NexJ CRM privileges
This section describes privileges and their functions.
Generally, the hierarchy for privileges within a category is as follows:
Administrator override privileges (for example, the ability to skip object security)
Access privileges (for example, the ability to access a workspace or functionality)
Specific functional abilities that are typically organized by object type (for example, the ability to update companies or read only access)
New and updated privileges and privilege groups for 24.05
Category | Privilege | Function |
|---|---|---|
Ad hoc reports | rpt:ReportSetOwner | This new privilege grants users the ability to change the owner of a report, |
Ad hoc reports | gReportAdmin | This privilege group has been updated to include the new rpt:ReportSetOwner privilege. This group contains the following privileges:
|
New and updated privileges and privilege groups for 24.02
Category | Privilege | Function |
|---|---|---|
Ad hoc reports | rpt:ReportImpersonate | This new privilege grants users the ability to execute a report as another user. |
Ad hoc reports | gReportAdmin | This privilege group has been updated to include the new rpt:ReportImpersonate privilege. This group contains the following privileges:
|
New and updated privileges and privilege groups for 23.11
Category | Privilege | Function |
|---|---|---|
Global search | AFLShowGlobalSearch | This new privilege grants access to the Search workspace and displays the Search icon on all workspaces. It is included in the new Global Search User privilege group. |
Global search | Global Search User | This new privilege group grants access to the global search functionality. It contains the following privilege:
|
New and updated privileges and privilege groups for 23.05
Category | Privilege | Function |
|---|---|---|
Leads | ilm:LeadMappingManage | This new privilege grants access to the Leads Management tab on the Customize workspace and allows users to update mappings between lead statuses and entity statuses. |
Leads | ilm:LeadMappingView | This new privilege grants access to the Leads Management tab on the Customize workspace. |
Leads | ilm:LeadWorkspaceView | This new privilege grants access to the Leads workspace when the Legacy Leads global option is disabled. |
Leads | gLeadAdmin | This privilege group is assigned to lead administrators and provides the ability to administer call scripts, batch delete leads, view all leads, and export leads. It has been updated to include ilm:LeadMappingManage. It now includes the following privileges:
|
Leads | gLeadUser | This privilege group is assigned to users requiring basic lead management functionality. It has been updated to include ilm:LeadMappingView. It now includes the following privileges:
|
New privileges and privilege groups for 22.03
Category | Privilege | Function |
|---|---|---|
Inform | inform:ProfileDetailView | Allows users to choose whether include profile details (contact name and company name) as interests on the Inform tab in a contact's or company's profile. If this privilege is enabled, it displays the Hide profile details/Show profile details command in the Settings menu in the Inform tab. |
Inform | inform:gInformUser | Privilege group for end users that allows them to view and manage client interests and view the relevant articles. It contains the following privileges:
|
Inform | inform:gInformAdmin | Privilege group for business administrators that allows them to view and manage the Inform feed, in addition to the end user Inform privileges. It contains the following privileges:
|
New privileges for 21.12
Category | Privilege | Function |
|---|---|---|
Campaign workflow templates | CampaignWorkflowTemplateManage | Allows the user to access the Campaigns tab on the Customize workspace and to add, update, or delete campaign workflow templates. |
New privileges for 9.7
Category | Privilege | Function |
|---|---|---|
Batch email | mda:BatchEmailEnabled | Allows the user to send personalized emails to an entity or a group of entities by selecting one or multiple entity records in the data table on the Contacts workspace, clicking Email in the data table toolbar, completing the required information in the New batch email dialog, and clicking Send Email. |
Batch processes | ImportEntityListDelete | Allows the user to delete entity lists that have been created by batch processes. |
Business processes | mda:BusinessProcessEnabled | Enables the Business Processes tab on the detail page for contacts, companies, households, and users on the Contacts workspace that contains a data table that displays business processes that users have added for an entity, which are based on business process templates created by business administrators. |
Capital markets | mda:CapitalMarketEnabled | Controls the visibility of the Business Line drop-down in the New Coverage User dialog. |
Documents | mda:DocumentManagerEnabled | Enables the Document Manager workspace where users can store and manage documents in NexJ CRM. |
Filters | mda:UserFilterEnabled | Controls the visibility of the Users filter chip on the Contacts workspace. |
Import process | ImportProcessManage | Allows the user to run an import job on the Import workspace, review staged contact records, submit them for matching, and process them. |
Import process | ImportProcessView | Allows the user to view import jobs on the Import workspace and edit and delete staged contact records. |
Language preferences | mda:UserLangPreferenceEnabled | Allows the user to select a preferred language in the Localization tab in User Preferences. |
New privileges for 9.6
Category | Privilege | Function |
|---|---|---|
Campaigns | CampaignView | Allows the user to view campaigns. |
Campaigns | CampaignManage | Allows the user to manage campaigns. |
The CampaignView and CampaignManage privileges are included in the gContactManagement privilege group by default.
