As a document library grows, the question shifts from where to store it to who can see it, who can change it, and who can administer it. Security and administration help an organization keep access organized and accountable. IMS Enterprise provides established capabilities for managing Profiles, controlling access to individual records, reviewing activity, and administering the document-management environment.

Who can see, change, and administer?

Not every record should be available to every employee.

Personnel files, financial documents, and management-only records usually need to be visible to some people and restricted from others.

IMS helps organizations control access according to their responsibilities and business needs, rather than allowing everyone to browse the same shared folders.

The IMS Enterprise Management Interface provides administrative capabilities for configuring users, Profiles, index fields, and permissions.

This allows an organization to establish a structure that reflects how its employees work and which information they are authorized to access.

Understanding IMS Profiles

One of the most important concepts in Imaging Made Simple is the Profile.

A Profile is a separately configured collection of records with its own indexing structure.

Think of a Profile as an organized area within IMS where related documents are stored and indexed so they can be found later.

A Profile might represent an entire department, such as Human Resources or Accounting. It might instead represent a business function, such as Accounts Payable, Customer Contracts, or Service Records.

The best organizational structure depends on the edition of IMS being used and the needs of the business.

IMS Professional: One Profile with flexible indexing

IMS Professional includes one Profile.

Because Professional is limited to a single Profile, organizations can use configurable index fields to organize multiple types of documents within that one collection.

For example, a small business might configure a Profile called Business Records.

Its first index field could identify the business area:

• Human Resources
• Sales
• Accounting
• Service
• Other

A second index field could identify the document type:

• Invoice
• Contract
• Proposal
• Work Order
• Service Ticket

Additional fields could include a document date, customer or employee reference, or other information useful for searching.

This arrangement allows a small business to organize many categories of documents without requiring a separate Profile for each category.

It is important to understand that these are indexing categories within one Profile, not multiple independent Profiles.

IMS Enterprise: Unlimited Profiles

IMS Enterprise offers unlimited Profiles, allowing organizations to establish separate collections for different departments, business functions, or document categories.

For example, an organization might configure:

• Human Resources — personnel records, benefits, training, and related documents.
• Accounting — accounts payable, accounts receivable, and financial records.
• Sales — proposals, customer contracts, and sales correspondence.
• Service — work orders, service tickets, and equipment records.

Each Profile can have indexing fields suited to its particular records.

For example, Human Resources might use employee-related fields, while Accounting might use invoice numbers, vendor information, and transaction dates.

Organizations can establish additional Profiles as their needs grow.

More Profiles are not automatically better, however. The goal is to create a structure that makes documents easy to organize, locate, manage, and protect.

Click or tap to enlarge

Two Layers of IMS Security

IMS Enterprise offers two complementary approaches to controlling access: Profile-level access and record-level security.

Together, they allow organizations to separate major collections of information while applying more detailed restrictions where necessary.

Level 1: Profile-Level Access

Profile-level access determines which Profiles an employee is authorized to use.

For example, a sales employee might see Sales Records and General Correspondence when using IMS.

That employee would not see restricted Human Resources or Accounting Profiles unless specifically authorized.

The employee is not presented with a list of inaccessible departments or confidential collections.

This provides a straightforward first level of information separation while making IMS easier to navigate.

Level 2: Record-Level Security

Sometimes restricting access to an entire Profile is not enough.

Consider a larger organization with several employees working in Human Resources.

All may need access to the HR Profile, but not everyone should necessarily see every personnel record.

Record-level security allows authorized administrators to establish more detailed access restrictions within a Profile.

For example:

• General HR staff may be authorized to access routine personnel documents.
• HR managers may be permitted to access a broader range of employee records.
• Senior management may be authorized to access selected sensitive records according to company policy.

These are illustrative permission arrangements. Actual access depends on how the organization's IMS environment is configured.

Sharing selected records across departments

Record-level security can also be useful when employees from different departments need access to selected information.

Imagine that a department manages a Profile containing important business documents.

Employees in Sales, Service, or Management frequently request certain records maintained in that Profile.

Rather than providing unrestricted access to every record, an organization may configure appropriate Profile access and record-level restrictions so authorized employees can work with the documents they need while other records remain protected.

This can reduce unnecessary document duplication and repeated requests for copies.

Record-level security is an optional advanced capability. Organizations can begin with straightforward Profile-level access and evaluate whether additional record restrictions would provide value.

Click or tap to enlarge

IMS Enterprise Audit: Who Did What, and When?

Audit is an established IMS Enterprise capability, documented in the IMS manual and later product literature.

It helps management answer a straightforward question: Who did what, and when?

That includes document access and user activity, which matters when records are involved in disputes, reviews, or compliance expectations.

