Skip to main content
Skip table of contents

NexJ CRM privileges

This section describes privileges and their functions.

Generally, the hierarchy for privileges within a category is as follows:

  1. Administrator override privileges (for example, the ability to skip object security)

  2. Access privileges (for example, the ability to access a workspace or functionality)

  3. Specific functional abilities that are typically organized by object type (for example, the ability to update companies or read only access)

New and updated privileges and privilege groups for 24.05

Category

Privilege

Function

Ad hoc reports

rpt:ReportSetOwner

This new privilege grants users the ability to change the owner of a report,

Ad hoc reports

gReportAdmin

This privilege group has been updated to include the new rpt:ReportSetOwner privilege. This group contains the following privileges:

  • rpt:ReportAdmin

  • rpt:ReportImpersonate

  • rpt:ReportSetOwner

New and updated privileges and privilege groups for 24.02

Category

Privilege

Function

Ad hoc reports

rpt:ReportImpersonate

 This new privilege grants users the ability to execute a report as another user.

Ad hoc reports

gReportAdmin

This privilege group has been updated to include the new rpt:ReportImpersonate privilege. This group contains the following privileges:

  • rpt:ReportAdmin

  • rpt:ReportImpersonate

New and updated privileges and privilege groups for 23.11

Category

Privilege

Function

Global search

AFLShowGlobalSearch

This new privilege grants access to the Search workspace and displays the Search icon on all workspaces. It is included in the new Global Search User privilege group.

Global search

Global Search User

This new privilege group grants access to the global search functionality.

It contains the following privilege:

  • AFLShowGlobalSearch

New and updated privileges and privilege groups for 23.05

Category

Privilege

Function

Leads

ilm:LeadMappingManage

This new privilege grants access to the Leads Management tab on the Customize workspace and allows users to update mappings between lead statuses and entity statuses.

Leads

ilm:LeadMappingView

This new privilege grants access to the Leads Management tab on the Customize workspace.

Leads

ilm:LeadWorkspaceView

This new privilege grants access to the Leads workspace when the Legacy Leads global option is disabled.

Leads

gLeadAdmin

This privilege group is assigned to lead administrators and provides the ability to administer call scripts, batch delete leads, view all leads, and export leads. It has been updated to include ilm:LeadMappingManage.

It now includes the following privileges:

  • ilm:LeadAllView

  • ilm:gLeadManager

  • flow:gFlowGeneralAdmin

  • ilm:AdminLeadBulkDelete

  • ilm:LeadExport

  • ilm:ExportImportSchemeAdmin

  • ilm:LeadMappingManage

Leads

gLeadUser

This privilege group is assigned to users requiring basic lead management functionality. It has been updated to include ilm:LeadMappingView.

It now includes the following privileges:

  • ilm:EnableIntegratedLeadManagement

  • ilm:LeadCreate

  • ilm:LeadDelete

  • ilm:LeadManage

  • ilm:LeadView

  • ilm:CallScriptManage

  • ilm:CallScriptTemplateView

  • ilm:CallScriptView

  • WorkQueueManage

  • ilm:LeadMappingView

New privileges and privilege groups for 22.03

Category

Privilege

Function

Inform

inform:ProfileDetailView

Allows users to choose whether include profile details (contact name and company name) as interests on the Inform tab in a contact's or company's profile. If this privilege is enabled, it displays the Hide profile details/Show profile details command in the Settings menu in the Inform tab.

Inform

inform:gInformUser

Privilege group for end users that allows them to view and manage client interests and view the relevant articles.

It contains the following privileges:

  • inform:ArticleView

  • inform:InterestManage

  • inform:InterestView

Inform

inform:gInformAdmin

Privilege group for business administrators that allows them to view and manage the Inform feed, in addition to the end user Inform privileges.

It contains the following privileges:

  • inform:gInformUser

  • inform:ArticleManage

  • inform:FeedView

  • inform:FeedManage

New privileges for 21.12

Category

Privilege

Function

Campaign workflow templates

CampaignWorkflowTemplateManage

Allows the user to access the Campaigns tab on the Customize workspace and to add, update, or delete campaign workflow templates.

New privileges for 9.7

Category

Privilege

Function

Batch email

mda:BatchEmailEnabled

Allows the user to send personalized emails to an entity or a group of entities by selecting one or multiple entity records in the data table on the Contacts workspace, clicking Email in the data table toolbar, completing the required information in the New batch email dialog, and clicking Send Email.

