through two check boxes. To give this user permission to write and edit
user annotations, you select the Can Edit User Annotations check box; these annotations only display for
the current user account. To give this user rights to create and edit company annotations, you select the
Can Edit Company Annotations check box.

18. After you select the options you want on the current user account, click Save.

19. Close User Account Security Maintenance.

The next time this user logs into the Epicor ERP application, the tools you activated for the user account are
available.

Epicor Kinetic - Classic User Interface | 2021.2 47

Customization Management System Setup and Management Course

Workshop - Personalization Purge

Use Personalization Purge to remove personalizations from the Epicor ERP application.
Through this program, you first locate the personalizations created by a specific user. You can then remove a
personalization this user no longer wants or remove all personalizations created by this specific user. For example,
you might use this program when an individual leaves your organization.
This program only removes personalizations. If you wish export and import a personalization, use
Customization/Personalization Maintenance. This program contains more functionality, as you can correct
issues with personalizations and export/import personalizations into a new company. The next Customization
Maintenance section describes how to use this program.

Use Personalization Purge

1. Navigate to Personalization Purge.

Menu Path: System Management > Purge/Cleanup Routines > Personalization Purge
Important This program is not available in Classic Web Access.

2. Click the Search button to find and select the specific user's personalizations you wish to review; select one
of the personalizations linked to the Chris Fullerton user account.
The selected personalization displays in the Search Results grid.

3. Click the OK button.

4. Click the List sheet.

5. Review the following fields:

a. The User field displays the identifier for the user who created the personalizations.

b. The Type indicates what kind of personalization was made to the selected item.

c. The Company field displays the name of the company record that contains the personalizations.

d. The Product field indicates the Epicor ERP application used to create the personalizations.

e. The Form ID field displays the application filename of the modified program.

f. The Description field contains additional information about the personalization.

g. The Last Updated field displays the date on which this personalization was most recently modified and
the User ID field indicates the user who most recently updated the personalization.

6. If Epicor Social Enterprise (ESE) is configured in your Epicor ERP installation, you can also review this user's
activity recorded in ESE. This may help you decide whether you should remove the personalization. To do
this, click Actions > Activity Stream.

7. Click on the Activity Stream tab.

This user's activity displays on this sheet.

8. If you wanted to remove the selected personalization. click Actions > Purge Selected.

48 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Customization Management

9. If you wanted to delete all the personalizations currently displayed in this program, click Actions > Purge
All.

The selected personalizations are removed from the Epicor ERP application.

Workshop - Customization Maintenance

Use Customization/Personalization Maintenance to manage the customizations and personalizations that

exist within your Epicor ERP application. Its primary feature is the verification functionality which you use to detect
problems within customizations or personalizations.
This maintenance program also contains the tools you need to correct issues. Customization/Personalization
Maintenance is especially useful when you upgrade the application to a new version, as it can help you make
customized and personalized programs compatible with the current version.
Tip When users attempt to launch a customized or personalized program that is not compatible, an error
message displays which prevents the user from launching the program. Customization/Personalization
Maintenance can then be used to upgrade the program. However if the customized or personalized program
is compatible, no error message displays and the user can run the program.

This program has additional functionality for importing and exporting your customizations and personalizations.
Leverage these functions to make user modified programs available throughout your organization. You can also
use this maintenance tool to delete a customization or personalization. Run this feature when you want to either
remove custom program stages you no longer need or remove personalizations made by employees who are no
longer with your company.
If you work in a multi-company environment, you can display and update customizations/personalizations in the
companies for which you have access. Any personalized and customized programs created in the companies
selected on your user account within User Account Security Maintenance display within this program. If you work
in an Epicor Express environment, you can display and update customizations/personalizations made within the
current company.
For System Administrators with Security Manager rights, this program can be used to modify fields and delete
customizations and personalizations. For System Administrators without Security Manager rights, this program
displays in a read-only format.

Review, Update, and Delete Customizations

1. Navigate to Customization/Personalization Maintenance.

Menu Path: System Management > Upgrade/Mass Regeneration > Customization Maintenance
Important This program is not available in Classic Web Access.

2. To display customizations and personalizations, click the Name... button. The Customization/
Personalization Search program displays.

3. Click Search.
The customizations and personalizations display in the Search Results grid.

4. Now click the Select All button and then click OK.
The customizations and personalizations populate the tree view.

5. Highlight the first customization option.

Epicor Kinetic - Classic User Interface | 2021.2 49

Customization Management System Setup and Management Course

6. The Description field displays the brief explanation entered by the user when the
personalization/customization was created. If you need, you can update the description; enter XXX
Customization (where XXX are your initials).

7. Review the following fields:

a. The Form Name field contains the .xml filename of the customized or personalized form.

b. The Parent Layer displays the code layer above this customization or personalization. This value is set
and managed by the application and displays for your information. For example, if a user personalized
a customization, the name of the customization displays in this field.

c. The Company field displays the name of the company using the customization/personalization.

d. The Product ID indicates the application that was used to create the customization/personalization –
for this example EP (Epicor) displays.

e. The Last Updated By field displays the user who most recently worked on this customized or personalized
program.

8. Select the Work In Progress check box. This check box indicates the modification is not available yet in
Run Mode for users. You can then continue to develop the personalization or customization before releasing
it.

9. Review the information in the rest of the fields on this sheet:

a. The Type Code field displays the type. The type can be a Personalization or a Customization.

b. The Valid For field indicates for which application version this customization/personalization runs. For
example: [Link].

c. The Last Updated field displays the date on which this customization or personalization was last modified.

10. The Status field indicates the current state of the selected customized or personalized program. Available
options:
• Pass – This customized or personalized program works with the current version. A program must have
the Pass status before users can launch the program in Run Mode. If it does not pass, an error message
displays and the user cannot launch the program.
• Not Validated – This customization/personalization has not yet been evaluated by the verification tool.
• Warning – Some issues with the elements (controls or properties) on the customized/personalized
program are occurring. You can view these issues on the Warning and Errors sheets; these sheets are
described later in the Verify Customizations workshop.

11. The Where Used grid displays all places that use this customized or personalized program within the
application.

12. You can use the Restore button to revert the current customized or personalized program back to its
previous version. Use this button to undo the changes you made to upgrade the customization/personalization.
Tip The Restore button is only available if a backup version exists in the database. The application
automatically creates a backup version of a customization or personalization during an upgrade.
However if the customized or personalized program has not been upgraded, this button is not available.

13. To record changes to the current customized or personalized program, click Save.

50 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Customization Management

14. If you want to remove the selected customization/personalization, click the Delete button. This customized
or personalized program is now completely removed from the application.

Export Customizations

You can use Customization/Personalization Maintenance to export a selected customized or personalized program
into a folder you select. You can also change the name of the exported file.
Typically you export a customization/personalization into a shared folder so other users can then import it into
their application using Customization/ Personalization Maintenance. Review the next workshop section to learn
how to import a customization or personalization.
Important The export file uses a special format that can only be imported within
Customization/Personalization Maintenance. You cannot use this format for importing within the
Customization Tools Dialog.

To export a customization:

1. Clear the Work In Progress check box you selected in the previous section.

2. Click Save.

3. From the Actions menu, select Export Customization.

4. The Export Customization window displays.

5. The current customization displays within the Name and Description fields. Notice you can change the
Description. For this workshop, do not change this value.

6. For the New Name field enter XXX Customization Export (where XXX are your initials). If you leave this
field blank, the exported file uses the Name value for its filename.

7. Click the Export Filename button to find and select the path and filename you want. By default this path
is: \\<Company Name\shared\export

8. Enter the File name you will use for this exported customization. Enter XXXCustomization in this field
(where XXX are your initials).

9. Click Save.

10. Now click the Export button.

The customization is now available within the selected destination folder. Other users can now import this
customization into their environments.

11. Close Customization/Personalization Maintenance.

Import Customizations

You can use Customization/Personalization Maintenance to import a selected customization or personalization

into your application. You can also change the name of the imported file.
During this exercise, you will import the personalization you previously exported into a different company. You
can then use the customization/personalization as you need in this company. You can indicate it is a Work in
Process customization, modify the imported customization, correct issues, and so on.

Epicor Kinetic - Classic User Interface | 2021.2 51

Customization Management System Setup and Management Course

To import a customization or personalization:

1. Return to the Menu screen.

2. Notice Epicor Education, Main displays as a link in the upper right corner. Click this link.
The Change Current Company and/or Site window displays.

3. Double-click the Epicor Distribution, Main Site option.

The Menu now displays the Epicor Distribution, Main Site location.

4. Navigate to Customization/Personalization Maintenance. Use the tree view to verify you are in the
Epicor Distribution, Main Site location.
Menu Path: System Management > Upgrade/Mass Regeneration > Customization Maintenance
Important This program is not available in Classic Web Access.

5. From the Actions menu, select Import Customization.

6. The Import Customization window displays.

7. Click the Import Filename button to find and select the customization or personalization you want to
import.

8. Navigate to the EPIC06 > Shared > Export folder. Select the [Link] file you created in the
previous exercise (where XXX are your initials).

9. Click Open.

10. Optionally, enter a New Name for the customized or personalized program. This new name might help
you locate the program later within your application. In this field, enter XXX Customization Import (where
XXX are your initials).
Tip If you leave this field blank, the imported file uses the name of the file that was exported. If the
Import Customization program finds a file with the same name, you are asked if you want to copy
over the existing file.

11. Do not select the All Companies check box.

When selected, this check box indicates this imported customization/personalization is available to every
company within your application. If this check box is clear, the imported program is only available for use
within the current Epicor Distribution company.

12. Click OK.

A dialog box displays, indicating the customization was successfully imported.

13. Click OK.

The customization/personalization is now added to the current company. It displays within

Customization/Personalization Maintenance.

52 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Customization Management

Verify Customizations

Use Customization/Personalization Maintenance to verify the selected customization contains valid code and will
run correctly.

1. From the tree view, select the XXX Customization Import you just imported (where XXX are your initials).

2. Now from the Actions menu, select Verify Customization.

The customization or personalization is run through the verification process. This process launches the
program in a hidden mode that simulates what happens when a user launches the program during Run
Mode.
Tip Notice you can also verify a group of customizations and personalizations. To do this, find and
select several customizations and personalizations. Then click Actions > Verify All.

3. Most likely the Status field (on the Detail sheet) displays Pass. However if this field displays an Error value,
you would next click the Compile/Script Errors tab.

4. Compile errors, if any, display on the Errors grid. You can sort the errors through the columns on this grid.
Review these fields:

a. The Level column indicates the severity of each error. If the Error value displays in this column, it indicates
these items must be fixed before the custom code can successfully compile.

b. The Error Code column displays the C# error code number.

c. The Line# column contains the specific line within the code which generated the compile error.

d. The Warning column displays the specific error that occurred.

e. The Record Type column indicates the code type which caused the error.

5. You can click the Selected Issue Helper button to display the Customization Data window. Use this
window to correct specific problems with the customization.

6. Now click the Warnings sheet. This sheet displays elements within the customized or personalized program
that did not validate. These elements display within the Warnings grid.

a. The Control Name field defines the elements within the program that could not be verified.

b. The PropName and PropValue fields display the property name and value for the selected property.

c. The Warning field displays why the warning generated.

d. The Record Type column indicates the code type which caused the error.

7. To remove a specific element from the program, you would use the Select check box. To remove multiple
elements, choose multiple Select check boxes.

8. To select all the elements that generated warnings, use the Select All button.

9. To remove the selected elements from the Warnings grid, use the Remove Selected Items button.

You can now use the Run, Modify, and Show Custom Data features to help you identify these issues. This
functionality is described during the next exercise.

Epicor Kinetic - Classic User Interface | 2021.2 53

Customization Management System Setup and Management Course

Run or Modify Customizations

To run or modify a selected customization or personalization in Run Mode:

1. From the tree view, select the XXX Customization Import (where XXX are your initials).

2. To activate the customization in Run Mode, click Actions > Run Customization.
The customized program displays in Run Mode. You can now test the customization by entering data,
clicking buttons, and running other actions.

3. Close the customized program.

4. You can also launch a customization or personalization in Developer Mode. Click Actions > Modify
Customization.
The Select Customization window displays.

5. Select the XXX Customization Import layer (where XXX are your initials) and click OK.
The customized program displays.

6. Developer Mode is active, so you can display the customization tools for this program. To do this, click
the Tools menu, select Customization.
The Customization Tools Dialog displays; you can now work on the customized or personalized program
as needed.

7. Close the Customization Tools Dialog and the customized program.

Workshop - Dashboard Maintenance

Use Dashboard Maintenance to maintain current dashboards through a single management interface.
Dashboards are customized views of data created using the Dashboard application. Users select custom or existing
business activity queries (BAQs), and display the queried data through grids, charts, and gauges. This data can
be filtered through rules defined on the dataview, and row rules can also be defined that alert users when specific
data conditions are met. Users can also add links to web sites and reports that they then display through the
dashboard.
You administrate this customization toolset through Dashboard Maintenance. You can run, modify, deploy an
individual dashboard, or deploy all your dashboards in Dashboard Maintenance. You can also generate the web
form of these dashboards through this management program.

