Security Group Functional Rights Explained

Security permissions can be defined by roles, which allow staff to have the appropriate rights only while acting in a specific role associated with a work object.

Security permissions can also be defined by security groups to which the staff is assigned, which allow staff to have rights to the work object regardless of their role.

Note: If all child functions within a parent are set to the same value (Undefined, Grant, or Never Allow), the parent function is automatically changed to that same selection.

The functional right assignment can be one of the following:

• Undefined. Access is not yet assigned.
• Granted. Access is allowed.
• Never Allowed. Restricts all access, including any inherited access. This keeps the users assigned to the security group from performing the function even when the same users are members of another security group or assigned a role that has been granted the same permission.

Administration Manager

Firm

Function	Permission Description
Firm setup	Grants the user the ability to add, edit or delete firm information.
Lists	Grants the user the ability to add, edit or delete list information.
Active Directory Integration	Grants the user the ability to run the Active Directory Setup wizard, add and/or edit staff during a manual or scheduled import and access any areas of the Active Directory ribbon options in the Staff main window.

Security

Parent Function	Child Function	Second-level Child Function	Third-level Child Function	Permission Description
Role profile				Grants the user the ability to add, edit, view, or delete roles. A firm will create roles when staff should act in roles while working on projects for clients or working on specific work objects (ex. tax returns or binders) for clients.
Security group profile				Grants the user the ability to add, edit, view, or delete security groups. Security groups are used to assign functional rights to selected areas for one or more users of the firm.
	General			Grants the user the ability to add, edit, view or delete information on the General page of the security group profile.
	Functional rights			Grants the user the ability to assign functional rights to the security group profile.
	Assigned staff			Grants the user the ability to assign staff to the security group profile. Any staff secured in a staff access group that the user does not have access to edit will not be available to add for assignment.
Client access group profile				Grants the user the ability to add, edit, view, or delete client access groups. Client access groups secure selected clients from all staff who are not assigned to the group.
	General			Grants the user the ability to add, edit, view or delete information on the General page of the client access group profile.
	Secured clients			Grants users the ability to select the clients that are to be secured in the client access group.
	Staff with access			Grants the user the ability to assign staff to the client access group. Any staff secured in a staff access group that the user does not have access to edit will not be available to add for assignment.
Staff access group profile				Grants the user the ability to add, edit, view, or delete staff access groups. Staff access groups secure selected staff from all staff who are not assigned to the group.
	General			Grants the user the ability to add or edit information on the General page of the staff access group profile.
	Secured staff			Grants the user the ability to add or edit information on the Functional Rights page of the staff access group profile.
	Staff with access			Grants the user the ability to assign staff who will receive access to work with the secured staff for the specified organizational unit.

Staff Manager

Parent Function	Child Function	Second-level Child Function	Third-level Child Function	Permission Description
Staff profile				Grants users the ability to add, edit, view, or delete staff profiles.
	General			Grants users the ability to add or edit information on the General tab of a staff profile.
	Address Phone			Grants users the ability to add, edit, or view Address/Phone information on the Address/Phone tab of a staff profile.
	Administrative
		Payroll information
			Federal tax ID	Grants users the ability to add, edit, or view the Federal Tax ID field on the Administrative tab of a staff profile.
			Employee Number	Grants users the ability to add, edit, or view the Employee Number field on the Administrative tab of a staff profile.
			Pay type	Grants users the ability to add, edit, or view the Pay type field on the Administrative tab of a staff profile.
			Hire date	Grants users the ability to add, edit, or view the Hire date field on the Administrative tab of a staff profile.
			Hire salary	Grants users the ability to add, edit, or view the Hire salary field on the Administrative tab of a staff profile.
			Review date	Grants users the ability to add, edit, or view the Review date field on the Administrative tab of a staff profile.
			Current salary	Grants users the ability to add, edit, or view the Current salary field on the Administrative tab of a staff profile.
	Assignments
		Teams		Grants users the ability to view team assignments for a staff profile.
		Security groups		Grants users the ability to view security group assignments for a staff profile.
		Client access		Grants users the ability to view client access group assignments for a staff profile.
		Staff access		Grants users the ability to view staff access group assignments for a staff profile.
		Licenses Product Access		Grants users the ability to view licensing and product access assignments for a staff profile.
	Security related to			Grants users the ability to view security assignments related to organizational units, clients, staff, and projects from within the staff profile.
License/Product Access				Grants users the ability to access the assignment page and assign licenses and product access to staff of the firm.
Reset login password				Grants users the ability to reset the passwords for staff they have permission to view in the staff grid.
Staff template				Grants users the ability to add, edit, view, or delete staff templates.
Team profile				Grants users the ability to add, edit, view, or delete staff teams.
Staff Notes
	Own Notes			Grants users the ability to add, edit, view, or delete their own staff notes.
	Others' shared notes			Grants users the ability to edit, view, or delete shared notes for other staff.
	Others' private notes			Grants users the ability to edit, view, or delete private notes for other staff.

