Solved

We are currently tightening user permissions within our IAM applications. Each company has its own IAM application with at least one key user. A key user supports IAM activities and is responsible for maintaining the role/permission structure for other users.We have reviewed the key-user responsibilities and adjusted permissions so they only have what they need. As part of this, we removed access that allowed changes to application-level settings. We no longer want to assign Main Administrator or Application Administrator roles to key users.Since these changes, key users can no longer access the “Effective user rights” table. This table is very useful for them because it provides a clear overview of what permissions users effectively have.Is there a way to grant access to the “Effective user rights” table by adding the required permissions to one of the following groups, without giving admin roles? Our key users currently have these roles:Application owners Group administrators User ad

Is it possible that after a deployment to production has been done an email is sent? In this case it is to inform among others release management. the email should contain date time, who carried out the deployment, branch name, application, etc.   

We have a bunch of views which are 1 to 1 to a table because of we need more details in a subject. In the Universal GUI more details to the same table results in a “Bad request”The smoke test gives an error: Cannot update identity column {coumn name]This column is read only in the datamodel and is not visible in the subject.The view is updateable and we have a insert of trigger to handle the update request.How can we solve this error, or is this a bug.As far we can see this is not an error.

Is it possible to turn off prefilters that are set to 'on hidden' in the subject using a process flow? Right now, it seems like only visible prefilters are affected. I'm wondering if this is a setting I can change or if it's forced by the authorization choices.

Hi, To support display of certain texts on first or last page in our DevExpress generated reports in case of multiple pages, we use scripts to show/hide those texts. This is working fine in the Windows GUI.We implemented it like mentioned here But now in Universal we are getting an error that script execution is disabled. Is there a setting in IAM that scripting can be enab​led for DevExpress or is there another option to show / hide texts based on the current page number / page count?We are using the 2025.3 release of Indicium and Universal​​​​​​

In windows, when you apply a look-up to a subject column, and choose a variant, first a query is done for the subject, and then the look-up is retrieved with any variant ON prefilters applied.However, in universal, the look-up retrieval is combined with the subject query with a LEFT JOIN on the look-up table without any prefilters applied. (neither with a default subject or variant) I have a case where this leads to row duplication and consequently non-unique PKs. Was this behaviour intended/foreseen? To solve my problem I would have to make a view instead of use a prefilter, but it would have been nice if a prefilter sufficed.

We are looking into a way to add some monitoring to our Thinkwise environment, currently we check the public Health endpoint but this lacks some information we would like to have alerting on. Is there a way to authenticate via headers for the endpoint?

As the question states: when I try to register a session variable, it removes the dot needed. For instance for the session variable Session.base_url (for a custom component to use to decide whether you are in the live or dev environment), it removes the dot between Session and base_url: Is anything else but underscores illegal in this field nowadays? If so, how would I simulate session variables for the SF? I can make session variables for the test environment, as that's done via the IAM. But development is done via the SF, is this supposed to happen?

By default our application shows 4 decimals in Numeric fields, but we don't want to show any trailing zero's for standard nummeric fields and 2 decimals for currency fields.Our Windows gui does this, but Universal is always showing 4 decimals.How do we get Universal the same as our Windows Gui?

Hello all,I have a small question, is there a possibility to trigger a small and simple process flow per record switch? When I switch record, I need it to do a request to retrieve some data to use in a custom component. To further simplify said custom component, and to further simplify our code, I would like to ask if it is possible to trigger this per record, so only the necessary data is retrieved.

I often use the query`select * from role_tabwhere tab_id = 'my_tab'and branch_id = 'my_branch'`when adjusting rights for a certain table (eg. new column added)to check if I have not missed any tables that have rights to the table. It would be convenient if in the Software Factory I could select a table and access type (hidden/read/edit, available) and then get a list of all roles that have the specified access on the active branch.Same could be useful for not just tables but columns, tasks, etc.

Good afternoon,Users of our (cost estimate) software experience an interface problem when coming onto large estimate totals: the number will not fit the field in which it is displayed (see screenshot). All the visible numbers are in the millions. Beyond the sixth figure, it is too wide for the field to display. How can this be fixed? I hope to hear soon!  

When copying a record via a task, can we configure it to automatically navigate to the newly created record in the IAM?