Review Dashboards

During the following, you will find and select the existing dashboard and review its details.

1. Return to the Menu screen.

2. Notice Epicor Distribution, Main displays as a link in the upper right corner. Click this link.
The Change Current Company and/or Site window displays.

3. Click the Epicor Education company.

4. Double-click the Main site.

54 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Customization Management

The Menu now displays the Epicor Education, Main Site location.

5. Navigate to Dashboard Maintenance.

Menu Path: System Management > Upgrade/Mass Regeneration > Dashboard Maintenance
Important This program is not available in Classic Web Access.

6. Verify the Detail tab is selected.

7. Click the Dashboard ID... button.

8. On the Dashboard Search Form, select the System Dashboards check box and click Search.

9. Select the APCheckTracker dashboard and click OK.

You return to Dashboard Maintenance. The Detail sheet contains the primary information for the current
dashboard.
Tip If you wish, you can select all or a group of dashboards. You can then navigate through this
group of dashboards by selecting each one on the tree view.

10. The fields on the left side display company information about the current dashboard:

a. The Company field indicates the company in which this dashboard is available. For example: EPIC06.
For system dashboards, this value is clear.

b. The Version Number displays the ICE version number used when this dashboard was created. For
example: ICE 3.0.5

c. The Last Updated By and Last Deployed By fields display the user or users who most recently made
changes to this dashboard and then made this dashboard available to other users.

d. When the Delivered check box is selected, it indicates this dashboard is a system dashboard.
Tip If the current dashboard is a system dashboard, the changes you make to it are removed when
you update the Epicor ERP application to the next service pack. If you want to save changes to a
system dashboard, use the Dashboard program to create an alternate version that won't be copied
over during an upgrade.

11. The fields on the right side of the Detail sheet display additional information, including the global information
for the dashboard.

a. The Global Company identifier displays the company from which the current dashboard originated.
For system dashboards, this value is clear.

b. The DB Version Number displays the database version used when this dashboard was generated.

c. The Last Updated and Last Deployed fields display the dates on which this dashboard was most
recently changed and deployed to the Menu.

d. If the Global Dashboard check box is selected, it indicates this dashboard is used by multiple companies
in your Epicor ERP application.

12. The Where Used grid displays the locations where this dashboard is currently located on the Menu.

Epicor Kinetic - Classic User Interface | 2021.2 55

Customization Management System Setup and Management Course

Manage and Generate Dashboards

During the follow exercise, you explore how to manage and deploy a custom dashboard.

1. On the Standard toolbar, click the Clear icon. To the message, click Yes.

2. Click the Dashboard ID button again.

3. On the Dashboard Search Form, clear both Deployed Dashboards and System Dashboards check
boxes.

4. From the list, select CustContUpdate dashboard and click OK.

5. To launch the current dashboard in Run Mode, select Actions > Run Dashboard.
The selected dashboard displays. You can now see how the selected dashboard performs.

6. Click the Refresh button to populate the dashboard with data.

You can now explore the functions available in this dashboard. For example, on the Customer List grid,
select Dalton. Notice the Customer Contacts grid refreshes and provides the list of contacts for this customer.
Since the Customer Contact grid allows data updates, you can modify the information for any of the contacts
and Save your changes back to the database.

7. Close the Customer Contact Update dashboard.

8. To launch the dashboard in developer mode, select Actions > Modify Dashboard.
The Dashboard program launches with the CustContUpdate dashboard in focus. When the Developer mode
is enabled, you can make changes to this dashboard; for example, you can add grids, charts, change
properties, filter data and so on.

9. Exit the Dashboard program.

10. In Dashboard Maintenance, select the Actions > Deploy UI Application option to deploy the current
dashboard to the server. Once complete, notice the Last Deployed By and Last Deployed fields populate.
This dashboard is connected to the database, and you can add it to the Menu. You use Menu Maintenance
to add this dashboard to the Menu; users can then access the dashboard (if you give them security rights
to it).
Tip If you are upgrading the Epicor ERP application, you must redeploy the dashboards you previously
deployed. When you search for dashboards, use the Deployed check box to determine which
dashboards were deployed and which were not used on the Menu. The Deployed check box displays
on the List sheet at the end of the grid.
If multiple dashboards display in the tree view, you can deploy them all at once by selecting the
Actions > Deploy All UI Applications option.

11. Select the Actions > Generate Web Form option.

This converts the current dashboard into a web form you can display within an internet browser.
Tip To convert all dashboards currently displayed on the tree view into web forms accessible from
an internet browser, use the Generate All Web Forms option.

12. When you finish managing dashboards, click Save and exit the form.

56 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Customization Management

Workshop - Help Annotations Maintenance

You use the Annotations feature in the application help to attach notes to individual help topics. This feature is
valuable for adding more information to a topic specific to the business processes of your organization or industry.
You can add two types of annotations. Company annotations are notes available to all users within the specific
company. User annotations are notes each user can link to a specific help topic; these annotations only display
when the specific user is logged into the Epicor ERP application.
To manage the annotations, use Help Annotations Maintenance. Through this tool, you can globally update
all annotations at the same time. This will make sure your help annotations contain current information.
Tip To learn how users create, edit, and delete annotations, review the Help System > Annotations topics
in the application help.

Create an Annotation
Navigate to Sales Order Entry.
Menu Path: Sales Management > Order Management > General Operations > Order Entry

1. From the Help menu, select Application Help.

2. Hover your mouse over the Annotations box in the bottom left corner to invoke the Annotations pane.

3. Click New > New Annotation.

4. On the User tab, enter Review Header Manifest info with shipping department.

5. Click Save and exit the Application Help.

6. Exit Sales Order Entry.

Update an Annotation

Do the following to manage your help annotations.

1. Navigate to Help Annotations Maintenance.

Menu Path: System Setup > System Maintenance > Help Annotations

2. Click the Search button on the Standard toolbar.

The Help Annotation Search window displays.

3. Search for the Review Header Manifest info with shipping department annotation you created and
click OK.

4. The Detail sheet displays the current information about the annotation.

a. The Help Page Reference field indicates which help topic is linked to the annotation.

b. The Language field displays what language was used when the annotation was created.

c. The Annotation Type defines whether the annotation is a Company or User annotation.

Epicor Kinetic - Classic User Interface | 2021.2 57

Customization Management System Setup and Management Course

d. The Created By fields display who first entered the help or course annotation and the date on which it
was entered.

e. The Modified fields display the identifier for the user who last updated the annotation and the date on
which it was updated.

5. Now enter changes you need to make in the Annotation field. For this workshop, enter additional text
"Validate the whole process for Epicor ERP."

6. Click Save.
The help annotation is updated with your change.

Continue to review and update other annotations as you need. When you finish, close Help Annotations
Maintenance.

Workshop - Solution Management

In this workshop, learn how to create a custom solution and deploy it to another company.

Review Solution Elements

Solution elements are application items you can track in your solution. Through Element Maintenance, you can
review delivered elements, create custom elements and duplicate existing ones which you may use as a basis for
custom ones.

1. Navigate to Element Maintenance.

Menu Path: System Management > Solution Management > Solution Element Entry
Important This program is not available in Classic Web Access.

2. Click Element....
The Search window displays.

3. Now click the Search button.

All the current elements display in the Search Results grid.

4. To highlight all the records, click Select All and click OK.

5. Review the list of all default solution elements delivered by Epicor:

Element Description Parent BusinessObject

Table
Name
BAQ Tracks Busines Activity Queries (BAQs) QueryHdr [Link]
created or modified through the BAQ
Designer.
BAQReport Tracks dynamic reports created or BAQReport [Link]
modified through the BAQ Report
Designer.

58 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Customization Management

Element Description Parent BusinessObject

Table
Name
BaseExtension Tracks metadata changes that occur XXXDef [Link]
in the XXXDef table on the Epicor ERP
client. These metadata changes use
the BaseExtension type.
Tip Be sure you specify a
solution type for any custom
elements that reference the
XXXDef parent table. If you do
not specify a solution type and
you use the custom element in
the solution, all metadata
changes for each XXXDef type
(BaseExtension, Customization,
Localization, and so on) are
tracked by the solution.

BpDirective Tracks BPM Method Directives created BpDirective [Link]

or modified through Method
Directives Maintenance, Data
Directives Maintenance and
Updatable BAQ Method Directives.
Customization Tracks metadata changes that occur XXXDef [Link]
in the XXXDef table on the Epicor ERP
client. These metadata changes use
the Customization type.
Dashboard Tracks Dashboards created or DashBdDef [Link]
modified through the Dashboard
program.
EfxLibrary Tracks Epicor Function libraries created EfxLibrary [Link]
or modified through the Function
Designer.
ExtensionSet Tracks changes made for system ExtensionSet [Link]
Extensibility, which includes changes
made in the Extension Maintenance
form and optionally, any assemblies
associated with the Extension. When
added to a solution and exported, it
packages the ExtensionSet and
appropriate assembly/assemblies.
Adding, editing and deleting of
Extension Sets using the Extension
Maintenance form is only allowed if
ICE3 SDK license is installed.

IPForm Tracks forms invoked by BPM method IPForm [Link]

IPForm
[Link]

Epicor Kinetic - Classic User Interface | 2021.2 59

Customization Management System Setup and Management Course

Element Description Parent BusinessObject

Table
Name
directives created in BPM Data Form
Designer.
Localization Tracks metadata changes that occur XXXDef [Link]
in the XXXDef table on the Epicor ERP
client. These metadata changes use
the Localization type.
KNTCCustLayer Tracks metadata changes that occur XXXDef [Link]
in the XXXDef table on the Epicor ERP
client as a result of Kinetic App
customization. These metadata
changes use the KNTCCustLayer
type.
KNTCPersLayer Tracks metadata changes that occur XXXDef [Link]
in the XXXDef table on the Epicor ERP
client as a result of Kinetic App
personalization. These metadata
changes use the KNTCPersLayer
type.
Menu Tracks Menu Items created or Menu [Link]
modified through Menu
Maintenance.
Personalization Tracks metadata changes that occur XXXDef [Link]
in the XXXDef table on the Epicor ERP
client. These metadata changes use
the Personalization type.
Productization Tracks metadata changes that occur XXXDef [Link]
in the XXXDef table on the Epicor ERP
client. These metadata changes use
the Productization type.
Quick Search Tracks custom quick searches created QuickSearch [Link]
through Quick Search Maintenance.
Report Tracks Reports (data definitions) and Report [Link]
created or modified through the
Report Maintenance and includes
all the components used in these
reports, such as Electronic Compliance
Definitions, BAQs, Styles, RDDs, RDLs,
and Electronic Interfaces (if any).
ReportStyle Tracks Report Style of the Report ReportStyle [Link]
created or modified through the
Report Maintenance.
When you add an SSRS Report Style
to the solution, during the build
process you can optionally pull the
definition from the corresponding

60 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Customization Management

Element Description Parent BusinessObject

Table
Name
Report Definition Language file and
include it in the solution.

RptDataDef Tracks report data definitions for RptDataDef [Link]

custom reports and duplicate system
reports created or modified using the
Report Data Definition program.
Security Tracks changes made to the Security Security [Link]
business object, through processes
and programs such as Menu
Maintenance.
UDCodeType Tracks User-Defined Code Types UDCodeType [Link]
created or modified through User
Defined Codes Maintenance.
UDMap Tracks User-Defined Field Maps UDMapTable [Link]
created or modified within User
Defined Column Map
Maintenance. These maps copy fields
from one user-defined table to
another user-defined table, making it
easier for you to maintain custom
table structures.
Verticalization Tracks metadata changes that occur XXXDef [Link]
in the XXXDef table on the Epicor ERP
client. These metadata changes use
the Verticalization type.
XXXDef Tracks metadata changes made to the XXXDef [Link]
XXXDef parent table for all XXXDef
types (BaseExtension, Productization,
Verticalization, Localization, and
Customization). However this element
only displays these parent table
changes in the Tracked and Solution
panels within the Solution
Workbench.
ZBODef Tracks changes made to the zBODef ZBODef [Link]
table.
ZDataSet Tracks changes made to the zDataSet ZDataSet [Link]
table.
ZDataTable Tracks changes made to the ZDataTable [Link]
zDataTable table.

Epicor Kinetic - Classic User Interface | 2021.2 61

Customization Management System Setup and Management Course

Review Solution Types

Solution Types are containers of elements you want to track in your solution. Through the Solution Type
Maintenance, you can review delivered solution types and create custom ones.
Navigate to Solution Type Maintenance.
Menu Path: System Management > Solution Management > Solution Type Maintenance
Important This program is not available in Classic Web Access.

1. Click the Solution Type... button and click Search.

The list of installed solution types display in the Search Results grid.

2. Click Select All and click OK.

3. The following table displays the installed solution types is the list of default solution types and how you can
use them.