Batch processes

ImportEntityListDelete

Allows the user to delete entity lists that have been created by batch processes.

Business processes

mda:BusinessProcessEnabled

Enables the Business Processes tab on the detail page for contacts, companies, households, and users on the Contacts workspace that contains a data table that displays business processes that users have added for an entity, which are based on business process templates created by business administrators. 

Capital markets

mda:CapitalMarketEnabled

Controls the visibility of the Business Line drop-down in the New Coverage User dialog.

Documents

mda:DocumentManagerEnabled

Enables the Document Manager workspace where users can store and manage documents in NexJ CRM.

Filters

mda:UserFilterEnabled

Controls the visibility of the Users filter chip on the Contacts workspace.

Import process

ImportProcessManage

Allows the user to run an import job on the Import workspace, review staged contact records, submit them for matching, and process them.

Import process

ImportProcessView

Allows the user to view import jobs on the Import workspace and edit and delete staged contact records.

Language preferences

mda:UserLangPreferenceEnabled

Allows the user to select a preferred language in the Localization tab in User Preferences.

New privileges for 9.6

Category

Privilege

Function

Campaigns

CampaignView

Allows the user to view campaigns.

Campaigns

CampaignManage

Allows the user to manage campaigns.

The CampaignView and CampaignManage privileges are included in the gContactManagement privilege group by default.

New privileges for 9.4

Category

Privilege

Function

Account plans

acctPlan:AccountPlanView

Allows the user to view account plans.

Account plans

acctPlan:AccountPlanManage

Allows the user to manage account plans.

Account plans

acctPlan:AdminAccountPlanManage

Allows the user to update and delete historical account plans.

Inform

inform:ArticleView

Allows the user to read Inform articles.

Inform

inform:InterestManage

Allows the user to add and delete Inform interests.

Inform

inform:InterestView

Allows the user to view Inform interests.

New privileges for 9.3

Category

Privilege

Function

Households

mda:HouseholdEnabled

Displays the household name field in any add new entity dialog, such as New Household, New Contact, New Company, on the Contacts workspace.

Schedule items

mda:TimeZonesEnabled

Enables the ability to choose a time zone for schedule items and documents. For schedule items, the time zone applies to both the start time and the end time and for documents it applies to the date and due date.

Schedule items always appear in the users’ calendar in their local time zone regardless of the chosen time zone.

New privileges for 9.2

The following table contains the privileges that are new for the NexJ CRM 9.2 release.

Category

Privilege

Function

Activities

DefaultForContactEnabled

Enables the automatic association of entities with activities. When users create a new activity, the last user, contact, household, or company that you accessed appears in the For field. Disabling this privilege leaves the For field blank.

DefaultForContactEnabled is granted to the existing gContactManagement privilege group.

Filters

Filter:AdminManage

Allows the user to create public filters and to view, edit, and delete other users' private filters.

Filters

filter:FavoriteManage

Allows the user to create, update, and remove favorite filters.

Filters

filter:FavoriteView

Allows the user to view favorite filters.

Filters

filter:gAdmin

A group of privileges that that grants full administrative privileges to filters.

Filters

filter:gFavoriteManage

A group of privileges that allows its members to view and manage their own favorite filters.

Filters

filter:gManage

A group of privileges that allows its members to create, update, and remove filters.

Filters

filter:Manage

Allows the user to create, update, and remove filters.

Filters

filter:View

Allows the user to view filters.

Activities

mda:ContactsCompanyForActsEnabled

Adds a contact's company to the For field when a contact is added to the For field for all activities.

Activities

mda:DefaultForContactEnabled

Enables the automatic association of entities with activities. When you create a new activity, the last user, contact, household, or company that you accessed appears in the For field. Disabling this option leaves the For field blank.

Schedule items

mda:DisplayExternalContactsEnabled

Allows the user to display external contacts in the Attendees tab for schedule item dialogs.

When sending invitations for a schedule item created in Microsoft Outlook, users may need to invite external contacts. An external contact is a contact who is added to a schedule item through synchronization with Microsoft Outlook but does not have any additional records in NexJ  CRM.

Batch email

mda:DocMgrBatchEmailEnabled

Allows the user to send batch emails from the Document Manager for one or more entities.

Batch print

mda:DocMgrBatchPrintEnabled

Allows the user to batch print documents from the Document Manager for the one or more entities.