There is no function for getting the current branch_id right? In dynamic model code, the parameters @model_id and @branch_id are provided. In the full staged control procedure code I do not see how they are obtained. I want to write a script, not dynamic code, and use the SF and IAM DB, so I need to filter by branch_id.Is this a reliable way of getting the branch_id of the DB you are currently connected to: SELECT TOP 1 SF_BRANCH FROM sf_model_info ORDER BY sf_model_info_id descunless you start changing the connections between branches and databases, i guess 

In our warehouse, handheld scanners are used by multiple employees who each log in with their own credentials. A recurring issue is that it's currently not clear which user is logged on. The username, which is normally visible in the top right corner on a desktop, is automatically hidden by the Universal GUI when the screen width (resolution 768px) decreases. Meanwhile, nothing else is displayed in the blue top bar, so there is plenty of room for the username. My questions: Is there a setting in the Software Factory or IAM to force the username to remain visible regardless of resolution? If not, can this be achieved through a custom.css override? If so, which class should I target to prevent the display: none or hidden state of the user profile label? Having the logged-in user visible is vital for our operational flow to prevent scans being registered under the wrong account.I tried the following custom.css override, but unfortunately, it doesn't seem to work:span[data-testid="topbar

what is the correct way to get data from subroutine with odata api call Calling a view is working ok but subroutine gives Invalid Odata Url https://thinkwise-dev.vezet.nl/indicium/iam/order/fetch_production_orders_and_stock(full_date='2026-03-25',source_customer_id='K10050',operation_structure_code='EA')also tried the parameters with & and with or without quotes but no resulti want a subroutine because then i can use a temp table (performance) 

Hello!I have set up a lookup control for a reference but looks like it is not working when trying to filter from grid columns.Do I need to do the change somewhere else or is this a bug?

Hi!Is het nog mogelijk om een watermerk in een DevExpress rapport zelf te plaatsen? Ik heb geprobeerd een watermerk als afbeelding (in plaats van url) te importeren in het rapport, maar na het opslaan wordt deze weer verwijderd. Wanneer ik het rapport preview voordat ik het opsla, is het nog wel te zien op het rapport.Is dit een bekend probleem of doe ik iets verkeerd?  

In the docs, I see 2 possibilities: A managed identity - select the checkbox Use managed identity.Or:Enter the Tenant id, Client id, and the Client secret.But I have a SAS token, which is described as a possibility for Azure Files, but not for the Blob. Any advise on how to proceed?

Hello community,Successfully migrated my application from old WebGUI (platform 2023.2) to UGUI (platform 2025.3), and soon willing to upgrade to 2026.1.However, I am currently experiencing a translation problem in dev environment (SF) and production type environment (IAM), where it seems that there are translations missing in the UGUI. To clarify, my model translations are present, the UGUI translations themselves are missing. A couple of examples:  The idea of what is missing is clear I believe.When attempting to start the application as a Windows application (no real reason to do so, except to test this), the application throws the following error. Can someone help me out with getting these translations back?A ‘somewhat’ relevant post it seems:  

https://codingsight.com/passing-data-table-as-parameter-to-stored-procedures/Hi community,I am trying to implement a feature that will utilize a stored procedure/subroutine that will accept a table as a parameter however i can’t seem to find a way to implement it in the software factory since all subroutine inputs seem to be domains. I found the above topic about this issue but can’t find any followup to the idea. Sadly the table valued function workaround is not possible here since im trying to implement the procedure in a trigger which would then pass some values from the inserted rows to the procedure. The temp table strategy would work but is not that much cleaner than just putting in a cursor in the trigger looping over the inserted table. 

The easiest way to refresh a subject is by using the refresh interval in seconds.We have a subject (process) with a detail tab (steps). Based on the status (active) of a row in process the detail tab (steps) should refresh automatically. When the status of the process is ‘finished’ refreshing of the detail tab should stop.You can compare it with the generation process in the SF. The main difference is, that I could select older processes that are already finished.   The easiest way for me would be if there was an extra parameter in the context procedure for subjects with the auto refresh indicator. Based on the status off the process I could stop refreshing the steps.   An alternative could be to start a process flow when selecting a row. It is more work for me, but on the other side it gives more opportunities. 

Hi all,TLDR;  What is the recommended and secure way in Thinkwise to store and use tenant-specific integration credentials, comparable to how other low-code platforms handles shared variables per tenant? In other low-code solutions it is was easy for me to securely store and share configuration values such as usernames, passwords or API keys per tenant. These values are centrally managed, environment-specific. They are not stored in business tables and are not accidentally overwritten during database restores.In Thinkwise, I am currently trying to achieve something similar for integration credentials (for example, web service username and password). However, I am struggling with the best practice for: Secure storage (not in application tables) Environment / Tenant-specific configuration Avoiding overwrite during database refreshes Safe usage inside process flows and web connections Runtime Extended Properties seem useful, but they are not easily injectable into flows without cust

Hi there, I was wondering if it is possible to upload multiple files within a task without having to use separate parameters such as attachment_1, attachment_2, and so on. We are currently using the multiple file upload functionality described here.I understand that we could potentially use it as a modal (pop-up). However, I am primarily interested in whether uploading multiple documents can be achieved using a single parameter.As shown below, I would like to upload three files while having only one (visible) parameter available. Thanks for the help!

Since last week we started using SF Universal in the universal app or directly in the browser.Everything when i start or refresh the session (in the universal app or directly in the browser.), it automatically opens two more sessions of the universal app.Can you help me remove this extra sessions?