Solution Description
Type
ALL Tracks all Delivered elements defined in the database. When you use this type, custom
elements you create in Element Maintenance do not display in the solution. Only elements
that have their System Flag values set to True (Delivered) are recorded by this solution type.
The following is the list of delivered elements:
• BAQ
• BAQReport
• BaseExtension
• BPM Method directives
• Customization
• Dashboard
• ExtensionSet
• IPForm
• Localization
• Menu
• Productization
• Report
• ReportStyle
• RptDataDef
• Security
• UDCodeType
• Verticalization
• XXXDef
• zBODef
• zDataSet
• zDataTable

62 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Customization Management

Solution Description
Type
<blank> This type does not filter activity by elements. Instead, it tracks an activity of a user in the
Epicor ICE environment, which includes performing insert, update and delete operations
against ICE tables.
Important When you select this type in the Solution Workbench, the Tracked
sheet displays elements based on the performed activity. You can use this information
to identify and create custom elements you would like to track in a solution later.
With this option selected, the Move Tracked To Solution and Add To Solution
options are disabled in the current solution. The information in the Solution Workbench
displays for your information only.

4. Exit Solution Type Maintenance.

Use Solution Workbench

Use the Solution Workbench to create a solution that contains objects you wish to bundle together.
Through this program, you generate a .cab file that contains the files and data for the solution. You then distribute
this file to other Epicor ERP environments. The files you can add to a solution include code projects, configuration
documents, xml files, and so on. Certain files can be 'flagged' so that during installation the user is prompted
where those files should be placed on the destination server when the .cab file is installed.
Navigate to Solution Workbench.
Menu Path: System Management > Solution Management > Solution Workbench
Important This program is not available in Classic Web Access.

1. To create a new solution, click New.

2. In the Solution field, enter XXX_MySolution (where XXX are you initials).

3. Now click Solution Type... button.

The Search window displays.

4. Click Search to search for and select a type you want to use.

5. The solution types display in the Search Results grid.

6. Select SolutionTypeID ALL and click OK.

7. For the Description, enter Custom Solution.

This value displays during the installation process; it gives an overall explanation about what the solution
contains. You can enter a maximum of 50 characters in this field.

8. Use the Internal Notes field to enter additional information on the solution. Enter "This solution contains
the Customer Dashboard, a source BAQ and a Customization."
When you build the solution, this text is automatically converted into a [Link] file which is bundled
with the .cab file. It also displays within a field during the installation process.

Epicor Kinetic - Classic User Interface | 2021.2 63

Customization Management System Setup and Management Course

9. Save the solution.

Note If you did not select an existing solution type, an error message displays when you attempt to
save. To correct this, click the Solution Type... button to find and select an available solution type.

10. Minimize the Solution Workbench.

Track Your Activity

During these exercise, you will track the activity you want to include in the solution.
To track activity you want to add to a solution, you must log in with a user account with Can Track Solution
privileges. You assign these privileges in User Account Security Maintenance.

1. You first select the solution record you want to track your activity. The process of selecting a solution varies
depending on which mode you use to run Epicor ERP:
• When you run the application using the Classic interface, on the Main Menu, select Options > Solution
Tracking.
• When you run the application using the Modern Shell interface, on the Home Page, click the Settings
tile. From the General Settings group, select Solution Tracking.

2. On the Change Current Tracked Solution window, select the XXX_MySolution (where XXX are your
initials) solution record and click OK.
While a solution is being tracked, the system monitors the Update, Insert and Delete events activated by
the user within the application or Service Designer. To discontinue tracking for this user, clear the value in
the Solution field.
Tip You can control the solution tracking directly from the status bar. When running the application
using the Classic Style, navigate to Options > Preferences window and select the Solution check
box on. Click OK to activate this option.

3. First, create a source BAQ for your dashboard. Navigate to Business Activity Query Designer.
Menu Path: Executive Analysis > Business Activity Management > Setup > Business Activity Query
Important This program is not available in Classic Web Access.

a. Click New to create a new query.

b. For QueryID, enter XXX_CustomerQuery (where XXX are your initials).

c. For Description, enter List of Customers and select the Shared property.

d. On the Query Builder > Phrase Build sheet, add [Link] table on the canvas.

e. On the Display Fields > Column select sheet, select the following display columns:
• Company
• CustID
• CustNum
• Name
• Address1

64 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Customization Management

• City
• State
• Zip
• Country

f. Save the query.

g. Now click on the Analyze sheet.

h. Click Analyze and then Test. Your query should populate with results.

i. Exit the Business Activity Query Designer.

4. Now create a custom dashboard that displays the list of customers. Navigate to the Dashboard.
Menu Path: Executive Analysis > Business Activity Management > General Operations > Dashboard
Important This program is not available in Classic Web Access.

a. If necessary, turn on the Dashboard Developer Mode. Click New Dashboard.

b. For Definition ID, enter XXX_CustDashboard (where XXX are your initials).

c. For Caption and Description, enter List of Customers.

d. Click New > New Query, search for and select XXX_CustomerQuery (where XXX are your initials)
created before.

e. Save the dashboard.

f. Now click Tools > Deploy Dashboard.

The Deploy Dashboard window displays.

g. Click the Test Application button.

h. Exit the Dashboard.

5. Return to the Solution Workbench.

Menu Path: System Management > Solution Management > Solution Workbench
Important This program is not available in Classic Web Access.

6. Select the Tracked sheet and click Refresh.

The grid now displays the customer query and dashboard you created. You many need to click inside the
pane on the right and click Refresh again to display details of each tracked item.
Tip Using the Tracked list, you can do the following:
• Verify the Selected check box is selected for each item you want to include in the solution.
• To exclude an item, clear the Selected check box.
• To remove an item from the list, select the item and click Delete.

7. Click Move Tracked to Solution.

Epicor Kinetic - Classic User Interface | 2021.2 65

Customization Management System Setup and Management Course

This will move the selected items you tracked into the solution.

8. To the warning message, click OK.

Add Items to Solution

You can also manually add element to a solution. During this exercise, you will add different types of items into
your solution.

1. Click the Add To Solution button.

2. First, add an existing customization.

a. On the Solution Element Search window, verify the Element tab is selected.

b. From the Available Elements list, select Customization and click Search.

c. On the Advanced Element Search window, click the Search button again.

d. Select any customization created for company EPIC06 and click OK.

e. Remain in the Solution Element Search window.

3. Now add an application's .sysconfig file into the solution.

a. Select the File Content tab and verify the Misc. Files option is selected.

b. Click Search.

c. Navigate to the Config folder of your client directory, for example to C:\Epicor\ERP10\ERP10.2.
200.0\ClientDeployment\Client\Config.

d. Select a .sysconfig field used by your client and click Open.

e. Remain in the Solution Element Search window.

4. Lastly, select a database object using the available framework Adapters.

a. Select the User Defined tab.

b. Click Get Adapters to populate the list of available adapters.

c. Select the SecurityAdapter and click Search.

d. On the Security Search window, click the Search button again.

e. Select any security group and click OK.

5. Click Add To Solution to close the Solution Element Search window.

6. Click the Solution and File Contents tabs and verify the grid displays the selected items.

7. Save the solution.

66 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Customization Management

Build a Solution

You are now ready to build your solution.

• Before you run this feature, finish adding the items and files you want included within your solution.
• Your user account must have the Can Create Solutions privileges enabled in User Account Security
Maintenance.
To build a solution:

1. Click on the Actions menu and select Build Solution.

The Build Solution window displays.

2. Notice you can define some Settings for the new .cab file:
• Encrypt Source Code - Select this check box to create a secure .cab file. The compiled .cab file solution
then contains encrypted project files, preventing materials and property from being viewable during the
distribution process. Even if the project does not build correctly, the files are encrypted and a user cannot
see the files as unencrypted.
• Create Code Documentation - Select this check box to automatically generate .xml documentation
for the generated assemblies on custom project items.
• Prompt for CAB File Name and Location - Select this check box to display a directory path window.
User this window to define the path where you want to place the .cable file sand enter the filename to
use for the solution. by default the .cab file is created in the application client directory.
For this workshop, select the Prompt for CAB File Name and Location checkbox.

3. Click the Build button.

4. Because you prompted for the file location, the Save CAB File window displays. Select Desktop and click
Save.
The generation process displays within the Build Output field.

5. When the build is complete, click the Close button.

6. Exit the Solution Workbench.

The .cab file is now created and ready to install in a different company. Notice the .cab file name is assembled
by placing the filename, type value, and version number together. Note a user must be provided with Can Install
Solutions privileges to import the solution on another system.

Epicor Kinetic - Classic User Interface | 2021.2 67

Image Management System Setup and Management Course

Image Management

Using Image Category Maintenance and Image Maintenance, you can set up a photo library of pictures in
your database for use with the Product Configurator, parts, employee photos or any other purpose. When
upgrading your software, you will need to run conversion CVImage so that existing images are accessible in the
application.
Note the following areas of functionality:
• Image Category Maintenance - Use Image Category Maintenance to set up a file structure for image files
you store in your database. You can create image category and subcategory folders here, and then choose
these folders to use when saving or importing images. Create this structure to keep your images organized
by type or use.
• Image Maintenance - Use Image Maintenance to import images from outside of the application to the Epicor
ERP database. You can import a single image, multiple images at once, or an entire directory of images
together.
• Image Defaults - Use the Image Defaults sheet in Company Configuration to determine which Image
Categories and Subcategories should be the default directories for certain types of image searches. You can
set defaults for parts, employees, payroll employees, assets, and configurator parts.
• Image Searches - Image searches default to the settings in Company Configuration, but you can override
the defaults. You can also import an image on-the-fly from your file system or local computer.
Before running the workshops in this section, download the image folder (enclosed in a zip file) by clicking the
related link below. Extract the image folder from the zip file and save it to the desktop.

Image Category Maintenance

Use Image Category Maintenance to create a folder structure for storing images within the application database.
You can create image category and subcategory folders here, and then choose these folders to use when saving
or importing images. Create this structure to keep your images organized by type or use. Note that once you
create categories, you can set up default categories for image searches in several places throughout the Epicor
application.

Workshop - Create an Image Category and Subcategories for Parts

Dalton manufactures all types of parts for the electric and plumbing industries and they also want to keep
employee pictures in the database. To keep their images organized, they set up the following structure to keep
part pictures and employee pictures in separate folders, and to organize the various part types. In this workshop,
create an image category and several subcategories for parts.

1. Switch back to the Epicor Education company and the Main site.

2. Navigate to Image Category Maintenance.

Menu Path: System Setup > System Maintenance > Image Category

3. Click the down arrow to the right of the New button and select New Category.

4. In the Category field, enter XXX Parts (where XXX are your initials).

68 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Image Management

5. In the Description field, enter XXX Parts (where XXX are your initials).

6. Select the Active check box.

7. Click Save.

8. From the New menu, select New Subcategory.

9. In the Subcategory field, enter XXX ELE Batteries (where XXX are your initials).

10. In the Description field, enter XXX Electric - Batteries.

11. Select the Active check box.

12. Click Save.

13. Repeat steps 8-12 to add more subcategories, using the following data and where XXX are your initials:

Subcategory Description Active

XXX ELE Lamps XXX Electric - Lamps Selected
XXX ELE Wire XXX Electric - Wire Selected

14. Click Save.

15. Remain in Image Category Maintenance for the next workshop.

Workshop - Create an Image Category and Subcategories for Employees

In this workshop, create a second image category for employee photos.

1. Click the down arrow to the right of the New button and select New Category.

2. In the Category field, enter XXX Employees (where XXX are your initials).

3. In the Description field, enter XXX Employees (where XXX are your initials).

4. Select the Active check box.

5. Click Save.

6. From the New menu, select New Subcategory.

7. In the Subcategory field, enter XXX Shop (where XXX are your initials).

8. In the Description field, enter XXX Employees - Shop (where XXX are your initials).

9. Select the Active check box.

10. Click Save.

11. From the New menu, select New Subcategory.

Epicor Kinetic - Classic User Interface | 2021.2 69

Image Management System Setup and Management Course

12. In the Subcategory field, enter XXX Office (where XXX are your initials).

13. In the Description field, enter XXX Employees - Office (where XXX are your initials).

14. Select the Active check box.

15. Click Save.

16. Close Image Category Maintenance.

Image Defaults Maintenance

Once you have set up categories and subcategories for your images, use the Image Defaults sheet in Company
Configuration to determine which of these should be the default categories for certain types of image searches.
You can set defaults for parts, employees, payroll employees, assets, and configurator parts. When searching for
an image in these areas, you can override the defaults and search in other categories if necessary. You can also
leave these defaults empty if you wish to select the category and subcategory as part of the image search process.

Workshop - Enter Image Defaults

Dalton uses images saved in the Parts category for part records and images saved in the Employees category for
payroll employees and basic employees. In this workshop, enter default image categories and subcategories in
Company Configuration.
Navigate to Company Configuration.
Menu Path: System Setup > Company/Site Maintenance > Company Configuration

1. On the Detail sheet, verify that the company is EPIC06.

2. Click the down arrow next to the New button and select New Image Default Category.
The Modules > All Modules > Image Defaults > Detail sheet displays.

3. In the Application field, select Part.

4. In the Category field, search for and select XXX Parts (where XXX are your initials). This is the image
category you set up for parts.