Client Manager

Parent Function	Child Function	Second-level Child Function	Third-level Child Function	Permission Description
Client profile				Allows users to add, edit, view, or delete client profiles. Users can also search and filter clients within Client Manager views.
	Approved client			Allows users to add, edit, view, or delete approved clients.
	Prospect client			Allows users to add, edit, view, or delete prospect clients.
	Provisional client			Allows users to add, edit, view, or delete provisional clients.
	General			Allows users to edit, view, or delete information in the General section of the client profile.
		Client type		Allows users to edit or view the client type field of the client profile.
		General Information		Allows users to edit or view the General Information fields of the client profile.
			Client ID	Allows users to edit the Client ID field of the client profile.
	Associates			Allows users to edit, view, or delete associates of clients.
	Assignments			Allows users to edit assignments of the client from the client profile.
		Client groups		Allows users to view client group assignments for the client profile.
		Client access groups		Allows users to view or edit client access group assignments for the client profile.
	Address Phone			Allows users to edit or view address and phone information in the client profile.
	Administrative			Allows users to edit and view administrative information in the client profile.
		Entity profile information		Allows users to edit or view entity profile information in the client profile.
		Responsible staff		Allows users to edit or view responsible staff information in the client profile.
	Contacts			Allows users to edit, view, or delete contacts for the clients.
Client Notes
	Own notes			Allows users to add, edit, view, or delete their own client notes.
	Others' shared notes			Allows users to edit, view, or delete other users' shared notes.
	Others' private notes			Allows users to edit, view, or delete other's shared private notes. Note: The Private note option for both new and existing private notes is disabled due to the limited use of this setting. If your firm wants to keep private note contents, re-create them before September 1, 2017. All client private notes will be deleted in a future release. To find your private notes, run the Client Notes Report in Reports Manager using the Private field as a filter.
Client dashboard				Allows users to search for clients when working with the Client Dashboard on their desktop or mobile device.
Client associates profile				Allows users to add, edit, view, or delete client associate profiles.
Client group profile				Allows users to add, edit, view, or delete client group profiles.

Data Migration Utility

Parent Function	Permission Description
Access to migrate data	Grants the user the ability to run the Data Migration Utility.

Configure Notifications

Parent Function	Permission Description
Configure notifications	Allows users to view and edit notifications.

Client Collaboration

Dashboard

Function	Permission Description
Launch Client Collaboration	Allows users to access the Client Collaboration application. Users without this permission will not see the Client Collaboration link on the Dashboard, nor are they able to log in to the web site.

Request Dashboard

Function	Permission Description
Client Requests	Allows users to add, edit, view, and delete client requests on the Client Collaboration dashboard.
IND Organizer and Tax Documents	Allows users to download the organizer and tax documents for a particular request on the requests dashboard.
Document Locker	Allows users to upload, download, move, apply tags to, view, and delete documents in a Document Locker.

Library

Parent Function	Permission Description
IND Templates	Allows users to add, edit, view, and delete the various templates for 1040 returns.

Administration

Parent Function	Permission Description
Administration	Allows users to view and edit the firm's settings in the Administration section of Client Collaboration.

Document

Document Central

Parent Function	Child Function	Second-level Child Function	Permission Description
File Groups			Allows users to create, view, edit, and delete file groups. Additional permissions at the entity-level are required to add files to the file groups.
Recycle Bin			Allows users to view files in the recycle bin.
	Permanently Delete Files		Allows users to permanently delete files from the recycle bin.
	Restore		Allows users to restore files from the recycle bin back to their original location.
	File deletion log		Allows users to access the file deletion log
	Recycle bin options		Allows users to modify the recycle bin purge options
Reports
	Send as attachment		Allows users to send a Document report through email as an attachment.
	Export		Allows users to export a Document report to Excel® or PDF format.
	Print		Allows users to print a Document report.

Administration Manager

Parent Function	Child Function	Permission Description
Document Lists		Allows users to view and edit Document lists.
	Disallowed file types	Allows users to add, edit, view, and delete entries on the Disallowed file types list.
	Document Type	Allows users to add, edit, view, and delete entries on the Document types list.
	Years	Allows users to add, edit, view, and delete entries on the Years list.
	Non-client types	Allows users to add, edit, view, and delete entries on the Non-client types list.
	Non-client ID numbers	Allows users to add, edit, view, and delete entries on the Non-client ID numbers list.