The IMS Enterprise Audit reporting interface organizes activity into several report types:

• User Reports examine activity associated with particular users.
• Document Reports examine activity associated with particular documents or records.
• Time Frame Reports examine activity within selected periods.
• Action Reports focus on particular activity types.
• Advanced Reports combine criteria for more targeted investigations.

Reporting can use document or record, user, action, and date-range criteria.

The historical Audit reporting interface also includes CSV export so results can be saved or shared outside the system.

Together, these capabilities help management investigate discrepancies and review document activity in a structured way.

Administration Is a Deliberate Role

Administration is not just a technical detail.

It is how an organization keeps the system trustworthy over time: assigning appropriate permissions, maintaining Profiles, managing access, and keeping the document-management structure aligned with changing business needs.

An administrator may need to adjust permissions as employees change responsibilities, departments expand, or new document categories are introduced.

Which administrative and security capabilities are available depends on the IMS edition.

The Enterprise Management Interface, Enterprise Audit, and record-level security are associated specifically with IMS Enterprise, and availability may depend on installed versions, modules, and configuration.

Information Ownership & Long-Term Accessibility

A document-management system should help an organization maintain control over its information—not make that information unnecessarily difficult to retrieve or preserve.

Organizations accumulate records over many years.

Some may need to remain accessible long after the employees, software versions, or equipment originally used to create them have changed.

IMS provides tools for organizing and retrieving records, while certain Enterprise capabilities support exporting, archiving, and distributing selected document collections.

These capabilities can help an organization develop a deliberate approach to information preservation and future accessibility.

Keeping control of your information

An organization should understand where its documents are stored, how they are organized, who can access them, and what options exist for retrieving or exporting them.

With appropriate IMS capabilities and permissions, records can be selected and exported or prepared for archival and distribution.

The availability and format of these operations depend on the installed edition, modules, and configuration.

Exporting records should be approached carefully, particularly when documents must remain associated with indexing information or other context necessary for future retrieval.

Archive and Distribution serve different purposes

IMS Enterprise includes Archive and Distribution capabilities designed for particular information-management needs.

Archive supports exporting selected records and, depending on the selected operation, retaining or removing them from the active IMS environment.

This can be useful when an organization wants to preserve older records separately, reduce the amount of information maintained in its active document collection, or manage records according to an established retention strategy.

Removing records from the active IMS environment does not necessarily mean every copy has been permanently destroyed. Exported files, backups, and other retained copies may still exist.

Distribution was designed to help organizations deliver selected indexed document collections for use outside the originating IMS environment.

One historical application involved professional scanning services that digitized customers' paper documents and supplied searchable collections on CDs, DVDs, or other removable media with limited IMS viewing functionality.

These capabilities are distinct from system backup and recovery.

Planning for future access

Long-term accessibility involves more than keeping copies of files.

Organizations should consider whether future users will have the software, file formats, indexing information, and documentation necessary to locate and interpret preserved records.

A well-planned information-management strategy considers these requirements before systems are upgraded, replaced, or retired.

IMS can support parts of that strategy, but long-term accessibility also depends on decisions made by the organization.

Protecting Records Through Backup & Recovery

Document management and data protection work together, but they serve different purposes.

IMS helps organizations capture, organize, search, and manage information.

A backup and recovery strategy addresses what happens if equipment fails, files become damaged, systems are compromised, or an unexpected event interrupts operations.

Protecting the complete IMS environment

An IMS installation may include document-storage folders, database files or tables, indexing information, system configuration, and other components necessary for the system to function.

An organization's preferred backup solution may be used to protect the relevant system components, provided the backup process is appropriate for the installed IMS environment.

It is important to protect the information needed to restore both the documents and the relationships that make those documents searchable and manageable.

Copying document files alone may not be sufficient to restore a complete working IMS system.

Backup procedures should account for database consistency, necessary software and configuration, and any other dependencies required for recovery.

Backups should be tested

Simply creating a backup does not establish that a system can be restored successfully.

Organizations should periodically verify that their backup procedures work and that important records can be recovered within acceptable time frames.

Backup frequency, storage locations, security protections, off-site copies, and recovery procedures should reflect the organization's operational and regulatory needs.

A broader business-continuity strategy

IMS can be an important part of an organization's information-management environment, but disaster recovery and business continuity require planning beyond any single software product.

That planning may include alternative equipment, network access, backup storage, employee responsibilities, and procedures for restoring operations.

The goal is not simply to store documents, but to help ensure that critical information remains protected and accessible when the organization needs it.

Learn More About IMS Security and Administration

To see how security and administration compare across editions, visit Products & Features and open the edition comparison.

If you have specific security, Audit, or document-management requirements, the Have Questions? page is a good place to start.