5. In the Subcategory field, search for and select XXX ELE Lamps (where XXX are your initials). This is one
of the image subcategories you set up for electrical parts.

6. Click Save.

7. Click the New button and select New Image Default Category.

8. In the Application field, select Payroll Employee.

9. In the Category field, search for and select XXX Employees (where XXX are your initials). This is the image
category you set up for employees.

10. In the Subcategory field, search for and select XXX Shop (where XXX are your initials). This is one of the
image subcategories you set up for employees.

70 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Image Management

11. Click Save.

12. Click the New button and select New Image Default Category.

13. In the Application field, select Employee.

14. In the Category field, search for and select XXX Employees (where XXX are your initials).

15. In the Subcategory field, search for and select XXX Office (where XXX are your initials).

16. Click Save.

17. Exit Company Configuration. If prompted to save a second time, click OK.

Image Maintenance

Use Image Maintenance to import images from outside of the application to the Epicor ERP database. You can
import a single image, multiple images at once, or an entire directory of images together. You can also use this
window to retrieve an image from the database to view it and its pertinent data.

Workshop - Import a Single Image in Image Maintenance

In this workshop, retrieve an image from your local machine, assign it to a category and subcategory, and save
it to the database.
Navigate to Image Maintenance.
Menu Path: System Setup > System Maintenance > Image Maintenance

1. Click the New button.

2. Click the Browse button.

3. Find and select an image file available on your local machine. You can choose only .jpg, .jpeg, .bmp, and
.png files.
The image details and a thumbnail of the picture display on the Detail sheet.

4. For Image Name, enter 74974 - Lamp and press Tab.

5. Click the Category button to search for and select the XXX Parts category (where XXX are your initials).

6. Click OK.

7. Click the Subcategory button to search for and select the XXX ELE Lamps subcategory (where XXX are
your initials).

8. Click Save.
Remain in the Image Maintenance window for the next workshop.

Epicor Kinetic - Classic User Interface | 2021.2 71

Image Management System Setup and Management Course

Workshop - Import an Image

You can use Image Maintenance to import the image and save it to the database.

1. Click the Actions menu and select Import Images.

2. In the Method field, select Single Image.

3. Click the button to the right of the Select Image(s) field. Select another image file available on your local
machine. You can choose only .jpg, .jpeg, .bmp, and .png files.

4. The image filename displays in the Select Image(s) field on the Import Images window.

5. Click the Category button to search for and select the XXX Parts category (where XXX are your initials).

6. Click the Subcategory button to search for and select the XXX ELE Lamps subcategory (where XXX are
your initials).

7. Click Import.

8. To the Import process completed successfully message, click OK.

9. Exit Image Maintenance.

Part Maintenance

In Part Maintenance, you can attach an image saved in the database to a part record. Use the search on the
Attributes sheet to find the image.

Workshop - Assign an Image to a Part Record

Once the images are imported, the Dalton purchasing manager assigns the images to the part records. In this
workshop, retrieve a part in Part Maintenance and assign a picture to the record.
Navigate to Part Maintenance.
Menu Path: Material Management > Inventory Management > Setup > Part

1. In the Part field, enter FC-1000 and press Tab.

2. Navigate to the Attributes sheet.

3. To find the part image file, click the File button to search for and select a photo of the part.
The Image Search window contains several options to help you locate the specific photo you want to attach
to this part record. The Category and Subcategory fields default to the settings you specified in Company
Configuration in the workshop Set Defaults for Image Search. These should be XXX Parts and XXX ELE
Lamp (where XXX are your initials).

4. Select Lamp - [Link] from the list of files.

Note You can also click the Import button to browse for and import a picture on the fly from your
computer or file system. This functionality is explored in a later workshop.

72 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Image Management

5. Click OK.
The part image displays on the Attributes sheet.

6. Click Save.

7. Exit Part Maintenance.

Employee Maintenance

In Employee Maintenance, you can attach an image saved in the database to an employee record in the same
way that you can do for parts. You can also use the search window to import a picture on-the-fly.
Example A manager of human resources at Dalton is adding pictures to the database for all employees.
She imports a large folder of pictures using Image Maintenance and saves them to the Epicor database. In
Employee Maintenance, she opens each employee record and attaches the appropriate picture.

Workshop - Import an Image On-The-Fly

Dalton's Human Resources manager cannot find a picture of an employee to attach to a record using the image
search. In this workshop, use the Import button in the image search to import and save a record to the database.
Navigate to Employee Maintenance.
Menu Path: Service Management > Time Management > Setup > Employee

1. On the Detail sheet, click the ID button to search for and select employee 105, Charles L. Johnson.

2. Click the Image Name button.

3. Click the Import button to search for and select a photo to import.

4. Search for and select a picture available on your local machine.

The Import Images window displays.

5. Verify that the Category and SubCategory are those you selected in the workshop Enter Image Defaults.

6. Click Import.

7. To assign this picture to the employee record, select it from the search and click OK.
The employee photo displays on the Detail sheet.

8. Click Save.

9. Exit Employee Maintenance.

Epicor Kinetic - Classic User Interface | 2021.2 73

Security System Setup and Management Course

Security

You control access to the Epicor ERP application through the security functionality. You can both control access
to the Epicor ERP application itself and control access to specific areas within the user interface.
You begin by first defining your password and account lockout policies. The password policy determines how
complex user account passwords must be before the application accepts them. You have a range of complexity
requirements to select; activate the options that best fit your needs. Likewise you can set up an account lockout
policy that defines how many times users can fail to log into the application. When they pass this Lockout
Threshold you define, their user accounts are frozen, or locked, until a duration of time passes or you manually
release the account.
You control access to the user interface through security groups and users. Use Security Group Maintenance to
create groups that identify user related areas within your organization. Then assign all users to these security
groups through User Account Security Maintenance. With security groups and their selected users defined, you
can then assign security privileges throughout the application. For example, you may want to prevent access to
Payroll programs for most users. You can use the security privilege tools to only give members of the Payroll
security group access to these programs.
To review security settings and user activity, you run reports. The Menu Security report displays the current access
rights specific users and security groups have on the Menu. Other reports are available that display user activity,
so run these reports to verify the security settings work as you expect.

Authentication (User Identity) Security

Controlling access to the application is one of the primary ways you can secure the Epicor ERP application. When
you authenticate the identity of users attempting to login, or call, the application, you help prevent malicious
access.
You authenticate user identity through the following methods. These methods have both advantages and
disadvantages, so select the method that works the best for your organization:
• Windows Account - Use this method to authenticate user identity through Windows accounts. These accounts
are secured by the Windows operating system, making it much more difficult for these accounts to be externally
compromised. This method controls access at the operating system level, so you can define your password
policy and account lockout policy through the Group Security Policy program. This method is easier to
administrate, as you control access at the operating system level. The disadvantage to this method is that if
malicious users do compromise your Windows environment, they gain access to all applications on your
system.
• Epicor Account - If you use this method, you authenticate user identity through your internal Epicor accounts.
You then control access at the application level, using both the Password Policy Maintenance and Account
Lockout Policy programs to define the complexity of passwords and the number of failed logon attempts you
allow. Like Windows accounts, your Epicor accounts are encrypted. By securing at the application level, you
make it harder for malicious users to specifically access Epicor ERP. However the disadvantage to this method
is users will need to manage separate passwords for each application in your environment, making it harder
for you to administrate security.
The following sections describe how you implement authentication security through Epicor accounts.

74 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Security

Note To learn how to set up authentication security through Windows accounts, review the Security
chapter in the Implementation User Guide or the Authentication (User Identity) Security section in
the System Administration Guide. Both guides are located in the application help:
• Epicor ERP User Guide > Epicor Implementation User Guide > Security
• System Management > Working with System Management > System Administration Guide
> Manage Epicor ERP

Password Policy Maintenance

Use Password Policy Maintenance to determine the complexity requirements for user account passwords. Each
new or updated password users enter must follow the requirements you define in this program.
You start by indicating how many characters each password needs before the system accepts it. You then activate
other options as well, such as whether the password requires uppercase letters, must contain special characters,
and/or allow user account names.
After you save these options, these password requirements activate. The next time users create or change
passwords, they must enter values that follow these complexity requirements.

Define Password Policy

You can select the following password complexity requirements.

1. Launch Password Policy Maintenance.

Menu Path: System Setup > Security Maintenance > Password Policy

2. Enter the Minimum password length for each password. The Epicor ERP application then only accepts
passwords at least this length or longer. Enter 6 in this field.

3. Select the Allow include user ID check box to indicate users can enter their user account identifiers in
passwords. They can then enter passwords based all or in part from their User IDs.

4. Now clear the Allow include user name portion check box.

5. This activates the Match length field; enter a 4 in this field.

Now the password policy only allows a sequence of three characters or less from the user account name. If
the user name is BHarris, then a new/updated password for the user account can only contain "ris", "BHa",
"Har", or similar character sequences.
Note If you select the Allow include user name portion check box, you grant users the ability to
enter all or part of their user account names for their passwords. Users can then enter passwords
based on their user account names.

6. Now select the Require uppercase check box.

Each new or changed password must have at least one uppercase English (A-Z) character.

7. Use the Minimum categories field to define how many character categories such as lowercase, uppercase,
and so on must be present in each password. Enter a 2 in this field.
Instead of requiring specific categories, use this option to indicate that each password must contain at least
this many character types. This method gives users flexibility, as they can then decide which character types
to use within their passwords.

Epicor Kinetic - Classic User Interface | 2021.2 75

Security System Setup and Management Course

Note As you see in this example, you can use this feature and still require some specific character
categories like lowercase, uppercase, and so on be included on each password. Users then must enter
passwords that contain these required character categories, but also include other character categories
they choose. This gives users partial flexibility while still requiring some specific categories.

8. Click Save.

Typically you would next run the Expire All Passwords process from the Actions menu. This causes the current
passwords to expire on all active user accounts, so the next time users log in, they must then create new passwords
that meet your complexity requirements. However because this might have unintended consequences in this
education environment, you will next instead just clear the password on a single user account.

Test Password Policy

You can now test the password policy by logging into the application through your XXX_User (where XXX are
your initials) account.

1. First clear the password on this user account. Launch User Account Security Maintenance.
Menu Path: System Setup > Security Maintenance > User Account Security Maintenance

2. In the User ID field, enter XXX_User (where XXX are your initials).
Your user account displays on the Detail sheet.

3. Click the Expire Password button.

4. Click Save.

5. Exit User Account Security Maintenance.

6. Log in as XXX_User (where XXX are your initials):

a. If you use the Classic Menu, click Options > Change User.

b. If you use the Modern Shell Menu, click the Bottom Arrow to display the toolbar; click the Change
User button (the Person icon) on the far left side.

The Log in window displays.

7. For the User name, enter XXX_User (where XXX are your initials) and click the Right Arrow button.
Respond Yes to the Change Password dialog.

8. Leave the Current password field blank.

9. Now in the New password and Confirm new password fields, enter test.
An error message displays that indicates the password must have at least six characters. Click OK.

10. Now in the New password and Confirm new password fields, enter testxx.
An error message displays that indicates the password must have at least one uppercase character. Click
OK again.

11. Now in the New password and Confirm new password fields, enter TestXXX (where XXX are your
initials). Also enter your Current password.

12. Click OK.

76 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Security

Because you have satisfied the complexity requirements for the password policy, the Epicor ERP application
displays.

Password Management

You manage passwords individually on each user account. You can expire an individual password, clear a password,
and enter how long each password can be used.

Manage User Passwords

You control passwords through User Account Security Maintenance.

1. Log back into the application with the Epicor account:

a. If you use the Classic Menu, click Options > Change User.

b. If you use the Modern Shell Menu, click the bottom arrow to display the toolbar; click the Change
User button (the Person icon) on the far left side.

The Log in window displays.

2. Enter epicor/epicor and click the Right Arrow button.

3. Launch User Account Security Maintenance.

Menu Path: System Setup > Security Maintenance > User Account Security Maintenance

4. Find and select the XXX_User (where XXX are your initials) user account.

5. You could select the Expire Password button to force the user to enter a new password the next time this
user logs into the application.

6. If you click the Reset Password button, the Set Temporary Password dialog is displayed where you can
either accept the retrieved e-mail address (if any) associated with user account or enter an alternate e-mail
address to send the temporary password to. As the result, the system generates a temporary password and
e-mails it to the user. The user can login using the temporary password up to three times and each time will
be prompted to enter a conforming password to replace the temporary password.
You can also select the Set temporary password to blank check box. When you allow blank password, users
have three login attempts with blank password and each time they are prompted to enter a proper password.
This option is only available if Password Policy Maintenance is set up to allow blank passwords. You
control this setting by the Allow blank password check box.

7. On the Set Temporary Password dialog, click Cancel.

8. The next fields display more password information; you cannot edit these fields:

a. The Date Last Used field displays the most recent day on which the password on the current account
was used to access the Epicor ERP application.

b. The Password Last Changed field displays the date on which the current user most recently change
the password on this account.

c. The Password Expires field displays the date on which the current password on this user account will
expire.