Firm

Parent Function	Child Function	Second-level Child Function	Third-level Child Function	Permission Description
File Management				Allows users to work with files for the Firm entity.
	Add scanned file			Allows users to add scanned files to the Firm entity.
	Append to PDF			Allows users to append a PDF file to an existing file with the same name for the firm entity during the upload process.
	Archive/Unarchive files			Allows users to view, edit, and delete archive files for the firm entity and allows the user to move a firm entity's file to archive storage.
	Cancel check-out			Allows users to cancel check-out of a file which that user has checked out for the firm entity. Changes to the file since it was checked out will be lost.
	Check in/out			Allows users to check out and check in files for the firm entity. User can only check in files that were checked out by that same user.
	Copy/move			Allows users to copy or move files for the firm entity.
	Download			Allows users to download a read-only copy of a file for the firm entity.
	Edit retention period			Allows users to modify the retention period of a file for the firm entity.
	File groups			Allows users to add a file from the firm entity to a file group.
	History			Allows users to view history of a file for the firm entity.
	Properties			Allows users to view and edit the properties of a file for the firm entity.
	File-level permissions			Allows users to add, edit, view, and delete file-level permissions for a file belonging to the firm entity.
	Files			Allows users to add, direct edit, view, and delete files for the firm entity.
	Lock/unlock files			Allows users to lock and unlock files for the firm entity. User can only unlock files which were locked by that same user.
	Overwrite duplicates			Allows users to overwrite files for the firm entity when uploading a file with a duplicate name.
	Preview			Allows users to view a preview of a file for the firm entity.
	Previous versions			Allows users to view, restore, and delete previous versions of files for the firm entity. This feature requires the system to be configured to store two or more versions of files.
	Send as attachment			Allows users to send a file for the firm entity through email as an attachment.
	Synchronize offline files			Allows users to select files from the firm entity to be synchronized for offline viewing.
	Send to Engagement			Allows users to send files from the firm entity to an Engagement binder in the user's local file room (LFR).
	Cancel others checked out files			Allows users to cancel check-outs by other users.
	Task assignment			Allows users to assign tasks to other users.
Discussions				Allows users to view and participate in discussions about files for the firm entity.
	Own posts			Allows users to view, add, edit, and delete the user's own discussion posts about files for the firm entity.
	Others' posts			Allows users to view, add, edit, and delete other user's discussion posts about files for the firm entity.
	Reply to posts			Allows users to reply to posted discussion threads about files for the firm entity.
	Attach file to post			Allows users to attach a copy of the firm entity's file being discussed to notification emails.
	Close/reopen thread			Allows users to close or reopen discussion threads about files for the firm entity.
	Mark/unmark thread as sticky			Allows users to mark or unmark discussion threads about files for the firm entity as sticky. Sticky threads appear at the top of the list of discussion threads for a file.
Firm profile				Allows users to view and edit Document related options on the Firm Entity profile.
	Custom folders			Allows users to view, add, edit, and delete custom folders for the firm entity.
	Email encryption keys			Allows users to view and regenerate the encryption key for the firm entity.
		Email Key		Allows users to send the firm entity's encryption key through email.
	Folder templates			Allows users to view and edit the folder template for the firm entity.
Firm Setup				Allows users to view and edit document related options in Firm Setup. It is required to view the Document plug-in to Firm Setup.
	Audit Trail Reports			Allows users to view and delete audit trail reports.
		File Activity Report		Allows users to view and delete File Activity audit trail reports.
			Export	Allows users to export the File Activity audit trail report to Excel® or PDF format.
			Print	Allows users to print the File Activity audit trail report.
			Send as attachment	Allows users to send the File Activity audit trail report through email as an attachment.
		User Activity Report		Allows users to view and delete User Activity audit trail reports.
			Export	Allows users to export the User Activity audit trail report to Excel® or PDF format.
			Print	Allows users to print the User Activity audit trail report.
			Send as attachment	Allows users to send the User Activity audit trail report through email as an attachment.
	Audit Trail Settings			Allows users to view and edit audit trail settings.
		File Activity Report		Allows users to view and edit settings for the File Activity audit trail report.
			Archive	Allows users to archive File Activity audit trail reports. Archiving will save the report and allow the report to be sent through email as an attachment.
			Purge	Allows users to purge File Activity audit trail reports from the system.
		User Activity Report		Allows users to view and edit settings for the User Activity audit trail report.
			Archive	Allows users to archive User Activity audit trail reports. Archiving will save the report and allow the report to be sent through email as an attachment.
			Purge	Allows users to purge User Activity audit trail reports from the system.
	Classes and subclasses			Allows users to view, add, edit, and delete classes and subclasses used in Document.
	Configurations			Allows users to view and edit various configuration options in Document. These options include setting the number of file versions to store, default number of days to check out files, synchronized offline files settings, portal creation reminders, drag and drop and encryption settings, and disk space notification settings.
	Email Notifications			Allows users to view and edit email notification settings.
	Email encryption key			Allows users to view and edit encryption keys for all entities through Encryption Key Manager.
		Email key		Allows users to send any Encryption Key through email.
		Regenerate key		Allows users to regenerate any or all Encryption Keys.
		Control key expiration		Allows users to view and edit the default expiration date for generated Encryption Keys.
	File naming conventions			Allows users to view, add, edit, and delete file naming conventions for each entity type.
	Folder Templates			Allows users to view, add, edit, and delete folder templates for each entity type.
		Set default metadata		Allows users to view, edit, add, and delete default metadata assigned to folders in a folder template. User must also have permission to view and edit folder templates.
	Tax Mapping			Allows users to view, add, edit, and delete tax mappings for each entity type. This will allow for seamless integration with Tax.
Firm Storage
	Managed Storage
	Extended Storage

