You are here:

Authorities

Authorities grant permissions to different actions and areas of the application. These authorities are grouped together in Authority Groups, which are assigned to application roles on the Role Authorities page. This page lists the authorities available in the application.

Note that authorities can only grant access, and do not remove access. Therefore, if a user is assigned two authorities, one with limited access and the other with full access, the user is granted full access.

Note: Users can only view the submissions under companies to which the user has access (defined in the User table).

The following authorities grant access to the front-end of the application:

Authority	Description
create_all_submission	Access to create submissions (including related submissions), and create modifications.
read_all_submission	Access to view submissions.
update_all_submission	Access to modify submissions, including submission fields, budget amounts, and year distribution.
update_all_workflow_transition	Access to transition the submission workflow.
archive_all_submission	Access to archive submissions.
unarchive_all_submission	Access to un-archive submissions.
delete_all_submission	Access to delete submissions.
add_all_reviewers	Access to add a reviewer on the Review tab of the submission. Note that in order to enable submission reviews, you must enable the switch "Enable/Disable Submission Review" switch on the Settings page.
delete_all_reviewers	Access to delete a reviewer on the Review tab of the submission. Note that in order to enable submission reviews, you must enable the switch "Enable/Disable Submission Review" switch on the Settings page.
read_all_expense	Access to view expenses.
create_all_expense	Access to create expenses.
update_all_expense	Access to modify expenses. Note that in order to modify expenses, either the "Allow Edit/Delete of NLA Expenses" or "Allow Edit/Delete of Manual Expenses" switch must be enabled.
delete_all_expense	Access to delete expenses. Note that in order to delete expenses, either the "Allow Edit/Delete of NLA Expenses" or "Allow Edit/Delete of Manual Expenses" switch must be enabled.
read_all_expense_tag	Access to view expense tags.
create_all_expense_tag	Access to create new expense tags.
update_all_expense_tag	Access to modify existing expense tags.
read_all_report	Access to view and generate reports. Note that both of these authorities must be granted
create_all_report

The following authorities grant access to the Administration section:

Authority	Description
read_all_config	Access to the Administration section in the Main Menu. Users must be granted this authority in order to access the administration pages.
read_all_settings	Access to view the Settings page.
update_all_settings	Access to modify the Settings page.
read_all_notification_settings	Access to view the Notification Settings page.
update_all_notification_settings	Access to modify the Notification Settings page.
read_all_number_range	Access to view the Number Range table.
create_all_number_range	Access to create entries in the Number Range table.
update_all_number_range	Access to modify entries in the Number Range table.
delete_all_number_range	Access to delete entries in the Number Range table.
read_all_exchange_rate	Access to view the Exchange Rate table.
create_all_exchange_rate	Access to create entries in the Exchange Rate table.
update_all_exchange_rate	Access to modify entries in the Exchange Rate table.
delete_all_exchange_rate	Access to delete entries in the Exchange Rate table
read_all_investment_type	Access to view the Investment Type table.
create_all_investment_type	Access to create entries in the Investment Type table.
update_all_investment_type	Access to modify the Investment Type table.
delete_all_investment_type	Access to delete entries in the Investment Type table.
read_all_project_group	Access to view the Project Group table.
create_all_project_group	Access to create entries in the Project Group table.
update_all_project_group	Access to modify entries in the Project Group table.
delete_all_project_group	Access to delete entries in the Project Group table.
read_all_review_option	Access to view the Review Options table.
create_all_review_option	Access to create entries in the Review Options table.
update_all_review_option	Access to modify entries in the Review Options table.
delete_all_review_option	Access to delete entries in the Review Options table.
read_all_workflow_admin	Access to view the Workflows page.
create_all_workflow_admin	Access to create workflows on the Workflows page.
update_all_workflow_admin	Access to modify workflows on the Workflows page.
delete_all_workflow_admin	Access to delete workflows on the Workflows page.
read_all_form_builders	Access to view the Form Builder page.
update_all_form_builder	Access to modify the Form Builder page.
read_all_caption	Access to view the Caption Editor.
update_all_caption	Access to modify entries in the Caption Editor.
read_all_users	Access to view the User table.
create_all_users	Access to create entries in the User table.
update_all_users	Access to modify the User table.
delete_all_users	Access to delete entries in the User table.
read_all_role_authority	Access to view the Role Authorities page.
update_all_role_authority	Access to modify role authorities.
read_all_authority_group	Access to view the Authority Groups page.
create_all_authority_group	Access to create authority groups.
update_all_authority_group	Access to modify authority groups.
delete_all_authority_group	Access to delete authority groups.
read_all_profile	Access to view the Profile table.
create_all_profile	Access to create entries in the Profile table.
update_all_profile	Access to modify entries in the Profile table.
delete_all_profile	Access to delete entries in the Profile table.
read_all_audit_logs	Access to view the Audit Logs.