Epicor Kinetic - Classic User Interface | 2021.2 77

Security System Setup and Management Course

9. Use the Password Expires Days field to indicate how many days from when a password is entered or
changed before it will expire.

10. When you finish managing the password on this user account, click Save.

Account Lockout Policy

Use the Account Lockout Policy program to define what happens when users fail to log into the Epicor ERP
application with their correct user account name/password combination.
These fields determine the overall lockout policy for all user accounts within either a server-client based environment
or the current tenant in a SaaS or similar hosted environment. You first indicate how many attempts users can
try before they are locked out. You also define how long users are locked out of the Epicor ERP application; you
can prevent users from logging in for a specific time duration or an ever increasing time duration. When the
system clock passes this time limit, users can attempt to login again through their user accounts.
After you save these lockout settings, this policy activates the next time users log into the Epicor ERP application.
When they fail to log into the application, an error message displays indicating for how long they will be locked
out of their accounts.

Create the Policy

Follow these steps to create your account lockout policy.

1. Launch the Account Lockout Policy program.

Menu Path: System Setup > Security Maintenance > Account Lockout Policy

2. Click New.

3. In the Lockout Threshold (attempts) field, enter 2. This value defines how many times a user can incorrectly
attempt to access the application before the account is locked.

4. Now within the Reset Counter After (minutes) field, enter 10. This value defines how many minutes can
pass before the failed attempts counter resets.
If the user does not attempt to log in until the system clock passes this duration of time, the attempts counter
returns to zero and the user can log in using the available attempts defined by the Lockout Threshold
value.

5. If the user surpasses the number of login attempts allowed by the Lockout Threshold value, the user
account is locked for a duration of time. You indicate how long the user is locked out through these options:
• Incremental Lockout - Select this check box to indicate the system will lock the user account for longer
and longer time periods. The system tracks each failed attempt and then doubles the time delay. The
user is first locked out for 1 second, then 2 seconds, then 4, 8, 16, 32, 64, and so on.
• Lockout Duration - Defines a specific value, in minutes, a user account is locked before it can be used
again to log into the Epicor ERP application. Enter 20 minutes in this field.

6. When you finish setting up the lockout policy, click Save.

The next time users log into the application, this lockout policy is active.

7. Close the Account Lockout Policy program.

78 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Security

If you need to change the lockout policy, access the Account Lockout Policy program again. Update the values
you need and click Save. The updated lockout policy values are now active. They are enforced the next time
users log into the Epicor ERP application.

Test the Policy

You can now test the account lockout policy.

1. Close the Epicor ERP 10 application.

2. Launch the application again.

3. For the User name enter XXX_User (where XXX are your initials), but enter the wrong Password.

4. Click the Right Arrow button.

An incorrect user name/password message displays.

5. Click OK.

6. Once again for the User name enter XXX_User (where XXX are your initials), but enter the wrong Password.

7. Click the Right Arrow button.

An incorrect user name/password message displays.

8. Click OK.

9. Now enter the correct User Name and Password.

You receive a message that this user account is locked.

This user account cannot be used until either the lockout time duration has passed or the account is manually
unlocked in User Account Security Maintenance or the Epicor Administration Console. The next section
describes how you re-activate locked accounts.

Locked Accounts

When users fail to log into the application, their accounts become inactive, or locked. Users are unable to access
these accounts until the specific or incremental time limit expires.
To find out which user accounts are locked, use the System Activity Log. The grid on this dashboard records
when a user fails to access the Epicor ERP application. You can then see the User ID for the account and when
the lockout happened.
You typically unlock accounts by launching User Account Security Maintenance. You can see how long this
account will be locked and also manually re-activate this account. When user accounts become locked, you
should use this program to activate them again.
However you can also unlock accounts through the Epicor Administration Console. While you can unlock all
accounts through the Epicor Administration Console, this feature is most useful when you accidently lock out a
security manager or global security manager account. Because you cannot restore these types of accounts inside
the Epicor ERP application, you need to instead unlock them on the server.

Review Locked Account

You can review which accounts are locked by using the System Activity Log.

1. Launch the application again and log in as epicor/epicor.

Epicor Kinetic - Classic User Interface | 2021.2 79

Security System Setup and Management Course

2. Launch the System Activity Log.

Menu Path: System Setup > Security Maintenance > System Activity Log

3. Click the Refresh button.

The System Activity grid updates with the current entries.

4. Sort the results by Activity Type and scroll to locate the Log on failure entries. You will see an entry for
the XXX_User (where XXX are your initials) user account.

5. The Date column displays the day on which the system locked the user account.

6. The TimeChanged column displays the time on which the lockout occurred.

7. Exit System Activity Log.

Now that you have located the locked user account, you can activate it again through either User Account
Security Maintenance or the Epicor Administration Console.

Unlock Account (User Account Level)

When a user account is locked, you can activate it again through an option within User Account Security
Maintenance. You typically use this feature to re-activate locked accounts.
For this course, you will unlock the XXX_User (where XXX are your initials) user account through this program.
You will next review how to do this through the Epicor Administration Console.

1. Launch User Account Security Maintenance.

Menu Path: System Setup > Security Maintenance > User Account Security Maintenance

2. On the Detail sheet, find and select the XXX_User (where XXX are your initials) user account.

3. The Locked Out check box is selected. This indicates the current user account is locked.

4. The Locked Out Until field displays the date and time on which this locked user account will activate again.

5. Now review the Consecutive Logon Failures field; this field displays how many times a user attempted
and failed to log into the Epicor ERP application through this user account. These attempts occurred
consecutively, so these failed attempts caused the current user account to lock.

6. To manually activate the user account again, click the Actions menu and select the Unlock User Account
option.
The Locked Out check box clears, indicating this user account is unlocked.

7. Click Save.

8. Close User Account Security Maintenance.

9. Log in as XXX_User (where XXX are your initials):

a. If you use the Classic Menu, click Options > Change User.

b. If you use the Modern Shell Menu, click the bottom arrow to display the toolbar; click the Change
User button (the Person icon) on the far left side.

The Log in window displays.

80 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Security

10. For the User name, enter XXX_User (where XXX are your initials) and the correct Password.

11. Click the Right Arrow button.

The Epicor ERP application displays as expected.

You can now continue to use this account to log into the application.

Unlock Account (Server Level)

You can also unlock a user account through the Epicor Administration Console.
While you can unlock all user accounts through this feature, you should only use this option when a security
manager or global security manager user account is locked. For this example, assume the XXX_User (where XXX
are your initials) user account is a security manager account and it still locked.

1. Access your server machine, and launch the Epicor Administration Console.

2. Expand the Database Server Management node and <YourDatabaseServer> node.

3. Select the database that contains the XXX_User (where XXX are your initials) user account.

4. You can now unlock this user account. You can do this in the following ways:

a. From the Actions pane, select the Unlock User Account option.

b. Click Action > Unlock User Account.

c. Right-click the database; from the context menu, select Unlock User Account.

The Unlock Account window displays.

5. For the User ID, enter XXX_User (where XXX are your initials).

6. Click OK.
The Work-In-Progress window displays. After the account is unlocked, this window closes.

You can now use this account again to log into the Epicor ERP application.

Automatic Sign On

As part of the password policy functionality, you can give users the ability to set up their Epicor user accounts to
automatically sign into the application. When users launch the Epicor ERP application, they then bypass the logon
window to directly access the menu.
When you activate this functionality, you create an encrypted login account that only works on the user's client
installation.

Allow Automatic Sign On

You activate this functionality through a check box on Password Policy Maintenance.
To allow single sign on for Epicor user accounts:

1. For this workshop, log into the application with the Manager account:

a. If you use the Classic Menu, click Options > Change User.

Epicor Kinetic - Classic User Interface | 2021.2 81

Security System Setup and Management Course

b. If you use the Modern Shell Menu, click the bottom arrow to display the toolbar; click the Change
User button (the Person icon) on the far left side.

The Log in window displays.

2. Enter manager/manager and click the Right Arrow button.

Important When you log on for the first time, a message appears to inform you that your password
has expired. You will be prompted to set a new password. To set a new password, perform the
following steps:

1. Click Yes.
A Change Password window displays.

2. In the Current Password field, enter manager.

3. In the New password field, enter a new password. An example would be manager2.

4. In the Confirm new password field, re-enter the same password.

5. Click OK. The Change Password window closes and you are logged on with the manager user
ID.

6. Record the new password. This is important as this will be the password everyone uses when
they log on with the manager ID until the database is refreshed.

3. Return to Password Policy Maintenance.

Menu Path: System Setup > Security Maintenance > Password Policy

4. Select the Allow save password check box.

5. Click Save.

6. Log in as XXX_User (where XXX are your initials):

a. If you use the Classic Menu, click Options > Change User.

b. If you use the Modern Shell Menu, click the bottom arrow to display the toolbar; click the Change
User button (the Person icon) on the far left side.

The Log in window displays.

7. Enter your XXX_User (where XXX are your initials) and correct Password.

8. Launch the Preferences window. Depending on the interface style, users launch this window in different
ways:

a. Classic Menu - From the Main Menu, click Options > Preferences.

b. Modern Shell Menu - From the Home screen, click the Settings tile. Verify General Options is
highlighted and click the Preferences... link.

9. Select the Automatically sign on check box.

82 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Security

Note If you do not select the Allow save password check box on Password Policy Maintenance, the
Automatically sign on check box is not available on this window.

10. Click OK.

This causes the client installation to save the user name and password. The user's password is also encrypted
to prevent malicious entry.

11. Close the Epicor ERP application.

12. Launch the application again.

The Login window automatically displays and the Epicor ERP application launches.

13. Launch the Preferences window again and clear the Automatically sign on check box.

This user can now log into this client installation without entering a User Name and Password.
Note You can also use Windows user accounts to automatically log into the application. To learn how to
do this, review the Implementation User Guide; the Security chapter has a Single Sign On (Windows)
section.

Authorization (Interface) Security

You use the security tools to control user access to the Epicor ERP User interface.
Through the security feature set, you can:
• Protect sensitive data.
• Guard against users accidentally making harmful changes.
• Grant users access to the programs, reports, and processes they need to perform their specific tasks, streamlining
their use of the Epicor ERP application.
• Prevent users from accessing areas of the Epicor ERP application that fall outside of their work functions.
You leverage both Security Group Maintenance and User Account Security Maintenance to set up security levels.
You can then grant users, or groups of users, security privileges for specific areas in the application. Security
privileges can be set at the menu, field, business object, and method levels.
To manage security, you can run the Menu Security report and the System Activity Log to review the security
settings within the current company. You can then make adjustments to the security settings you need.

Epicor Kinetic - Classic User Interface | 2021.2 83

Security System Setup and Management Course

Interface Security Privileges

This section of the guide details how you assign security privileges for users. These privileges define the level of
access each user has in each company.

Company Security

If your organization has multiple companies, you will need to set up security separately within each company.
The users within each company will then access the Epicor ERP application using the security plan you have
defined.
Note each database will have at least one company in it. During installation, the Epicor ERP application automatically
creates a blank company (TEST) and a single user (EPICOR) with Security Manager privileges in every database.
You can then successfully log into the Epicor ERP application for the first time.

Security Group Maintenance

Use Security Group Maintenance to establish security groups that define various functions either throughout
your organization or for a specific company. You then use these security groups to assign or limit access to various
areas within the Epicor ERP application.
You can assign a user to a security group in User Account Maintenance, and then you can select security groups
on various security sheets in other programs. While optional, security groups are useful because they can categorize
employees by role or department.
Epicor recommends you create security groups and assign all users to specific groups. You then simplify your
security setup, as you do not need to assign security to individual users. This approach also ensures you implement
security through an organized and clearly defined method.
Before you begin assigning security, consider the various areas of security your company needs. You should then
design a security plan and enter security groups that reflect this plan. While you set up this plan, consider that
roles tend to be more generic, while job titles tend to be more specific. Several job titles can fulfill the responsibilities
of a single role.

84 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Security

Workshop - Create a Security Group

During this workshop, you will create a new security group.

1. Log back into the application with the Epicor account:

a. If you use the Classic Menu, click Options > Change User.

b. If you use the Modern Shell Menu, click the bottom arrow to display the toolbar; click the Change
User button (the Person icon) on the far left side.

The Log in window displays.

2. Enter epicor/epicor and click the Right Arrow button.

3. Navigate to Security Group Maintenance.

Menu Path: System Setup > Security Maintenance > Security Group Maintenance
Important This program is not available in Classic Web Access.

4. Click New.

5. In the Group Code field, enter XXX_PROD (where XXX are your initials).
This defines the identifier used for the security group.

6. In the Description field, enter _Production Staff.

This text displays within the security programs, so enter a brief, concise explanation for the group in this
field.
Tip If you place an underscore (_) or a period (.) in front of the Description, the security group sorts
to the top of the list in the security programs. This makes the new security group much easier to find.

7. Click Save.

8. Exit Security Group Maintenance.

You have now created the Production Staff security group. You will select this group in various programs during
the next workshops.