Office

Parent Function	Child Function	Second-level Child Function	Permission Description
File Management			Allows users to work with files for an Office entity.
	Add scanned file		Allows users to add scanned files to an Office entity.
	Append to PDF		Allows users to append a PDF file to an existing file with the same name for an Office entity during the upload process.
	Archive/Unarchive files		Allows users to view, edit, and delete archive files for an Office entity and allows the user to move a firm entity's file to archive storage.
	Cancel check-out		Allows users to cancel check-out of a file which that user has checked out for an Office entity. Changes to the file since it was checked out will be lost.
	Check in/out		Allows users to check out and check in files for an Office entity. User can only check in files that were checked out by that same user.
	Copy/move		Allows users to copy or move files for an Office entity.
	Download files		Allows users to download a read-only copy of a file for an Office entity.
	Edit retention period		Allows users to modify the retention period of a file for an Office entity.
	File groups		Allows users to add a file from an Office entity to a file group.
	History		Allows users to view history of a file for an Office entity.
	Properties		Allows users to view and edit the properties of a file for an Office entity.
	File-level permissions		Allows users to add, edit, view, and delete file-level permissions for a file belonging to an Office entity.
	Files		Allows users to add, direct edit, view, and delete files for an Office entity.
	Lock/Unlock files		Allows users to lock and unlock files for an Office entity. User can only unlock files which were locked by that same user.
	Overwrite duplicates		Allows users to overwrite files for an Office entity when uploading a file with a duplicate name.
	Preview		Allows users to view a preview of a file for an Office entity.
	Previous versions		Allows users to view, restore, and delete previous versions of files for an Office entity. This feature requires the system to be configured to store two or more versions of files.
	Send as attachment		Allows users to send a file for an Office entity through email as an attachment.
	Synchronize offline Files		Allows users to select files from an Office entity to be synchronized for offline viewing.
	Send to Engagement		Allows users to send files from an Office entity to an Engagement binder in the user's local file room (LFR).
	Discussions		Allows users to view and participate in discussions about files for an Office entity.
		Attach file to post	Allows users to attach a copy of an Office entity's file being discussed to notification emails.
		Close or reopen thread	Allows users to close or reopen discussion threads about files for an Office entity.
		Mark or unmark thread as sticky	Allows users to mark or unmark discussion threads about files for an Office entity as sticky. Sticky threads appear at the top of the list of discussion threads for a file.
		Others posts	Allows users to view, add, edit, and delete other users' discussion posts about files for an Office entity.
		Own posts	Allows users to view, add, edit, and delete the user's own discussion posts about files for an Office entity.
		Reply to posts	Allows users to reply to posted discussion threads about files for an Office entity.
	Cancel others checked out files		Allows users to cancel check-outs by other users.
	Task assignment		Allows users to assign tasks to other users.
Office Profile			Allows users to view and edit Document related options on an Office entity profile.
	Folder templates		Allows users to view and edit the folder template for an Office entity.
	Custom folders		Allows users to view, add, edit, and delete custom folders for an Office entity.
	Email encryption keys		Allows users to view and regenerate the encryption key for an Office entity.
		Email Key	Allows users to send an Office entity's encryption key through email.
	Extended storage file types		Grants the user the ability to add, view, edit, and delete Extended storage file types
	Office Storage		Grants the user the ability to view and edit the Office storage area
		Managed Storage	Grants the user the ability to view and edit the Managed storage area
		Extended Storage	Grants the user the ability to view and edit the Extended storage area
		Archive Storage	Grants the user the ability to view and edit the Archive storage area
		Recycle Bin Storage	Grants the user the ability to view and edit the Recycle Bin storage area
		Search Index Server	Grants the user the ability to view and edit the Search Index server

Business Unit

Parent Function	Child Function	Second-level Child Function	Permission Description
File Management			Allows users to work with files for a Business Unit entity.
	Add scanned file		Allows users to add scanned files to a Business Unit entity.
	Append to PDF		Allows users to append a PDF file to an existing file with the same name for a Business Unit entity during the upload process.
	Archive/Unarchive files		Allows users to view, edit, and delete archive files for a Business Unit entity and allows the user to move a firm entity's file to archive storage.
	Cancel check-out		Allows users to cancel check-out of a file which that user has checked out for a Business Unit entity. Changes to the file since it was checked out will be lost.
	Check in/out		Allows users to check out and check in files for a Business Unit entity. User can only check in files that were checked out by that same user.
	Copy/move		Allows users to copy or move files for a Business Unit entity.
	Download		Allows users to download a read-only copy of a file for a Business Unit entity.
	Edit retention period		Allows users to modify the retention period of a file for a Business Unit entity.
	File groups		Allows users to add a file from a Business Unit entity to a file group.
	History		Allows users to view history of a file for a Business Unit entity.
	Properties		Allows users to view and edit the properties of a file for a Business Unit entity.
	File-level permissions		Allows users to add, edit, view, and delete file-level permissions for a file belonging to a Business Unit entity.
	Files		Allows users to add, direct edit, view, and delete files for a Business Unit entity.
	Lock/Unlock files		Allows users to lock and unlock files for a Business Unit entity. User can only unlock files which were locked by that same user.
	Overwrite duplicates		Allows users to overwrite files for a Business Unit entity when uploading a file with a duplicate name.
	Preview		Allows users to view a preview of a file for a Business Unit entity.
	Previous versions		Allows users to view, restore, and delete previous versions of files for a Business Unit entity. This feature requires the system to be configured to store two or more versions of files.
	Send as attachment		Allows users to send a file for a Business Unit entity through email as an attachment.
	Synchronize offline files		Allows users to select files from a Business Unit entity to be synchronized for offline viewing.
	Discussions		Allows users to view and participate in discussions about files for a Business Unit entity.
		Attach file to post	Allows users to attach a copy of a Business Unit entity's file being discussed to notification emails.
		Close or reopen thread	Allows users to close or reopen discussion threads about files for a Business Unit entity.
		Mark or unmark thread as sticky	Allows users to mark or unmark discussion threads about files for a Business Unit entity as sticky. Sticky threads appear at the top of the list of discussion threads for a file.
		Others posts	Allows users to view, add, edit, and delete other users' discussion posts about files for a Business Unit entity.
		Own Posts	Allows users to view, add, edit, and delete the user's own discussion posts about files for a Business Unit entity.
		Reply to posts	Allows users to reply to posted discussion threads about files for a Business Unit entity.
	Send to Engagement		Allows users to send files from a Business Unit entity to an Engagement binder in the user's local file room (LFR).
	Cancel others check out files		Allows users to cancel check-outs by other users.
	Task assignment		Allows users to assign tasks to other users.
Business Unit Profile			Allows users to view and edit Document related options on a Business Unit entity profile.
	Folder templates		Allows users to view and edit the folder template for a Business Unit entity.
	Custom folders		Allows users to view, add, edit, and delete custom folders for a Business Unit entity.
	Email encryption keys		Allows users to view and regenerate the encryption key for a Business Unit entity.
		Email key	Allows users to send a Business Unit entity's encryption key through email.