Custom fields

mda:ExtendedCustomFieldsEnabled

Enables the currency type field for currency custom field types.

Financial model

mda:FinancialModelEnabled

Enables financial information fields such as the AUM and the Total Invested Amount fields in the New Company dialog when users are adding companies.

mda:FinancialModelEnabled is granted to the gContactManagement privilege.

Schedule items

mda:MeetingInvitationsEnabled

Enables the Attendees tab in the New Schedule Item dialog that displays the entities and users an item is associated with, who will receive invitations, the response of each entity or user to the invitations, and whether invitations have been sent yet. Users can invite additional entities or users by adding them.

Opportunities

mda:OpportunitiesEnabled

Shows the opportunity option in the Related tab of all activities and documents. To remove opportunities, disable this user option and hide the Opportunities tab on the Contacts workspace .

Schedule items or tasks

mda:PrivateSchedulesTasksEnabled

Allows the user to restrict access to users' schedules and tasks by using the Set Permissions dialog on the Schedule workspace to allow specific users to view their schedule and tasks. By default, users' schedules and tasks are public.

mda:PrivateSchedulesTasksEnabled replaces ScheduleTaskPrivateView.

In order for view permissions to work correctly, all users must have this privilege. Otherwise, every user can see each other's schedule.

Products

mda:ProductsEnabled

Shows the products option in the Related tab of all activities and documents.

Tiers

mda:RegionalTiersEnabled

Allows the user, when adding contacts or companies, to set the regionalized tier and rank for a contact or company for multiple regions using the Tier & Rank tab.

mda:RegionalTiersEnabled replaces RegionalTiersUpdate.

Service requests

mda:ServiceRequestsEnabled

Shows the service request option in the Related tab of all activities and documents. To remove service requests, disable this user option and hide the Service Requests tab. 

Tiers

mda:TierInheritanceEnabled

Allows the user to manage tier inheritance for contacts from companies. When enabled, contacts inherit the tier from the company to which they belong.

User fields

mda:UserFieldsEnabled

Allows the user to add custom user fields to entities in the User Fields card on the Detail page. If you don't run with sample data, this privilege will be turned off, as this privilege is seeded in through sample data.

Ad hoc reports

bireport:PrivateReportManage

Allows the user to view, create, edit, delete, export, and execute private reports. 

Ad hoc reports

bireport:PublicReportView

Allows the user to view, export, and execute public reports.

Ad hoc reports

bireport:PublicReportManage

Allows the user to view, create, edit, delete, export, and execute public reports.

Ad hoc reports

bireport:DashboardManage

Allows the user to create dashboards, and to view, edit, and delete their dashboards.

Ad hoc reports

bireport:ReportAdmin

Enables access to all reporting functionality, including the ability to edit and delete private reports of other users.

For information about privileges that were available prior to the 9.2 release, see the "NexJ CRM privileges" documentation for the 8.9 release.

Privilege groups for ad hoc reports

You can control user access to ad hoc reports functionality by creating the following privilege groups and assigning users to the appropriate privilege group. The privilege groups mentioned here are examples; you can rename the groups as appropriate.

As of NexJ CRM 9.6.4.1, the privileges for ad hoc reports have been renamed to start with "rpt*" instead of "bireport*". Users who previously had the "bireport*" privileges assigned to them, still have access to ad hoc reports via the new "rpt*" privileges.

  • Basic reports users
    These users can view, export, and execute public reports and dashboards, but cannot create, edit, or delete reports and dashboards. This group requires the rpt:PublicReportView privilege.

  • Private report creators
    These users can view, export, and execute both private and public reports but can only create, edit, and delete private reports. They do not have edit access to reports shared by other users. This group requires the rpt:PrivateReportManage and rpt:PublicReportView privileges. If a user has rpt:DashboardManage, the user can create, edit, and delete private dashboards.

  • Report publishers
    These users can view, create, edit, delete, export, and execute any report or dashboard except the private reports of other users. This group requires the rpt:PublicReportView, rpt:PrivateReportManage, and rpt:PublicReportManage privileges.

  • Report administrators
    These users have full access to the ad hoc reports functionality. They can view, export, create, edit, and delete all reports or dashboards, including private reports of other users.

    As of NexJ CRM 9.6, only report administratrators can export the JSON definitions for reports.

    This group requires the rpt:ReportAdmin privilege, which includes the functionality of all the other ad hoc reports privileges.

Configuring privilege groups

JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.