Epicor Kinetic - Classic User Interface | 2021.2 85

Security System Setup and Management Course

User Security

Launch User Account Security Maintenance to assign users to both security privileges and security groups.
The security privileges give a specific user access to various Epicor ERP application features. For example, you can
give a user access to the customization tools, but not allow this user to make language string changes. You can
also give a user Security Manager rights; this user can then modify security settings for other users.
Through the security group functionality, you can assign a single user to multiple security groups. When you
allow or disallow a security group on security sheets in other programs, the users assigned to this security group
will either have access or have no access to functionality assigned to the security group.

Security Manager and Global Security Manager

The Security Manager and Global Security Manager rights are special permissions granted to certain users. If your
user account has either of these rights, you can define security levels to restrict modules, programs, methods, or
fields to specific users and/or security groups.

Security Manager Rights

The Epicor ERP application restricts access to the System Setup module; the programs used to create a security
strategy are available within this module. Epicor creates a single user (manager) with security manager privileges
in every database. This default record is created during installation, and you use this account to create user
account records - including other accounts that have the Security Manager status.
As a good business practice, you should not give yourself Security Manager access on your normal user account.
This ensures the menu choices you make on your normal login are appropriate for your typical daily routine. It
also ensures that other employees do not grant security access to themselves when you are away from your
computer. Instead, create a separate Security Manager account that you only use for security tasks.

Global Security Manager Rights

Some user accounts can have Global Security Manager rights. This option is used to address security needs in
multi-tenant environments such as Epicor Express and SaaS Standard. For most installations, you will not be able
to grant global security manager rights. Administrators assign this status to a group of users within the Epicor
Administration Console, or individually through User Account Security Maintenance. If you are in an environment
where you cannot launch the Epicor Administration Console, this security level is not available for your use.
Global security managers have the highest level security in the Epicor ERP application (and other ICE applications).
Global security managers can access companies across tenants in an Epicor hosted environment. They can be
added to specific companies, regardless of the tenant, to administrate them. These users also have Security
Manager rights. Because of this, they can prevent all other users, including users with Security Manager rights,
from accessing a specific menu or program.
Internal Epicor administrators who need more information should refer to the Epicor SaaS Installation Guide.

Workshop - Manage User Security

The next workshops illustrate how you assign security permissions to user accounts.

86 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Security

Assign Security Privileges

You assign security privileges to a user on the group sheet.

Navigate to User Account Security Maintenance.
Menu Path: System Setup > Security Maintenance > User Account Security Maintenance

1. In the User ID field, enter XXX_User (where XXX are your initials).

2. You can limit what this user sees on the Main Menu by entering a value in the Client Start Menu ID field.
Enter a menu identifier for either a sub-menu or a program. Enter XAMN2000 in this field.
When this user launches the Epicor ERP application, only the contents under the specific sub-menu identifier
or the specific program appear on the Main Menu.
Tip You can find the specific menu identifier you need within Menu Maintenance. This program is
described later within this course.

3. Click Save and Close User Account Security Maintenance.

4. Now log into the application through this user account. Click your mouse on the arrow at the bottom of
the window; a toolbar pops up. Select the Change User button; this button is on the far left on the toolbar
(the person icon).
The Log in window displays.

5. For the User name, enter XXX_User (where XXX are your initials) and the Password you set up for this
user account.
Navigate to the Menu screen. Notice you only have access to the programs under the Production
Management node.

6. Now log back in as the security manager. Click your mouse on the arrow at the bottom of the window; a
toolbar pops up. Select the Change User button; this button is on the far left on the toolbar (the person
icon).
The Log in window displays.

7. Log in using epicor/epicor.

8. Navigate to User Account Security Maintenance again and display the XXX_User account (where XXX are
your initials).

9. Clear the value in the Client Start Menu ID field.

10. Click on the Options sheet.

11. Notice the Security Manager check box.

Users with this security access can define and change the profiles of themselves and other users. They can
also access all security programs; only select this option for user accounts that will handle security tasks. For
this workshop, do not select this option.
Note As described previously, some users may also have Global Security Manager rights. This level
of security is reserved for Epicor hosted environments such as Epicor Express and Saas Standard, so
typically you do not implement security through this access level.
If you are in a hosted environment, you can individually add or remove Global Security Manager rights
within User Account Security Maintenance. Click the List sheet and select/clear the Global Company

Epicor Kinetic - Classic User Interface | 2021.2 87

Security System Setup and Management Course

Security Manager check box. If you de-activate Global Security Manager rights, the current user can
still have Security Manager rights. However you cannot clear this check box if the user has access to
multiple tenants; you must first remove this user from the other tenants before de-activating Global
Security Manager rights.

12. In the Tools Options group box, select the Allow Personalization check box.
Use the check boxes in the Tools Options group box to assign or prevent this user from accessing various
tools and functions. By selecting this option, the XXX_User (where XXX are your initials) account can
personalize programs.

13. In the Access Options group box, verify the Allow Password Change check box is selected.
Use the check boxes in the Access Options group box to allow or prevent this user from updating the login
password. You can also allow this user to view information within a web browser, mobile device, and
enterprise-wide searches.

14. In the System Options group box, verify the Can Maintain Favorites Programs and Can Change Save
Settings On Exit check boxes are selected.
With these permissions selected, users can add program tiles to the Favorites box and define default options
like automatic data processing on reports, processes, and executive queries.

15. After you finish defining the options, click Save.

Tip To learn more about each security privilege available on this sheet, review the User Account Maintenance
> Options topic in the application help.

88 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Security

Assign Security Groups

You add user accounts to security groups on the Group sheet.

1. Navigate to the Group sheet.

The Available list displays the security groups available in the application.

2. Highlight the _Production Staff group from the list.

3. Click the Right Arrow button.

4. The _Production Staff security group now moves to the Authorized list.

5. Click Save.

6. Close User Account Security Maintenance.

The XXX_User (where XXX are your initials) is now an official member of the Production Staff security group.

Security Logic Hierarchy

The Epicor ERP application contains a security logic hierarchy that determines access to each menu, program,
service, method, or field. Before you implement security on these items, be sure you understand this hierarchy
to prevent unexpected results.
The following list defines the security logic hierarchy in descending order. The security logic is based on user
account permissions. If a user account matches the security logic at one level in this hierarchy, the Epicor ERP
application applies that level of security to the user account, overriding the lower levels in this hierarchy.

1. If the user account has Global Security Manager rights, this user can access companies across tenants in
an Epicor hosted environment. They can be added to specific companies, regardless of the tenant, to
administrate them. This level of security is reserved for Epicor hosted environments such as Epicor Express
and Saas Standard, so typically you will not implement security through this access level. Global security
managers can prevent security managers from accessing sensitive programs and menus in hosted
environments.

2. If the user account has Security Manager rights, few (if any) security restrictions are applied against this
account. This user typically has full internal access to the entire Epicor ERP application. As described previously,
security managers may not have access to some programs and menus in Epicor hosted environments.
However you typically implement security through a user account with Security Manager rights.

3. When a specific user account is denied access to a menu, program, service, method, or field, this user
account cannot use this item.

4. When a specific user account is granted access to a menu, program, service, method, or field, this user
account is able to use this item.

5. If a user is assigned to any security group that denies access to a menu, program, service, method, or field,
the user cannot use this item.

6. If a user is assigned to any security group that allows access to a menu, program, service, method, or field,
the user is able to use this item.

7. When no other security restrictions are in place, the default security permission on the column determines
whether access is granted or denied on this specific column.

Epicor Kinetic - Classic User Interface | 2021.2 89

Security System Setup and Management Course

Note Notice that user account permissions override security group permissions. Through this feature you
can assign unique security access for specific users while still including them in security groups.

Once you determine which users and security groups should and should not have access to specific areas of the
Epicor ERP application, you are ready to define access within Menu Maintenance, Service Security Maintenance,
and Field Security Maintenance.

Assign Interface Security

You explore how to assign security to programs, services, and fields during this section of the course.
You assign security through the following features:
• Run Time Arguments - Limit access to a specific menu node on a client installation.
• Menu Maintenance - Use security groups and user accounts to prevent or allow access to specific programs.
• Service Security Maintenance - Use security groups and user accounts to prevent or allow access to specific
services (business objects such as customers, parts, sales orders, and so on) and/or methods within these
services (like Get New, Update, Delete, and so on).
• Field Security Maintenance - Use security groups and user accounts to prevent or allow access to specific
fields in programs.

Run Time Argument Menu Control

You can assign security on specific desktop icons by using run time arguments. Use this functionality to limit the
programs that display when users launch the Epicor ERP application.
This security functionality is an effective way to quickly set up a level of security on workstations. You do not
need to use security groups or user accounts with this functionality. Each workstation can have a number of
desktop icons available for launching the Epicor ERP application. Each desktop icon can in turn be set up to launch
the Epicor ERP application in a specific mode defined by a run time argument.
You can use the /MENUID run time argument to cause the Main Menu to only display a specific sub-menu or
program. The user who launches the Epicor ERP application through this icon is limited to the programs accessible
within either the menu or the specific program.
You can also use the /TE and /CRM run time arguments to set up unique concurrent user licenses. The /TE
argument limits the Main Menu to display only the Time and Expense functionality, while the /CRM argument
limits the Main Menu to display the Customer Relationship Management functionality. These unique licenses
consume a different concurrent user pool. Activate these licenses either when you want to limit a workstation
to display only these specific functions or when you want to set up additional licenses separate from the general
user pool.

Workshop - Define Run Time Arguments

To leverage this feature, you display the Properties window for the Epicor icon and then modify the Target field
to include a menu ID.
During this workshop, you will limit a workstation to only display programs in the CRM module.

1. Exit the Epicor ERP application.

2. On the desktop for the workstation, right-click on the application's icon; from the context menu, select
Properties.
The application’s Properties window appears, displaying the Shortcut tab.

90 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Security

3. In the Target field, add a dash ("-") and enter the identifier for the menu or program that you want to
display. To restrict the workstation to display only the CRM module, enter: -menuid=CRMN0000
For example, the target may look as follows: C:\Epicor\ERP10\Client\[Link] /config=[Link]
/skip -menuid=CRMN0000

4. Click Apply.

5. Click OK.

6. Launch the Epicor ERP application through this icon.

The Log in window displays.

7. Select the Classic Style check box.

Important The MENUID run time argument only works with the Classic Style interface. It does not
restrict menu access in the Modern Shell interface.

8. Enter your XXX_User account (where XXX are your initials) and Password.
The Main Menu only displays the Customer Relationship Management (CRM) module node. Now this user
can only see the programs in this module.

9. Close the Epicor ERP application.

10. Launch the Epicor ERP application again.

11. Clear (de-select) the Classic Style checkbox; log in using epicor/epicor.

The -menuid method may not limit access to all the programs you intend. Several programs can still be launched
by right-clicking various fields. For example, users could still launch Part Maintenance the Part field's context
menu. If the modules that contain these programs are licensed in your Epicor ERP application, users will be able
to access them through context menus. You will need to use other security methods described later in this course
to restrict access to the programs available on context menus.

Epicor Kinetic - Classic User Interface | 2021.2 91

Security System Setup and Management Course

Workshop - Menu Security

Use Menu Maintenance to define security options for users in the current company.
Menu security is the highest level where you can set security privileges. You can use the security in this management
program to hide a program or a folder on the Main Menu from security groups or specific users. Changes you
make in this program display on all the workstations that run the application.
Module groups and modules are organized by folders. Module function categories, such as Setup, General
Operations, and Reports, are also organized by folders. Most menu folders, except those in the System Management
module group, are initially available to all users, so you have a lot of flexibility determining which users have
access to different parts of the Menu.
Important You can only use this program if your user account has customization rights.

Create a Security Code

During this workshop, you will create a security code and indicate which users have access to this code.
Note The application also installs with a series of system menu security codes. You cannot delete these
codes, but you can modify them to match your security needs as well.

1. Click the Menu tile and navigate to Menu Maintenance.

Menu Path: System Setup > System Maintenance > Menu Maintenance
Important This program is not available in Classic Web Access.

2. Click the Down Arrow next to the New button and select New Security.

3. In the Security ID field, enter UD_XXX (where XXX are your initials).

4. In the Description field, enter Prevent Financial Access.

This value briefly describes the purpose of the new security code.

5. The Owning Company field displays the company in which the current security ID was created; you cannot
change this value. Select the All Companies check box.
Now users within companies in the same organization as the Owning Company can view and use this security
ID. However only users within the Owning Company can make changes to it.
Note If the System check box is selected, the Owning Company field is blank. This indicates the
current security setting is available to all companies within the current organization.

6. The Global Security Manager Only check box only allows the Global Security Manager access to the
current menu item. Do not select this check box.
This check box prevents all other users, including users with Security Manager rights, from accessing the
selected menu or program. This option is the highest level security available in the Epicor ERP application,
and is used to address security needs in Epicor hosted environments. For most installations, you can ignore
the Global Security Manager Only check box.

7. Notice the Security Manager Only option. Like the previous step, do not select this option for this workshop.

92 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Security

This option is useful when you are first setting up security, as it blocks all access until you create a security
plan. As described previously, you assign security rights to user accounts within User Account Security
Maintenance.