Staff

Parent Function	Child Function	Second-level Child Function	Permission Description
File Management			Allows users to work with files for a Staff entity.
	Add scanned file		Allows users to add scanned files to a Staff entity.
	Append to PDF		Allows users to append a PDF file to an existing file with the same name for a Staff entity during the upload process.
	Archive/Unarchive files		Allows users to view, edit, and delete archive files for a Staff entity and allows the user to move a firm entity's file to archive storage.
	Cancel check-out		Allows users to cancel check-out of a file which that user has checked out for a Staff entity. Changes to the file since it was checked out will be lost.
	Check in/out		Allows users to check out and check in files for a Staff entity. Users can only check in files that were checked out by that same user.
	Copy/move		Allows users to copy or move files for a Staff entity.
	Download		Allows users to download a read-only copy of a file for a Staff entity.
	Edit retention period		Allows users to modify the retention period of a file for a Staff entity.
	File groups		Allows users to add a file from a Staff entity to a file group.
	History		Allows users to view history of a file for a Staff entity.
	Properties		Allows users to view and edit the properties of a file for a Staff entity.
	File-level permissions		Allows users to add, edit, view, and delete file-level permissions for a file belonging to a Staff entity.
	Files		Allows users to add, direct edit, view, and delete files for a Staff entity.
	Lock/Unlock files		Allows users to lock and unlock files for a Staff entity. User can only unlock files which were locked by that same user.
	Overwrite duplicates		Allows users to overwrite files for a Staff entity when uploading a file with a duplicate name.
	Preview		Allows users to view a preview of a file for a Staff entity.
	Previous versions		Allows users to view, restore, and delete previous versions of files for a Staff entity. This feature requires the system to be configured to store two or more versions of files.
	Send as attachment		Allows users to send a file for a Staff entity through email as an attachment.
	Synchronize offline files		Allows users to select files from a Staff entity to be synchronized for offline viewing.
	Discussions		Allows users to view and participate in discussions about files for a Staff entity.
		Attach file to post	Allows users to attach a copy of a Staff entity's file being discussed to notification emails.
		Close or reopen thread	Allows users to close or reopen discussion threads about files for a Staff entity.
		Mark or unmark thread as sticky	Allows users to mark or unmark discussion threads about files for a Staff entity as sticky. Sticky threads appear at the top of the list of discussion threads for a file.
		Others posts	Allows users to view, add, edit, and delete other user's discussion posts about files for a Staff entity.
		Own posts	Allows users to view, add, edit, and delete the user's own discussion posts about files for a Staff entity.
		Reply to posts	Allows users to reply to posted discussion threads about files for a Staff entity.
	Send to Engagement		Allows users to send files from a Staff entity to an Engagement binder in the user's local file room (LFR).
	Cancel others checked out files		Allows users to cancel check-outs by other users.
	Task assignment		Allows users to assign tasks to other users.
Staff Profile			Allows users to view and edit Document related options on a Staff entity profile.
	Folder templates		Allows users to view and edit the folder template for a Staff entity.
	Custom folders		Allows users to view, add, edit, and delete custom folders for a Staff entity.
	Email encryption key		Allows users to view and regenerate the encryption key for a Staff entity.
		Email Own Key	Allows users to send their own Staff encryption key to themselves through email.
		Email Others Key	Allows users to send another Staff entity's encryption key to that staff through email.

Client

Parent Function	Child Function	Second-level Child Function	Permission Description
File Management			Allows users to work with files for a client entity.
	Add scanned file		Allows users to add scanned files to a client entity.
	Append to PDF		Allows users to append a PDF file to an existing file with the same name for a client entity during the upload process.
	Portal		Allows users to create and delete client portals, and view and edit configuration options for those portals.
		Approve or Reject Portal Files	Allows users to approve or reject files added to the portal by client end users. This permission is required to be a firm approver for a portal.
		Recall published files	Allows users to recall a published file from the portal and bring it back to Document. Changes made to the file while in the portal are lost. The file will no longer be available to client users of the portal.
		Publish	Allows users to publish a file from Document or other CCH Axcess applications to the portal.
		Unpublish	Allows users to unpublish a file from the portal and bring it back to Document. Changes made to the file while in the portal will be retained. The file will no longer be available to client users of the portal.
	Archive/Unarchive files		Allows users to view, edit, and delete archive files for a client entity and allows the user to move a firm entity's file to archive storage.
	Cancel check-out		Allows users to cancel check-out of a file which that user has checked out for a client entity. Changes made to the file since it was checked out will be lost.
	Check in/out		Allows users to check out and check in files for a client entity. User can only check in files that were checked out by that same user.
	Copy/move		Allows users to copy or move files for a client entity.
	Download		Allows users to download a read-only copy of a file for a client entity.
	Edit retention period		Allows users to modify the retention period of a file for a client entity.
	File groups		Allows users to add a file from a client entity to a file group.
	History		Allows users to view history of a file for a client entity.
	Properties		Allows users to view and edit the properties of a file for a client entity.
	File-level permissions		Allows users to add, edit, view, and delete file-level permissions for a file belonging to a client entity.
	Files		Allows users to add, direct edit, view, and delete files for a client entity.
	Lock/unlock files		Allows users to lock and unlock files for a client entity. User can only unlock files which were locked by that same user.
	Overwrite duplicates		Allows users to overwrite files for a client entity when uploading a file with a duplicate name.
	Preview		Allows users to view a preview of a file for a client entity.
	Previous versions		Allows users to view, restore, and delete previous versions of files for a client entity. This feature requires the system to be configured to store two or more versions of files.
	Send as attachment		Allows users to send a file for a client entity through email as an attachment.
	Synchronize offline files		Allows users to select files from a client entity to be synchronized for offline viewing.
	Discussions		Allows users to view and participate in discussions about files for a client entity.
		Attach file to post	Allows users to attach a copy of a client entity's file being discussed to notification emails.
		Close or reopen thread	Allows users to close or reopen discussion threads about files for a client entity.
		Mark or unmark thread as sticky	Allows users to mark or unmark discussion threads about files for a client entity as sticky. Sticky threads appear at the top of the list of discussion threads for a file.
		Others posts	Allows users to view, add, edit, and delete other users' discussion posts about files for a client entity.
		Own posts	Allows users to view, add, edit, and delete the user's own discussion posts about files for a client entity.
		Reply to posts	Allows users to reply to posted discussion threads about files for a client entity.
	Send to Engagement		Allows users to send files from a client entity to an Engagement binder in the user's local file room (LFR).
	Cancel others checked out files		Allows users to cancel check-outs by other users.
	Task assignment		Allows users to assign tasks to other users.
Client Profile			Allows users to view and edit Document related options on a client entity profile.
	Folder templates		Allows users to view and edit the folder template for a client entity.
	Custom folders		Allows users to view, add, edit, and delete custom folders for a client entity.
	Email encryption key		Allows users to view and regenerate the encryption key for a client entity.
		Email Key	Allows users to send a client's encryption key to the client through email.

