NexJ CRM privileges

This section describes privileges and their functions.

Generally, the hierarchy for privileges within a category is as follows:

1. Administrator override privileges (for example, the ability to skip object security)
2. Access privileges (for example, the ability to access a workspace or functionality)
3. Specific functional abilities that are typically organized by object type (for example, the ability to update companies or read only access)

New privileges for 9.4

New privileges for 9.3

Category	Privilege	Function
Households	mda:HouseholdEnabled	Displays the household name field in any add new entity dialog, such as New Household, New Contact, New Company, on the Contacts workspace.
Schedule items	mda:TimeZonesEnabled	Enables the ability to choose a time zone for schedule items and documents. For schedule items, the time zone applies to both the start time and the end time and for documents it applies to the date and due date. Schedule items always appear in the users’ calendar in their local time zone regardless of the chosen time zone.

New privileges for 9.2

The following table contains the privileges that are new for the NexJ CRM 9.2 release.

Category	Privilege	Function
Activities	DefaultForContactEnabled	Enables the automatic association of entities with activities. When users create a new activity, the last user, contact, household, or company that you accessed appears in the For field. Disabling this privilege leaves the For field blank. DefaultForContactEnabled is granted to the existing gContactManagement privilege group.
Filters	Filter:AdminManage	Allows the user to create public filters and to view, edit, and delete other users' private filters.
Filters	filter:FavoriteManage	Allows the user to create, update, and remove favorite filters.
Filters	filter:FavoriteView	Allows the user to view favorite filters.
Filters	filter:gAdmin	A group of privileges that that grants full administrative privileges to filters.
Filters	filter:gFavoriteManage	A group of privileges that allows its members to view and manage their own favorite filters.
Filters	filter:gManage	A group of privileges that allows its members to create, update, and remove filters.
Filters	filter:Manage	Allows the user to create, update, and remove filters.
Filters	filter:View	Allows the user to view filters.
Activities	mda:ContactsCompanyForActsEnabled	Adds a contact's company to the For field when a contact is added to the For field for all activities.
Activities	mda:DefaultForContactEnabled	Enables the automatic association of entities with activities. When you create a new activity, the last user, contact, household, or company that you accessed appears in the For field. Disabling this option leaves the For field blank.
Schedule items	mda:DisplayExternalContactsEnabled	Allows the user to display external contacts in the Attendees tab for schedule item dialogs. When sending invitations for a schedule item created in Microsoft Outlook, users may need to invite external contacts. An external contact is a contact who is added to a schedule item through synchronization with Microsoft Outlook but does not have any additional records in NexJ CRM.
Batch email	mda:DocMgrBatchEmailEnabled	Allows the user to send batch emails from the Document Manager for one or more entities.
Batch print	mda:DocMgrBatchPrintEnabled	Allows the user to batch print documents from the Document Manager for the one or more entities.
Custom fields	mda:ExtendedCustomFieldsEnabled	Enables the currency type field for currency custom field types.
Financial model	mda:FinancialModelEnabled	Enables financial information fields such as the AUM and the Total Invested Amount fields in the New Company dialog when users are adding companies. mda:FinancialModelEnabled is granted to the gContactManagement privilege.
Schedule items	mda:MeetingInvitationsEnabled	Enables the Attendees tab in the New Schedule Item dialog that displays the entities and users an item is associated with, who will receive invitations, the response of each entity or user to the invitations, and whether invitations have been sent yet. Users can invite additional entities or users by adding them.
Opportunities	mda:OpportunitiesEnabled	Shows the opportunity option in the Related tab of all activities and documents. To remove opportunities, disable this user option and hide the Opportunities tab on the Contacts workspace. For more information about personalizing NexJ CRM, see Customizing screens, toolbars, and portlets.
Schedule items or tasks	mda:PrivateSchedulesTasksEnabled	Allows the user to restrict access to users' schedules and tasks by using the Set Permissions dialog on the Schedule workspace to allow specific users to view their schedule and tasks. By default, users' schedules and tasks are public. mda:PrivateSchedulesTasksEnabled replaces ScheduleTaskPrivateView. In order for view permissions to work correctly, all users must have this privilege. Otherwise, every user can see each others' schedule.
Products	mda:ProductsEnabled	Shows the products option in the Related tab of all activities and documents.
Tiers	mda:RegionalTiersUpdate	Allows the user, when adding contacts or companies, to set the regionalized tier and rank for a contact or company for multiple regions using the Tier & Rank tab. mda:RegionalTiersUpdate replaces RegionalTiersUpdate.
Service requests	mda:ServiceRequestsEnabled	Shows the service request option in the Related tab of all activities and documents. To remove service requests, disable this user option anf hide the Service Requests tab. For more information about personalizing NexJ CRM, see Customizing screens, toolbars, and portlets.
Tiers	mda:TierInheritanceManage	Allows the user to manage tier inheritance for contacts from companies. When enabled, contacts inherit the tier from the company to which they belong.
User fields	mda:UserFieldsEnabled	Allows the user to add custom user fields to entities in the User Fields card on the Detail page. If you don't run with sample data, this privilege will be turned off, as this privilege is seeded in through sample data.
Ad hoc reports	bireport:PrivateReportManage	Allows the user to view, create, edit, delete, export, and execute private reports.
Ad hoc reports	bireport:PublicReportView	Allows the user to view, export, and execute public reports.
Ad hoc reports	bireport:PublicReportManage	Allows the user to view, create, edit, delete, export, and execute public reports.
Ad hoc reports	bireport:DashboardManage	Allows the user to create dashboards, and to view, edit, and delete their dashboards.
Ad hoc reports	bireport:ReportAdmin	Enables access to all reporting functionality, including the ability to edit and delete private reports of other users.

For information about privileges that were available prior to the 9.2 release, see the "NexJ CRM privileges" documentation for the 8.9 release.

Privilege groups for ad hoc reports

You can control user access to ad hoc reporting functionality by creating the following privilege groups and assigning users to the appropriate privilege group. The privilege groups mentioned here are examples; you can rename the groups as appropriate.

This section focuses on reports. Dashboards are always private-only. If a user is assigned to a privilege group that has the bireport:DashboardManage privilege, they will have full access to the dashboards functionality.

• Basic ad hoc reports users
  These users can view, export, and execute public reports, but cannot create, edit, or delete reports. This group requires the bireport:PublicReportView privilege.
• Private report creators
  These users can view, export, and execute both private and public reports but can only create, edit, and delete private reports. They do not have edit access to reports shared by other users. This group requires the bireport:PrivateReportManage and bireport:PublicReportView privileges.
• Report publishers
  These users can view, create, edit, delete, export, and execute any report except the private reports of other users. This group requires the bireport:PublicReportView, bireport:PrivateReportManage, and bireport:PublicReportManage privileges.
• Report administrators
  These users have full access to the ad hoc reporting functionality. They can view, export, create, edit, and delete all reports, including private reports of other users. This group requires the bireport:ReportAdmin privilege, which includes the functionality of all the other ad hoc reporting privileges.

Related links

Configuring privilege groups