New privileges for 9.4
Category | Privilege | Function |
|---|---|---|
Account plans | acctPlan:AccountPlanView | Allows the user to view account plans. |
Account plans | acctPlan:AccountPlanManage | Allows the user to manage account plans. |
Account plans | acctPlan:AdminAccountPlanManage | Allows the user to update and delete historical account plans. |
Inform | inform:ArticleView | Allows the user to read Inform articles. |
Inform | inform:InterestManage | Allows the user to add and delete Inform interests. |
Inform | inform:InterestView | Allows the user to view Inform interests. |
New privileges for 9.3
Category | Privilege | Function |
|---|---|---|
Households | mda:HouseholdEnabled | Displays the household name field in any add new entity dialog, such as New Household, New Contact, New Company, on the Contacts workspace. |
Schedule items | mda:TimeZonesEnabled | Enables the ability to choose a time zone for schedule items and documents. For schedule items, the time zone applies to both the start time and the end time and for documents it applies to the date and due date. Schedule items always appear in the users’ calendar in their local time zone regardless of the chosen time zone. |
New privileges for 9.2
The following table contains the privileges that are new for the NexJ CRM 9.2 release.
Category | Privilege | Function |
|---|---|---|
Activities | DefaultForContactEnabled | Enables the automatic association of entities with activities. When users create a new activity, the last user, contact, household, or company that you accessed appears in the For field. Disabling this privilege leaves the For field blank. DefaultForContactEnabled is granted to the existing gContactManagement privilege group. |
Filters | Filter:AdminManage | Allows the user to create public filters and to view, edit, and delete other users' private filters. |
Filters | filter:FavoriteManage | Allows the user to create, update, and remove favorite filters. |
Filters | filter:FavoriteView | Allows the user to view favorite filters. |
Filters | filter:gAdmin | A group of privileges that that grants full administrative privileges to filters. |
Filters | filter:gFavoriteManage | A group of privileges that allows its members to view and manage their own favorite filters. |
Filters | filter:gManage | A group of privileges that allows its members to create, update, and remove filters. |
Filters | filter:Manage | Allows the user to create, update, and remove filters. |
Filters | filter:View | Allows the user to view filters. |
Activities | mda:ContactsCompanyForActsEnabled | Adds a contact's company to the For field when a contact is added to the For field for all activities. |
Activities | mda:DefaultForContactEnabled | Enables the automatic association of entities with activities. When you create a new activity, the last user, contact, household, or company that you accessed appears in the For field. Disabling this option leaves the For field blank. |
Schedule items | mda:DisplayExternalContactsEnabled | Allows the user to display external contacts in the Attendees tab for schedule item dialogs. When sending invitations for a schedule item created in Microsoft Outlook, users may need to invite external contacts. An external contact is a contact who is added to a schedule item through synchronization with Microsoft Outlook but does not have any additional records in NexJ CRM. |
Batch email | mda:DocMgrBatchEmailEnabled | Allows the user to send batch emails from the Document Manager for one or more entities. |
Batch print | mda:DocMgrBatchPrintEnabled | Allows the user to batch print documents from the Document Manager for the one or more entities. |
Custom fields | mda:ExtendedCustomFieldsEnabled | Enables the currency type field for currency custom field types. |
Financial model | mda:FinancialModelEnabled | Enables financial information fields such as the AUM and the Total Invested Amount fields in the New Company dialog when users are adding companies. mda:FinancialModelEnabled is granted to the gContactManagement privilege. |
Schedule items | mda:MeetingInvitationsEnabled | Enables the Attendees tab in the New Schedule Item dialog that displays the entities and users an item is associated with, who will receive invitations, the response of each entity or user to the invitations, and whether invitations have been sent yet. Users can invite additional entities or users by adding them. |