Non-Client

Parent Function	Child Function	Second-level Child Function	Permission Description
File Management			Allows users to work with files for a non-client entity.
	Add scanned file		Allows users to add scanned files to a non-client entity.
	Append to PDF		Allows users to append a PDF file to an existing file with the same name for a non-client entity during the upload process.
	Archive/Unarchive files		Allows users to view, edit, and delete archive files for a non-client entity and allows the user to move a firm entity's file to archive storage.
	Cancel check-out		Allows users to cancel check-out of a file which that user has checked out for a non-client entity. Changes to the file since it was checked out will be lost.
	Check in/out		Allows users to check out and check in files for a non-client entity. User can only check in files that were checked out by that same user.
	Copy/move		Allows users to copy or move files for a non-client entity.
	Download		Allows users to download a read-only copy of a file for a non-client entity.
	Edit retention period		Allows users to modify the retention period of a file for a non-client entity.
	File groups		Allows users to add a file from a non-client entity to a file group.
	History		Allows users to view history of a file for a non-client entity.
	Properties		Allows users to view and edit the properties of a file for a non-client entity.
	File-level permissions		Allows users to add, edit, view, and delete file-level permissions for a file belonging to a non-client entity.
	Files		Allows users to add, direct edit, view, and delete files for a non-client entity.
	Lock/unlock files		Allows users to lock and unlock files for a non-client entity. User can only unlock files which were locked by that same user.
	Overwrite duplicates		Allows users to overwrite files for a non-client entity when uploading a file with a duplicate name.
	Preview		Allows users to view a preview of a file for a non-client entity.
	Previous versions		Allows users to view, restore, and delete previous versions of files for a non-client entity. This feature requires the system to be configured to store two or more versions of files.
	Send as attachment		Allows users to send a file for a non-client entity through email as an attachment.
	Send to Engagement		Allows users to send files from a non-client entity to an Engagement binder in the user's local file room (LFR).
	Synchronize offline files		Allows users to select files from a non-client entity to be synchronized for offline viewing.
	Discussions		Allows users to view and participate in discussions about files for a non-client entity.
		Attach file to post	Allows users to attach a copy of a non-client entity's file being discussed to notification emails.
		Close or reopen thread	Allows users to close or reopen discussion threads about files for a non-client entity.
		Mark or unmark thread as sticky	Allows users to mark or unmark discussion threads about files for a non-client entity as sticky. Sticky threads appear at the top of the list of discussion threads for a file.
		Others posts	Allows users to view, add, edit, and delete other users' discussion posts about files for a non-client entity.
		Own posts	Allows users to view, add, edit, and delete the user's own discussion posts about files for a non-client entity.
		Reply to posts	Allows users to reply to posted discussion threads about files for a non-client entity.
	Cancel others checked out files		Allows users to cancel check-outs by other users.
	Task assignment		Allows users to assign tasks to other users.
Non-client Profile			Allows users to view and edit Document related options on a non-client entity profile.
	Folder templates		Allows users to view and edit the folder template for a non-client entity.
	Custom folders		Allows users to view, add, edit, and delete custom folders for a non-client entity.
	Email encryption key		Allows users to view and regenerate the encryption key for a non-client entity.
		Email Key	Allows users to send a non-client entity's encryption key through email.

Dashboard

Parent Function	Child Function	Second-level Child Function	Permission Description
User Options			Allows users to view and edit user options related to Document.
Utilities			Allows users to view the Document utilities module on the Dashboard.
	Document Tools		Allows users to view the Document tools module on the Dashboard.
		File Export Utility	Grants the user the ability to view and edit the File Export Utility.
		File GUID Translator	Allows users to use the GUID Translator tool.
		Portal Conversion Utility	Grants the user the ability to view and edit the Portal Conversion Utility.

Portal

Administration Manager

Parent Function	Child Function	Second-level Child Function	Permission Description
Portal Lists			Allows users to view and edit portal lists.
	Portal Announcements		Allows users to add, edit, view, and delete portal announcements.