8. Select the Exclude Epicor Web Access check box to indicate modules and programs assigned to this security
ID will not display as a web form in an Epicor Web Access (EWA) environment.
When you select this check box, EWA users cannot access any menu items assigned to this security ID. These
programs will also not display for both Global Security Managers and Security Managers; these users will
need to launch these programs through their smart client interface.

9. Click the Disallow Access sheet.

Important You can use either the Allow Access and Disallow sheets to assign security; remember
the Allow Access method overrides the Disallow Access method. If a user is assigned to both sheets,
the user has access to the programs assigned to this security code.

10. Clear the Disallow Access to All Groups/Users check box.

11. Click Save.

The Groups/Users and Selected Groups/Users lists become active.

12. Highlight the _Production Staff security group and click the Right Arrow button.
The _Production Staff security group displays on the Selected Groups/Users list. This indicates the Production
Staff security group does not have access through this security code.

13. Click Save.

14. Remain in Menu Maintenance.

Now only users assigned to the _Production Staff security group do not have access to programs linked to this
security code. Any groups or users that remain in the Groups/Users list do have access to the programs assigned
to this security level.

Epicor Kinetic - Classic User Interface | 2021.2 93

Security System Setup and Management Course

Assign Menu Security

During this workshop, you will assign your new security code to AR Invoice Entry.
When you assign a security code to a selected program, only those users given access through this security code
can launch the program.

1. Navigate to the Detail sheet.

2. Now from the tree view, select AR Invoice Entry.

Menu Path: Financial Management > Accounts Receivable > General Operations > AR Invoice Entry

3. Click the Security ID… button.

The Security Search window displays.

4. In the Starting At field, enter UD.

5. Click Search.

6. Select the UD_XXX (where XXX are your initials) security code you created and click OK.
The Security ID… field now displays the new security level you have selected.

7. You can also review which programs are assigned to this security code. To do this, return to the Security
sheet and find/select your UD_XXX security code (where XXX are your initials).
The Menu Options field displays the programs that currently use this security code.

8. Click Save.
This program is assigned to this security level.

9. Exit Menu Maintenance.

Test Menu Security

1. Return to the Home screen and click the Settings tile.

2. Select General Options.

3. Click the Change User... option.

The Log in window displays.

4. For the User name, enter XXX_User (where XXX are your initials) and a Password.

5. Navigate to Financial Management > Accounts Receivable > General Operations.

6. Notice the AR Invoice Entry program does not display on the menu.

7. Now restore the original security setting. Return to Menu Maintenance.

Menu Path: System Setup > Security Maintenance > Menu Maintenance
Important This program is not available in Classic Web Access.

94 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Security

8. Navigate to the AR Invoice Entry node.

9. For the Security ID, clear the UD_XXX security code (where XXX are your initials), and enter SEC284.

10. Click Save.

11. Close Menu Maintenance.

Security Group Conflicts

The application handles conflicts between security groups through an access hierarchy.

1. If a user is assigned to security group _Production Staff, which allows access to the Engineering Workbench,
and security group Purchasing, which does not, the user will still be able to launch the Engineering
Workbench. The security group with more access overrides the security group with less access.

2. Likewise, if a user is assigned rights to a program, but is assigned to a security group which is not, the user
is still able to launch the program. User rights have precedence over group rights.

3. The Allow Access mode also has precedence over the Disallow Access mode. You select these modes in
the Menu Maintenance, Service Security Maintenance, and Field Security Maintenance programs.

Workshop - Service and Method Security

You launch Service Security Maintenance to establish security at the service level and at the method level within
a service.
Use the Service sheet to set the security privileges for services (business objects) like Customers, ABC Codes, Tax
Regions, and other services. Use the Method sheet to establish security at the method level within a service. A
method is an action that can be taken in a service such as Update, Get New, Approve, and so on.
Example The Terms service (Business Object) displays on the menu in several places and it can also be
accessed within Company Configuration and other programs. If you want to block access to specific users
and security groups from all locations on the Menu screen, you would limit it at the service level ([Link])
on this Service sheet. If you want to block the ability for some users to Update existing Terms codes, you
would limit access at the Method level ([Link]) on the Method sheet.

When a service is secure, all methods within this business object are also secure. This can lead to unexpected
results, as the methods will not run through Service Connect, embedded services, and from other menu options.
Epicor recommends you assign security in a test environment first before you deploy security within your live
environment.

Assign Service (Business Object) Security

You define security for a service (business object) by first selecting it and then indicating which groups/users can
and cannot access it.
For this workshop, you will prevent access to the AR Invoice service. You can use either or both sheets to assign
security; remember that the Allow Access method overrides the Disallow Access method. If a user is assigned to
both sheets, the user has access to this service.

1. Navigate to Service Security Maintenance.

Menu Path: System Setup > Security Maintenance > Service Security Maintenance

Epicor Kinetic - Classic User Interface | 2021.2 95

Security System Setup and Management Course

Important This program is not available in Classic Web Access.

2. Click New.

3. Click the Service ID… button.

The Search Form displays.

4. In the Starting At field, enter [Link] and click Search.

5. Find and select the [Link] service and click OK.

6. The Owning Company field displays the company in which the current service security setting was created;
you cannot change this value. However because the System check box is selected, the Owning Company
field is blank.
This indicates the current security setting is available to all companies within the current organization.

7. Click on the Allow Access sheet.

8. Clear the Allow Access to All Groups/Users check box.

This indicates no users have access to this service.

9. Navigate to the Disallow Access sheet.

10. Verify the Disallow Access to All Groups/Users check box is clear (not selected).
Now until you add users and/or groups to the Selected Groups/Users list, everyone has access to this
service. Be sure you are ready to assign security before you clear this check box.

11. From the Groups/Users list, highlight the _Production Staff security group.

12. Click the Right Arrow button.

The _Production Staff security group displays on the Selected Group/Users list. Now only users assigned to
this security group cannot access this service.

13. Click Save.

14. Close Service Security Maintenance.

You should undo this setting after you finish the Security section of this course. This service may be used in other
courses within the Epicor Education database, and keeping this security level will prevent most users from running
it.

Test Service Security

1. Return to the Home screen and click the Settings tile.

2. Select General Options.

3. Click the Change User... option.

The Log in window displays.

4. For the User name, enter XXX_User (where XXX are your initials) and a Password.

5. Navigate to AR Invoice Entry.

96 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Security

Menu Path: Financial Management > Accounts Receivable > General Operations > AR Invoice Entry

6. When you try to launch the program, you will receive an Access Denied error message. Click OK.

7. More Access Denied messages display. Continue to click OK on each message.

You most likely will receive multiple Access Denied messages. This occurs because the current user account
is prevented from using all the methods contained in the selected service (business object).

AR Invoice Entry now displays. Notice you can still create invoice groups, but you can no longer create new
invoices. This user account is prevented from using the methods contained in the selected [Link] object.
However any methods contained in other services that run through the AR Invoice Entry program are still available
to use.
If you wish to completely prevent access to this program, you would instead use Menu Maintenance. As described
previously, this program prevents users/groups from launching specific programs.

Epicor Kinetic - Classic User Interface | 2021.2 97

Security System Setup and Management Course

Assign Method Security

You can also use Service Security Maintenance to define security for methods within a selected service.
A method is an action which can be run within a service like Update, Get New, Approve, and so on. For example,
you can use this functionality to permit a user to add a release to an existing purchase order but prevent this
same user from creating a new purchase order.
Tip Not all services (business objects) have multiple methods. This sheet is only for more complex services
that perform a variety of actions.

1. Return to the Home screen and click the Settings tile.

2. Select General Options.

3. Click the Change User... option and log in as epicor/epicor.

4. Return to Service Security Maintenance.

Menu Path: System Setup > Security Maintenance > Service Security Maintenance
Important This program is not available in Classic Web Access.

5. Find and select the [Link] service again.

6. First, remove the previously created security from the service. Click the Disallow Access tab and move the
Production Staff security group back to the Groups/Users list.

7. Now click the Allow Access tab and select the Allow Access to All Groups/Users check box.

8. Click Save.

9. Click the Clear button.

10. Now search for and select the [Link] service.

11. Click the Down Arrow next to the New button; select New Method.
The Method sheet becomes active.

12. From the Method Name drop-down list, select GetNewCustomer in [Link].

13. The Owning Company field displays the company in which the current method security setting was created;
you cannot change this value. Select the All Companies check box.
Now users within companies in the same organization as the Owning Company can view and use this
method security setting. However only users within the Owning Company can make changes to it.

14. Navigate to the Allow Access sheet.

15. Clear the Allow Access to All Groups/Users check box.

16. Navigate to the Disallow Access sheet.

17. Verify the Disallow Access to All Groups/Users check box is clear (not selected).

98 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Security

Now until you add users and/or groups to the Selected Groups/Users list, everyone has access to this
service. Be sure you are ready to assign security before you clear this check box.

18. From the Groups/Users list, highlight the _Production Staff security group.

19. Click the Right Arrow button.

This security group does not have access to the GetNewCustomer method.

20. Click Save.

21. Exit Service Security Maintenance.

Be sure to undo this setting after you finish the Security section of this course. This method may be used in other
courses within the Epicor Education database, and keeping this security level will prevent most users from running
it.

Test Method Security

1. Return to the Home screen and click the Settings tile.

2. Select General Options.

3. Click the Change User... option.

The Log in window displays.

4. For the User name, enter XXX_User (where XXX are your initials) and a Password.

5. Navigate to Customer Maintenance.

Menu Path: Sales Management > Order Management > Setup > Customer

6. When you click the New button, you will receive an Access Denied error message. Click OK and exit Customer
Maintenance.

Workshop - Field Security

Use Field Security Maintenance to establish security privileges at the field level in specific database tables,
extended user defined tables, and fields throughout the application.
Field Security Maintenance contains functionality you leverage to define security privileges on fields for all users,
selected users, and groups. You use this program to first select a table and then allow, limit, or prevent access
to specific fields within the selected table. Each field can have a unique security level assigned to it; this level can
be globally defined for the whole organization, specifically defined for the current company, or specifically defined
for a selected user or group.
You can reset the security privileges for a selected field or the whole table to the default values initially granted
all users. You can also view the security privileges for the fields in the table for the selected user.
Be sure you set up user accounts and security groups before using this program.
Important Table and field security can only be applied to actual database tables and columns. Use
customization to secure temporary table information. You can also use Business Process Management
method directives to secure temporary tables. The application's Field Help displays several pieces of
information including the External check box. If the External check box is selected and no data displays for
the database field, this is a Calculated Column or belongs to a temp table.

Epicor Kinetic - Classic User Interface | 2021.2 99

Security System Setup and Management Course

You can use Extended Properties Maintenance to verify the table type. If the dataset table is temporary,
Temp Table displays in the Table Type field. Use the Fields > Detail sheet to determine if the field is External.
Typically, temp tables have a Like value that points to the actual table or column used to retrieve and store
the data.

Example The SrcGLTran table is a temp table and not an actual database table.

100 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Security

Assign Global Field Security

You can assign security to a specific field that then applies to the entire organization or a specific company.

1. Return to the Home screen and click the Settings tile.

2. Select General Options.

3. Click the Change User... option and log in as epicor/epicor.

4. Navigate to Field Security Maintenance.

Menu Path: System Setup > Security Maintenance > Field Security Maintenance
Important This program is not available in Classic Web Access.

5. Click the Schema drop-down list and select the Erp schema option.

6. In the Table field, enter ShipVia and press <Tab>.

The Description field displays the purpose of the selected table.

7. In the tree view, select the Description field.

The Field Name displays the name of the selected field.
Tip If the Primary Key check box is selected, it indicates the current field is required by the database.
You cannot change the security option for a Primary Key field; usually these fields are for identifiers
like the customer ID, part ID, and so on. However the Description field is not a primary key, so for this
example, the check box is clear.

8. In the Default Access field, select Read.

This option assigns display-only (read-only) rights to the current field. Users can only view data within this
field; users cannot enter data within this field.
Other options:
• Full - Users can both view and enter data within this field. This security option is the default.
• None - This security option causes the field to be blank. No data displays in this field, and users cannot
enter data in it. Be aware that the None setting also causes the field's data to not be included when the
dataset is sent to and from its program. This can have unintended consequences for processes, like BPM
directives, which may require this data.

9. The Owning Company field displays the company in which the current field security setting was created;
you cannot change this value. Select the All Companies check box.
Now users within companies in the same organization as the Owning Company can view and use this field
security setting. However only users within the Owning Company can make changes to it.

10. Click Save.

11. Remain in the Field Security Maintenance.

Now users can only review the text in the Description field. Note that after you finish this Security course, undo
this setting so that it does not cause issues for other courses that may use this company.

Epicor Kinetic - Classic User Interface | 2021.2 101

Security System Setup and Management Course

Data Masking

You can limit access to sensitive data within a particular field.

After you assign security to a specific field, you can limit access to any sensitive data within this field.

