Standard Security Entities

Used to configure a user as the owner on distress calls.

Controls access to the Mass Update button on the Case Search dashboard

Allows access to the Case Type Subscriptions link on the user profile.

Allows the user to edit the following fields in the Admin Fees and Taxes and Other Fees fieldsets of a Pricing Batch record on the Pricing Console until Pricing is Locked:

Admin Fees

• Override Billing For This Batch

• Pricing Method

• Admin%

• Per Head Fee (annl)

• Per Head Fee (mth)

• Per Check Fee

• First Check Supplement

• Per Invoice

• Flat Fee (monthly)

• Minimum Admin Per Head

• Minimum Admin Per Account

Taxes and Other Fees

• Billing Client Modifier

Note:  Edit access to the Pricing Batch form (gen_PricingBatch) is also required to activate this security role entity.

Allows the user to edit the value in the SUTA Bill Rate field until Pricing is Locked. Once Pricing is Locked, the system does not allow a user to edit the SUTA Bill Rate. See Creating Pricing.

Used in Pricing Batch business rule HE_ValidateAdminPercentage which fires when a user tries to enter an Admin Percentage lower than the Default Admin Percentage. Having this entity allows the user to bypass this validation.

Users with View rights to this entity can edit pricing fields when the Batch is in Submitted and Underwriting status. Otherwise, the pricing fields can only be edited when the Batch is in New status.

User allowed to see the pricing breakdown matrix at the bottom of the pricing console and in the pricing widget on the workspace landing page.

Note:  By default, Global Admin users cannot view the pricing breakdown matrix at the bottom of the pricing console. Add this entity to the Global Administrator role or another role to which the user is a member so that Global Admin users can view the pricing matrix.

Allow visibility to Pricing Console Gross Profit After Commissions

Controls access to the Company Benefits Plan workflow link - expire

Controls access to the Company Benefits Plan workflow link - reject

Controls access to the Administrative Benefits Plan workflow link - activate

Controls access to the Administrative Benefits Plan workflow link - expire

Controls access to the Administrative Benefits Plan workflow link - renew

Controls access to Client Master pricing workflow link - activate

Controls access to Client Master pricing workflow link - activate now

Controls access to Client Master pricing workflow link - clone (pricing batch)

Controls access to Client Master pricing workflow link - 

Controls access to Client Master pricing workflow link - expire an existing batch

Allows the reactivation of RFPs that were set to Dead

Allows you to re-process a batch, sets it back to pre-submit

Allows you to Terminate a client from the Client Master Header link (moves client to Pending Termination Status)

Allows access to the Cancel link on Certificate of Insurance 

Allows access to the Issue link on Certificate of Insurance 

Controls access to the Pricing Batch workflow link - accept 

Controls access to the Pricing Batch workflow link - activate future  - based on activation date

Controls access to the Pricing Batch workflow link - clone 

Controls access to the Pricing Batch workflow link - kill 

Controls access to the Pricing Code workflow link - activate

Controls access to the Workers' Comp Policy action link to send certificates of insurance 

Controls access to the Pricing State workflow link - approve

Controls access to the Pricing State workflow link - kill

BusinessIntelligenceModule

Controls whether the Delete button is present for non-administrator and developer users on the Business Intelligence User dashboard module.

Note: By default, this security entity is added to the EVERYONE role with View, Add, Edit and Delete access set. However, Add rights still require the User Details Reporting Profile assignment to have the Allow Report Creation flag checked.

Dataform security

Security entity used to control access to the Case Discussion and Case Attachments dataforms.

Note: By default, this security entity is added to the EVERYONE role with View, Add, and Edit access set.

Incident

Allows the user to view, add, and edit tasks. This entity is present by default PEO Employee Role) with View/Add/Edit rights.

Allows the user to view, add, and edit tasks. You can use the Add button on Task Manager dashboards and the plus (+ ) icon on the Task Manager widget. A workplace selector displays with both options.

Controls field-specific security on the task - not configurable

Incident_IsActive

Secures the Active option on Tasks. This does not affect mass updates through the task manager. Users with the rights to perform mass updates can still mark a task as Inactive by completing and archiving the task.

Allows the user to view the profit information at the bottom of the Pricing Console.

Works like dataform field security

Works like dataform field security

Works like dataform field security

Works like dataform field security

Works like dataform field security

Works like dataform field security

Works like dataform field security

Security on the Contact table

Template security (replacing TemplateName with the actual name of the associated template). Allows a user to create workspaces for this template.

CRM_$Attachment

Security entity used to secure the Organization and Contact attachment Action item

TimeTracker

Security entity used to secure Time Tracker module records.

Note: 

• By default, this security entity is added to the EVERYONE role with View, Add, and Edit rights set. This allows users to view/edit and add their own Time Tracker records.

• Assigning View only access still allows users to edit their own Time Tracker records.

• Delete rights can be added to a non-admin user to allow them to delete their own Time Tracker records.

• The ability to View, Add, Edit and Delete Time Tracker records of ALL users requires Admin access. (This does not apply to Global Administrators as they have Admin rights in Time Tracker by default and do not require security entity assignment.)