Dashboard

Parent Function	Child Function	Second-level Child Function	Parent Function
User Options			Allows users to view and edit portal-related user options.

Firm

Parent Function	Child Function	Second-level Child Function	Parent Function
Firm Setup			Allows users to view and edit portal-related options in Firm Setup. This right required to view the Portal plug-in to Firm Setup.
	Portal Settings and Defaults		Allows users to view and edit portal settings and default options.
		Audit Trail Settings	Allows users to set audit trail tracking settings
		Email Notifications	Allows users to view and edit portal email notifications.
		Folder Templates	Allows users to add, edit, view, and delete portal folder templates, which are applied when portals are created.
		Licensing Details	Allows users to view the licensing details for portals licensed by the firm.
		Storage Details	Allows users to view the storage details for portals licensed by the firm.

Client

Parent Function	Child Function	Second-level Child Function	Permission Description
Client Profile			Allows users to view and edit portal-related settings on the client profile. This permission is required to view the Portal plug-in to the client profile.
	Portal Management		Allows users to create, edit, view, and delete client portals.
		Client Area	Allows users to create or edit the client area for a client portal.
		Enable or Disable Portal	Allows users to activate or deactivate an existing client portal.
		Firm User Access List	Allows users to specify or change the list of firm users who have access to a portal.
		Folder Templates	Allows users to select a folder template to assign to a portal during portal creation. If no files have been added to an existing portal, this permission allows the user to change the assigned folder template for the portal.

Practice

Firm

Parent Function	Child Function	Permission Description
Firm setup-Practice options		Allows users to set firm policy options for Practice.
	Bill through date	Allows users to set the date through which Work-In-Process records will be including in billing.
	Time Entry Error conditions	Allows users to set firm policy on the desired behavior when certain conditions exist.
Lists-Practice items
	Custom invoice statuses	Allows users to define custom invoice statuses to be used in invoices.
	Billing fee agreements	Allows users to create master billing fee agreements that can then be assigned to clients.
	Finance charges/Banks	Allows users to create finance charge records that can be assigned to clients. Allows users to create bank accounts to be used in AR transactions.
	Reasons	Allows users to create the reasons to be used when the firm selects to require or make option a reason. Example: override a system-calculated bill rate in Time Capture.
	Lists other	Allows users to create and manage other Practice lists not listed specifically.
Close year end		Grants the user the ability to roll forward the firm's fiscal year end.
Lock reconciliation date
	Set reconciliation date	Grants the user the ability to set the firm's reconciliation date.
	Allow corrections before reconciliation date	Grants the user the ability to make corrections before the reconciliation date.
Recalculate WIP/Time		Grants the user the ability to recalculate WIP and released time amounts.
WIP transfers and corrections
	Correct WIP	Grants the user the ability to correct WIP transactions.
	Transfer WIP	Grants the user the ability to transfer WIP transactions to another client.
	Reassign WIP	Grants the user the ability to reassign WIP transactions to a project.
	Delete WIP	Grants the user the ability to delete WIP transactions.
	Recalculate rates	Grants the user the ability to recalculate WIP rates and change WIP amounts when correcting or transferring WIP.
Invoice Statement Template Manager		Grants the user the ability to create and edit templates with the Invoice Statement Template Manager

Client Manager

Parent Function	Child Function	Permission Description
Client billing groups		Gives the user permission to create and manage billing groups.
Mailing lists		Gives the user permission to manage mailing list names and recipients and export client and client contact addresses.
Client profile-Practice tabs		Gives the user permission to access and manage the date on the Practice tabs in the client profile.

Staff Manager

Parent Function	Child Function	Permission Description
Staff profile Practice tabs		Gives the user permission to access and manage the data on the Practice tabs in the staff profile.
	Time entry	Gives the user permission to access and manage the data on the time capture tab in staff profile, including bill rates.
	CPA/CPE tracking	Gives the user permission to access and manage CPE data on the CPE tab.
	Banked hours	Gives the user permission to access and manage the banked hours data on the banked hours tab.
	Hours and goals	Grants the user the ability to view hours and goals for the staff.
Productivity goals for staff assigned to me		Grants the user the ability to add, edit, view, or delete productivity goals for assigned staff.
Productivity goals for staff not assigned to me		Grants the user the ability to add, edit, view, or delete productivity goals for all staff.
Business hours for staff assigned to me		Grants the user the ability to add, edit, view, or delete the business hours for assigned staff.
Business hours for staff not assigned to me		Grants the user the ability to add, edit, view, or delete the business hours for all staff.

