You are here:

Managing User Permissions

User permissions can be assigned to individual users, or to user groups. These permissions dictate which locations, premises, and leases users can view and/or modify. User permissions do not affect what menus or areas of the application users can access.

Note: Assigned permissions do not apply to users with the Manager role.

User permissions are divided into three levels which can be applied to four object categories. The three permission levels are as follows:

No Access: The user does not have access to a particular part of the portfolio.
Read Only: The user has access to a particular part of the portfolio, but is not able to modify any information contained within.
Read/Write: The user can view and edit information for a particular part of the portfolio.

These permissions are applied to four object categories:

Legal Entities: Users have access granted based on legal entities. For example, if a user has read only access to Legal Entity A, they can see locations (and their associated premises and leases) with Legal Entity A selected, but not modify them.
Groups: Users have access granted based on groups. For example, a user with read only access to objects with Group A selected can see locations, premises, or leases with Group A selected, but not modify them.
Provinces/States: Users have access granted based on provinces/states. For example, a user with read only access to objects with Province A can see provinces/states with Province A selected, but not modify them.
Locations: Users have access granted based on locations. For example, a user with read only access to Location A can see Location A (or its associated premises and leases), but not modify it.

By default, permissions granted to a user are inherited from those of the parent level. If the user selects Inherit from Parent, the permissions of the level will be the same as those of the parent level. For example, if a user has read/write permission for Legal Entity A, then that user will, by default, have read/write permission for all folders with Legal Entity A, regardless of the groups to which the folders are attached. If you want the user to have read only access to the folders of Legal Entity A that are part of Group A, then you must apply exceptions by selecting Group A and checking read only for all entries.

When making changes to user permissions, you must click Save before continuing to the next permission level.

Note: If there are conflicting permissions between individual users and user groups, whichever permission level grants more access will take priority. For example, if an individual user has no access to Location 1, but in a user group they have read/write access to Location 1, they will be granted read/write access.