NexJ Logo

NexJ CRM privileges

This section describes privileges and their functions.

Generally, the hierarchy for privileges within a category is as follows:

  1. Administrator override privileges (for example, the ability to skip object security)
  2. Access privileges (for example, the ability to access a workspace or functionality)
  3. Specific functional abilities that are typically organized by object type (for example, the ability to update companies or read only access)

New privileges for 9.6

CategoryPrivilegeFunction
CampaignsCampaignViewAllows the user to view campaigns.
CampaignsCampaignManageAllows the user to manage campaigns.

The CampaignView and CampaignManage privileges are included in the gContactManagement privilege group by default.

New privileges for 9.4

CategoryPrivilegeFunction
Account plansacctPlan:AccountPlanViewAllows the user to view account plans.
Account plansacctPlan:AccountPlanManageAllows the user to manage account plans.
Account plansacctPlan:AdminAccountPlanManageAllows the user to update and delete historical account plans.
Informinform:ArticleViewAllows the user to read Inform articles.
Informinform:InterestManageAllows the user to add and delete Inform interests.
Informinform:InterestViewAllows the user to view Inform interests.

New privileges for 9.3

CategoryPrivilegeFunction
Householdsmda:HouseholdEnabledDisplays the household name field in any add new entity dialog, such as New Household, New Contact, New Company, on the Contacts workspace.
Schedule itemsmda:TimeZonesEnabled

Enables the ability to choose a time zone for schedule items and documents. For schedule items, the time zone applies to both the start time and the end time and for documents it applies to the date and due date.

Schedule items always appear in the users’ calendar in their local time zone regardless of the chosen time zone.

New privileges for 9.2

The following table contains the privileges that are new for the NexJ CRM 9.2 release.

CategoryPrivilegeFunction
ActivitiesDefaultForContactEnabled

Enables the automatic association of entities with activities. When users create a new activity, the last user, contact, household, or company that you accessed appears in the For field. Disabling this privilege leaves the For field blank.

DefaultForContactEnabled is granted to the existing gContactManagement privilege group.

FiltersFilter:AdminManageAllows the user to create public filters and to view, edit, and delete other users' private filters.
Filtersfilter:FavoriteManageAllows the user to create, update, and remove favorite filters.
Filtersfilter:FavoriteViewAllows the user to view favorite filters.
Filtersfilter:gAdminA group of privileges that that grants full administrative privileges to filters.
Filtersfilter:gFavoriteManageA group of privileges that allows its members to view and manage their own favorite filters.
Filtersfilter:gManageA group of privileges that allows its members to create, update, and remove filters.
Filtersfilter:ManageAllows the user to create, update, and remove filters.
Filtersfilter:ViewAllows the user to view filters.
Activitiesmda:ContactsCompanyForActsEnabledAdds a contact's company to the For field when a contact is added to the For field for all activities.
Activitiesmda:DefaultForContactEnabledEnables the automatic association of entities with activities. When you create a new activity, the last user, contact, household, or company that you accessed appears in the For field. Disabling this option leaves the For field blank.
Schedule itemsmda:DisplayExternalContactsEnabled

Allows the user to display external contacts in the Attendees tab for schedule item dialogs.

When sending invitations for a schedule item created in Microsoft Outlook, users may need to invite external contacts. An external contact is a contact who is added to a schedule item through synchronization with Microsoft Outlook but does not have any additional records in NexJ CRM .

Batch emailmda:DocMgrBatchEmailEnabledAllows the user to send batch emails from the Document Manager for one or more entities.
Batch printmda:DocMgrBatchPrintEnabledAllows the user to batch print documents from the Document Manager for the one or more entities.
Custom fieldsmda:ExtendedCustomFieldsEnabledEnables the currency type field for currency custom field types.
Financial modelmda:FinancialModelEnabled

Enables financial information fields such as the AUM and the Total Invested Amount fields in the New Company dialog when users are adding companies.

mda:FinancialModelEnabled is granted to the gContactManagement privilege.