1. In the Default Access filed select one of the options:

• Read Masked - This option assigns display-only (read-only) rights to the current field. Users can only
view data within this field; users cannot enter any data within it. Additionally, the sensitive data is masked.
• Full Masked – This option allows the user not only to view the data but also to update the masked data.
The data displayed as non-masked until it saved in the database. Additionally, the sensitive data is masked.

2. In the Display at Left Side field enter the number of non-masked characters from the left side.

3. In the Mask Character field any symbol you want. Drop-down list displays default characters that can be
used for sensitive data masking. Whitespace character is not allowed to use as a mask character.
Important Data that supposed to be masked should not contain selected mask character.

4. In the Repeat By field enter the number of the masked characters that will be displayed in resulting masked
string.

5. In the Display at Right Side field enter the number of non-masked characters from the right side.

6. The Field Width field and the Format field display reference information on the field size and the size of
resulting masked field.

7. In the Source Text field displays the sample text. You can enter any text that supposed to be masked.

8. The Preview field displays how the text from the Source Text field looks when masking settings are applied.

102 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Security

Security Group Field Security

You can also assign security to a field that only applies to a specific user or security group.

1. Navigate to the Users/Groups sheet.

2. In the grid, select the _Production Staff security group.

3. In the Tree View, select the WebDesc field.

4. Click in the Access column to display the drop-down list and select the Full option.
Just like the previous workshop, you have the Full, Read, and None security options. You also have the
Default option; select this option when you want the user or security group to use the global security level
assigned for this field on the Detail sheet.

5. Select the IStatCode field.

6. Click in the Access column and select the None security option.
The users in this Production Staff group cannot see the value in the Intrastat Code field, nor can they edit
it.

7. Click Save.

8. Exit Field Security Maintenance.

Epicor Kinetic - Classic User Interface | 2021.2 103

Security System Setup and Management Course

Test Field Security

Now that you have defined field security for the _Production Staff security group on the ShipVia table, you can
see the security options in action.

1. Return to the Main Menu, click the Settings tile and the Change User... option.

2. Log into the application using the XXX_User account (where XXX are your initials).

3. Click the Menu tile and navigate to Ship Via Maintenance.

Menu Path: Sales Management > Order Management > Setup > Ship Via

4. Click the Code... button and find/select all the ship via codes.
The ship via codes display in the tree view. You can now see each of the security settings you defined for
the _Production Staff security group.

5. The Description field displays a value, but you cannot change it. When you click Save, the original value
displays.

6. You can enter a value in the Web Description field and Save it.

7. The Intrastat Code does not display a value and you cannot enter text in this field.

8. Exit Ship Via Maintenance.

Workshop - Home Page Security

Use Home Page Settings to define security options for home pages in the current company.

Assign User Rights

You first determine which user accounts have rights to create and modify home page layouts. You define these
rights within User Account Security Maintenance

1. Navigate to User Account Security Maintenance.

Menu Path: System Setup > Security Maintenance > User Account Security Maintenance

2. Click on the Options tab.

3. Select the Can Publish Home Page Layouts check box.

4. Click Save

5. Log out.
Now the next time a user logs into the Epicor ERP application through this user account, the Home Page
Layout Publishing features are available.

104 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Security

Assign Home Page Security

During this workshop, you will assign a security code to a home page layout.
When you assign a security code to a selected home page layout, only those users given access through this
security code can view this home page.

1. On Home Page, click Settings > Home Page.

2. In the What would you like to name the published layout? field, enter My Home Page.

3. From the Select a security code for the layout: list, select XXX_UD.

4. Click Publish Layout.

The Select a layout to apply field: displays My Home Page.

5. Click Confirm Selected Option.

6. In the Appearance tab, select a different color set for your layout.

7. Click Save.

Test Home Page

1. Return to the Home screen and from the option list, select Change User.

2. For the User name, enter XXX_User (where XXX are your initials) and a Password.

3. View the new home page layout in the selected color set.

Security Reports

You can use the Menu Security report to review the security settings defined for your organization and the System
Activity Log to monitor user database activity. Other security reports are available that help you manage user and
security group activity.

Change Log Report

The Change Log report displays activity that occurred in the database during a specific period of time. Leverage
this report to see what changes users are making to the database.
When you need to find out where and when data was changed in specific tables, run this report. For example,
you may need to run this report to help conduct an audit or identify problems with database security. You can
limit this report to only display database activity entered in a selected table or a series of tables.
Use the Selection sheet to select the report parameters. Use the Filter sheet(s) to select the specific records to
include on the report. For more information, refer to the Filters Overview topic in the Application Help.
Important For more information on how to review the status of a report you print, preview, or generate,
refer to the System Monitor Overview topic in the Application Help.

Epicor Kinetic - Classic User Interface | 2021.2 105

Security System Setup and Management Course

Menu Path
Navigate to this program from the Main Menu:
• Executive Analysis > Business Activity Management > Reports > Change Log Report
• System Setup > Security Maintenance > Change Log Report

Logon Failure Audit Report

Use the Failed Logon Audit Log Report to review invalid logon attempts during a date range you define.
This report audits failed user account logon activity. It displays the invalid user account, password, and the
date/time the attempt occurred. This audit report does not have additional filter options.
Important In Epicor Cloud ERP - Multi Tenant, this program or feature may not be available or may
operate under certain restrictions.

Important For more information on how to review the status of a report you print, preview, or generate,
refer to the System Monitor Overview topic in the Application Help.

Menu Path: System Setup > Security Maintenance > Logon Failure Audit Report
Menu Path: System Setup > Security Maintenance > Logon Failure Audit Report

Menu Security Report

Use the Menu Security report to review the current access users and security groups have on the Main Menu.
Generate this report to evaluate the security currently defined for your programs. You can review the security
for users, security groups, or both. You can also filter this report to only display access for a specific program,
user, or security group. This key report can give you a complete overview of the security plan currently in place.
Available controls:
• Use this Selection sheet to choose the parameters for the report.
• Use the Filter sheet(s) to select the User and Security Group to include on the report.

Important For more information on how to review the status of the reports/forms you print, preview, or
generate, review the System Monitor topic in the Interface Navigation section of online help.

Menu Path: System Setup > Security Maintenance > Menu Security Report

System Activity Log

Use the System Activity Log dashboard to review the system activities occurred within the application.
Important In Epicor Cloud ERP - Multi Tenant or Epicor Cloud ERP - Dedicated Tenancy, this program
or feature may not be available or may operate under certain restrictions.

The System Activity Log tracks four activity types:

• Log on Failures - Users could review this activity type to check for hacking.
• User Log On - Which users logged into the application and when they logged in.
• User Log Out- Which users logged out of the application and when they logged out.
• Company Tracking Status - Any changes made to the Company record.
You can locate the activity you wish to review by filtering the data activity that displays through the available
search fields.

106 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Security

To use this log, you first need to activate it within Company Maintenance. As users perform system activities,
this log records these entries. You then launch the System Activity Log and review this activity by filtering on a
specific user, date range, both user and date range, or other options. Later you remove selected entries from this
dashboard by running the System Activity Log Purge program.
Menu Path: System Setup > Security Maintenance > System Activity Log

Users Groups Report

Run the Users/Groups report to review the current list of users assigned to security groups in the current
company.
Although you can run this report to display all security groups and users, you can also limit this report to display
the users assigned to a specific security group or the security groups assigned to a specific user.
If you use this report in a SaaS (Software as a Service) environment, you can only review users and security groups
available in your tenancy. However if you are a Global Security Manager, you can run this report to display users
and security groups for all companies you manage, across all tenancies.
Tip The options/values for tenant and multi-tenant features are only for Epicor hosted environments.
Typically you can ignore these options. Internal Epicor administrators who need more information should
refer to the Epicor SaaS Installation Guide.

Use the Selection sheet to select the report parameters. Use the Filter sheet(s) to select the specific records to
include on the report. For more information, refer to the Filters Overview topic in the Application Help.
Important For more information on how to review the status of a report you print, preview, or generate,
refer to the System Monitor Overview topic in the Application Help.

Menu Path: System Setup > Security Maintenance > Users / Groups Report

User Session Log Report

Run the User Session Log report to review how often all users or a specific user accessed the Epicor ERP
application.
Important In Epicor Cloud ERP - Multi Tenant or Epicor Cloud ERP - Dedicated Tenancy, this program
or feature may not be available or may operate under certain restrictions.

You enter a date range and can optionally select either all users or a specific user. The report displays the Log on
and Log off date/time record for each time the user accessed the Epicor application. Run this report to help
conduct an audit or identify problems with database security.
Use the Selection sheet to select the report parameters. Use the Filter sheet(s) to select the specific records to
include on the report. For more information, refer to the Filters Overview topic in the Application Help.
Important For more information on how to review the status of a report you print, preview, or generate,
refer to the System Monitor Overview topic in the Application Help.

Menu Path: System Setup > Security Maintenance > User Session Log Report
Important This program may not be available, or operate under certain restrictions in cloud-based Kinetic
deployments.

Epicor Kinetic - Classic User Interface | 2021.2 107

Cloud Environment Administration System Setup and Management Course

Cloud Environment Administration

This section contains information that is relevant to both dedicated and multi-tenant Cloud environments.

In-App and Email Notifications

Use in-app and email notifications to get alerts about new features, sales, training events, and more to stay
informed about what's happening in Epicor.
At first login, you will be prompted to set up your in-app and email notification preferences. Complete the form
to ensure you receive important system-related updates from Epicor.
Note Epicor strongly recommends that you include your email address and select the Send notifications
via email check box, so that you may continue receiving important updates from Epicor during an upgrade
or system outage if the application is offline.

In addition to specifying the types of notifications you want to receive, you can also set up the application to
receive unique notifications based on your role in organization. With role-based notifications, marketing and
salespeople, for example, will only see sales-related content. Launch the System Monitor and use the Actions >
Notifications Preferences option to define your role and types of notifications you want to receive. To view
the list of all received notifications, go to Actions > Open Notifications.
In-App notifications are an excellent way to engage you with helpful information in real-time. They serve as
product teams' primary form of communication.

Workshop - Manage In-App Notifications

When a notification arrives, it displays at the bottom of the screen in your ERP application. To access new email
notifications you missed, use the System Monitor. It also allows you to manage your notification preferences and
stay on top of what's happening in Epicor.

View In-App Notifications

In this task, launch the system monitor to access the in-app notifications.

1. Navigate to System Setup > System Maintenance > System Monitor.

2. From the Actions menu, select Open Notifications.

The In-App Notifications window displays.

3. Use the hamburger icon to show/hide the notifications panel.

4. Click Refresh to refresh the notifications list. The status bar at the bottom displays the last refresh information.

5. Select a message to view its content.

In addition to text, the messages display PDF and hyperlinks. The app lets you copy text messages, so you
can paste the whole text or part of it into a new message or other app.

108 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Cloud Environment Administration

Change Notifications Preferences

In this task, update your preferences to keep you informed about important system updates.

1. In System Monitor, from the Actions menu, select Notifications Properties.

The In-App Notifications User Preferences window displays.

2. The User field displays your Epicor user name.

3. Use the Select Roles section to specify your title and department.

4. In the Types of Business section, define your business' Primary Sector and Primary Industry.

5. Use the Select Interests section to indicate what type of notifications you want to receive based on your
interests.
Note This area is configurable and depends on your admin settings.

6. The Email field displays your email address.

7. Select this check box if you are not a regular user of Epicor ERP and you want to receive notifications via
email.

8. Click Close.
You will now receive personalized messages tailored to your needs.

User Tracker

User Tracker can be used to determine connected user sessions without the Epicor Administration Console.

Workshop - View Logged Users

In this workshop, determine which users are currently logged into the environment.

1. Open User Tracker.

Menu Path: Executive Analysis > Trackers > User Tracker

2. Click Get Connected Users button on the Connected Users tab.

3. In the Connected Users results section, one will find for each session(row):

a. CurComp -- the company that the specific user session is connected to.

b. CurUserID -- the Epicor ERP user name associated with that specific session.

c. LastDate -- the last date that the session was active.

d. ClientComputerName -- internal use only.

e. Suspended -- if not checked, it means that the session is currently active.

Epicor Kinetic - Classic User Interface | 2021.2 109

Cloud Environment Administration System Setup and Management Course

f. Suspend -- internal use only.

g. Expired -- if the session has expired.

h. SessionType: DefaultUser / DataCollection / EnterpriseProcessing.

Note To close the session you should submit the EpicCare case to remove the session.

110 Epicor Kinetic - Classic User Interface | 2021.2

System Setup and Management Course Conclusion

Conclusion

Congratulations! You have completed the course.

Please take a moment to let Epicor University know how to serve you better by completing an evaluation at htt
p://[Link]/survey/379199/e92f/. Your feedback provides the guidelines for the future direction of
Epicor University offerings.

Epicor Kinetic - Classic User Interface | 2021.2 111

Index System Setup and Management Course

Index
L S
log, system activity 106 system activity log 106

112 Epicor Kinetic - Classic User Interface | 2021.2

 Additional information is available at the Education and
Documentation areas of the EPICweb Customer Portal. To access
this site, you need a Site ID and an EPICweb account. To create an
account, go to [Link]