Opportunities | mda:OpportunitiesEnabled | Shows the opportunity option in the Related tab of all activities and documents. To remove opportunities, disable this user option and hide the Opportunities tab on the Contacts workspace . |
Schedule items or tasks | mda:PrivateSchedulesTasksEnabled | Allows the user to restrict access to users' schedules and tasks by using the Set Permissions dialog on the Schedule workspace to allow specific users to view their schedule and tasks. By default, users' schedules and tasks are public. mda:PrivateSchedulesTasksEnabled replaces ScheduleTaskPrivateView. In order for view permissions to work correctly, all users must have this privilege. Otherwise, every user can see each other's schedule. |
Products | mda:ProductsEnabled | Shows the products option in the Related tab of all activities and documents. |
Tiers | mda:RegionalTiersEnabled | Allows the user, when adding contacts or companies, to set the regionalized tier and rank for a contact or company for multiple regions using the Tier & Rank tab. mda:RegionalTiersEnabled replaces RegionalTiersUpdate. |
Service requests | mda:ServiceRequestsEnabled | Shows the service request option in the Related tab of all activities and documents. To remove service requests, disable this user option and hide the Service Requests tab. |
Tiers | mda:TierInheritanceEnabled | Allows the user to manage tier inheritance for contacts from companies. When enabled, contacts inherit the tier from the company to which they belong. |
User fields | mda:UserFieldsEnabled | Allows the user to add custom user fields to entities in the User Fields card on the Detail page. If you don't run with sample data, this privilege will be turned off, as this privilege is seeded in through sample data. |
Ad hoc reports | bireport:PrivateReportManage | Allows the user to view, create, edit, delete, export, and execute private reports. |
Ad hoc reports | bireport:PublicReportView | Allows the user to view, export, and execute public reports. |
Ad hoc reports | bireport:PublicReportManage | Allows the user to view, create, edit, delete, export, and execute public reports. |
Ad hoc reports | bireport:DashboardManage | Allows the user to create dashboards, and to view, edit, and delete their dashboards. |
Ad hoc reports | bireport:ReportAdmin | Enables access to all reporting functionality, including the ability to edit and delete private reports of other users. |
For information about privileges that were available prior to the 9.2 release, see the "NexJ CRM privileges" documentation for the 8.9 release.
Privilege groups for ad hoc reports
You can control user access to ad hoc reports functionality by creating the following privilege groups and assigning users to the appropriate privilege group. The privilege groups mentioned here are examples; you can rename the groups as appropriate.
As of NexJ CRM 9.6.4.1, the privileges for ad hoc reports have been renamed to start with "rpt*" instead of "bireport*". Users who previously had the "bireport*" privileges assigned to them, still have access to ad hoc reports via the new "rpt*" privileges.
Basic reports users
These users can view, export, and execute public reports and dashboards, but cannot create, edit, or delete reports and dashboards. This group requires the rpt:PublicReportView privilege.Private report creators
These users can view, export, and execute both private and public reports but can only create, edit, and delete private reports. They do not have edit access to reports shared by other users. This group requires the rpt:PrivateReportManage and rpt:PublicReportView privileges. If a user has rpt:DashboardManage, the user can create, edit, and delete private dashboards.Report publishers
These users can view, create, edit, delete, export, and execute any report or dashboard except the private reports of other users. This group requires the rpt:PublicReportView, rpt:PrivateReportManage, and rpt:PublicReportManage privileges.Report administrators
These users have full access to the ad hoc reports functionality. They can view, export, create, edit, and delete all reports or dashboards, including private reports of other users.As of NexJ CRM 9.6, only report administratrators can export the JSON definitions for reports.This group requires the rpt:ReportAdmin privilege, which includes the functionality of all the other ad hoc reports privileges.