Schedule itemsmda:MeetingInvitationsEnabledEnables the Attendees tab in the New Schedule Item dialog that displays the entities and users an item is associated with, who will receive invitations, the response of each entity or user to the invitations, and whether invitations have been sent yet. Users can invite additional entities or users by adding them.
Opportunitiesmda:OpportunitiesEnabledShows the opportunity option in the Related tab of all activities and documents. To remove opportunities, disable this user option and hide the Opportunities tab on the Contacts workspace . For more information about personalizing NexJ CRM , see Customizing screens, toolbars, and portlets.
Schedule items or tasksmda:PrivateSchedulesTasksEnabled

Allows the user to restrict access to users' schedules and tasks by using the Set Permissions dialog on the Schedule workspace to allow specific users to view their schedule and tasks. By default, users' schedules and tasks are public.

mda:PrivateSchedulesTasksEnabled replaces ScheduleTaskPrivateView.

In order for view permissions to work correctly, all users must have this privilege. Otherwise, every user can see each others' schedule.

Productsmda:ProductsEnabledShows the products option in the Related tab of all activities and documents.
Tiersmda:RegionalTiersUpdate

Allows the user, when adding contacts or companies, to set the regionalized tier and rank for a contact or company for multiple regions using the Tier & Rank tab.


mda:RegionalTiersUpdate replaces RegionalTiersUpdate.

Service requestsmda:ServiceRequestsEnabledShows the service request option in the Related tab of all activities and documents. To remove service requests, disable this user option anf hide the Service Requests tab. For more information about personalizing NexJ CRM , see Customizing screens, toolbars, and portlets .
Tiersmda:TierInheritanceManageAllows the user to manage tier inheritance for contacts from companies. When enabled, contacts inherit the tier from the company to which they belong.
User fieldsmda:UserFieldsEnabledAllows the user to add custom user fields to entities in the User Fields card on the Detail page. If you don't run with sample data, this privilege will be turned off, as this privilege is seeded in through sample data.
Ad hoc reportsbireport:PrivateReportManageAllows the user to view, create, edit, delete, export, and execute private reports. 
Ad hoc reportsbireport:PublicReportViewAllows the user to view, export, and execute public reports.
Ad hoc reportsbireport:PublicReportManageAllows the user to view, create, edit, delete, export, and execute public reports.
Ad hoc reportsbireport:DashboardManageAllows the user to create dashboards, and to view, edit, and delete their dashboards.
Ad hoc reportsbireport:ReportAdminEnables access to all reporting functionality, including the ability to edit and delete private reports of other users.

For information about privileges that were available prior to the 9.2 release, see the "NexJ CRM privileges" documentation for the 8.9 release.

Privilege groups for ad hoc reports

You can control user access to ad hoc reports functionality by creating the following privilege groups and assigning users to the appropriate privilege group. The privilege groups mentioned here are examples; you can rename the groups as appropriate.

As of NexJ CRM 9.6.4.1, the privileges for ad hoc reports have been renamed to start with "rpt*" instead of "bireport*". Users who previously had the "bireport*" privileges assigned to them, still have access to ad hoc reports via the new "rpt*" privileges.


  • Basic reports users
    These users can view, export, and execute public reports and dashboards, but cannot create, edit, or delete reports and dashboards. This group requires the rpt:PublicReportView privilege.
  • Private report creators
    These users can view, export, and execute both private and public reports but can only create, edit, and delete private reports. They do not have edit access to reports shared by other users. This group requires the rpt:PrivateReportManage and rpt:PublicReportView privileges. If a user has rpt:DashboardManage, the user can create, edit, and delete private dashboards.
  • Report publishers
    These users can view, create, edit, delete, export, and execute any report or dashboard except the private reports of other users. This group requires the rpt:PublicReportView, rpt:PrivateReportManage, and rpt:PublicReportManage privileges.
  • Report administrators
    These users have full access to the ad hoc reports functionality. They can view, export, create, edit, and delete all reports or dashboards, including private reports of other users.

    As of NexJ CRM 9.6, only report administratrators can export the JSON definitions for reports.

    This group requires the rpt:ReportAdmin privilege, which includes the functionality of all the other ad hoc reports privileges.

Configuring privilege groups