Time Capture

Parent Function	Child Function	Permission Description
Time transactions for self		Gives the user permission to enter their own time transactions regardless of whether they have permission to edit a project.
Time transactions for others		Gives the user permission to enter their own time transactions and also allows them to change the staff and enter time transactions for any staff they have access to.
Expense transactions for self		Gives the user permission to enter their own expense transactions.
Expense transactions for others		Gives the user permission to enter their own expense transactions and also allows them to change the staff and enter expense transactions for any staff they have access to.
Review transactions for staff assigned to self		Gives the user permission to review transactions for all staff where the user is the assigned reviewer. The transactions are ready for review when they have been released. The review process changes the status to reviewed making them ready for post.
Review transactions for staff not assigned to me		Gives the user permission to review transactions for all staff where the user is not the assigned reviewer. The user selects another reviewer on the review view.
Modify released transactions		Gives the user permission to edit time and expense transactions that have been released without changing the status back to unreleased.
Post transactions for self after review		Gives the user permission to post their own time and expense transactions after they have been reviewed by the assigned reviewer.
Post transactions for self without review (Real time post)		Gives the user permission to post their own time and expense transactions without requiring a review.
Batch Post		Gives the user permission to post time and expense transactions for all staff (that the user has access to) except those that are dated prior to the lock reconciliation date.
	Override lock reconciliation date and post to prior period	Gives the user permission to post time and expense transactions that are dated prior to the lock reconciliation date.
Transaction cost		Gives the user permission to include the transaction cost column in the transaction grid and view the amount.
Transaction rate and amount		Gives the user permission to view and edit the system-calculated transaction rate and amount.
Banked hours		Gives the user permission to accrue and use banked hours. The user can enter banked hours during transaction entry and also access the banked hours page in the staff profile.
Batch expenses		Gives the user permission to create batch expenses - this option creates a duplicate expense transaction for multiple clients at one time using a wizard.
Import transactions		Gives the user permission to import time and expense transactions using a wizard.
Negative transactions		Gives the user permission to enter a time or expense transaction with negative hours, negative rate, or negative amount. Tip: We recommend correcting WIP instead of using negative transactions.
Enter Nonbillable work for Billable Client		Gives the user permission to use a service code with the billable option set to Nonbillable when the client is billable. The transaction can be saved to WIP but it will not be included in the Billing views or included in the billable amounts in Billing. The nonbillable WIP will be included in Client Dashboard.

Billing

Parent Function	Child Function	Permission Description
Override firm bill through date		Gives the user permission to override the bill through date set in firm for their billing session.
Bill clients		Gives the user permission to launch billing and bill clients.
Review invoices		Allows users to see and review invoices for clients
Print final invoices		Allows users to select invoices and print final. This prints the invoice for delivery to the client and changes the status to final.
Reprint final invoices		Allows users to reprint invoices that have already been final printed.
Post invoices		Allows users to post invoices in final status. Special permission is required if the date is future or prior to the lock reconciliation date.
	Post to future period	Allows users to post invoices that are future dated, but within the current fiscal year.
	Post invoices to future fiscal year	Allows users to post invoices to a period that is in the next fiscal year for the firm.
	Override lock reconciliation date and post to prior period	Allows users to post invoices that are dated prior to the lock reconciliation date, but not in a prior year.
	Override lock reconciliation date and post to prior year	Allows users to post invoices that are dated in a prior year.
Reverse invoices		Allows users to reverse invoices, which restores the WIP.

Accounts Receivable

Parent Function	Child Function	Permission Description
Accounts receivable transactions
Post-AR trans, misc charges, fin charges and handling fees
	Post to future period	Allows users to post AR transactions that are future dated, but within the current fiscal year.
	Post invoices to future fiscal year	Allows users to post AR transactions to a period that is in the next fiscal year for the firm.
	Override lock reconciliation date and post to prior period	Allows users to post AR transactions that are dated prior to the lock reconciliation date, but not in a prior year.
	Override lock reconciliation date and post to prior year	Allows users to post AR transactions that are dated in a prior year.
Correct AR transactions
	Void/Undo Void transactions	Allows users to void AR transactions or to undo previous voids.
	Void/Undo Void finance charges	Allows users to void finance charges or to undo previous voids of finance charges.
Calculate finance charges
	Override finance charge rate	Allows users to change the finance charge rate that is typically used for the client.
	Post Finance Charges	Allows users to post the finance charges.
Print AR statements		Allows users to print AR statements.

Reports

All modules

Parent Function	Child Function	Second-level Child Function	Third-level Child Function	Permission Description
Shared Library
	Shared Views			Grants the user the ability to add, edit, view, or delete shared views.
Firm Library
	Custom			Grants the user the ability to add, edit, view, or delete custom reports.
	Standard			Grants the user the ability to access standard reports.
		Firm
			Client Profile Report	Grants the user the ability to view and run the Client Profile report that shows the client ID, engagement, name, phone, extension, fax, and extension.
			Client Notes Report	Grants the user the ability to view and run the Client Notes report that includes client note information.
			Contact List	Grants the user the ability to view and run the Contact List report that includes either condensed or full contact information.
			Notifications Report	Grants the user the ability to view and run the Notifications report that includes notification log entry details.
			Staff List	Grants the user the ability to view and run the Staff List report that shows the following information: staff ID, staff name, login name, and status.
		Practice
			Accounts Receivable Aging	Grants the user the ability to view and run the Accounts Receivable Aging report that determines how much billed receivables have accumulated by client per aging bucket, allowing you to see the client's open and historic (unpaid) accounts receivable.
			Accounts Receivable Balance Listing	Grants the user the ability to view and run the Accounts Receivable Balance Listing report that assists in reconciling other reports that have invoice/deposit dates and accounting period dates in different accounting periods.
			Accounts Receivable Collections	Grants the user the ability to view and run the Accounts Receivable Collections report that lists the outstanding invoices as part of the final print ending date entered.
			Accounts Receivable Detail Aging	Grants the user the ability to view and run the Accounts Receivable Detail Aging report that includes open (unpaid) or unapplied (credits/debits) accounts receivable.
			Accounts Receivable Payments and Credits	Grants the user the ability to view and run the accounts receivable payments and credits report that shows posted and/or unposted payments and credits for a selected date range.
			Accounts Receivable Reconciliation	Grants the user the ability to view and run the accounts receivable reconciliation report that lists all AR activity for a given period.
			Accounts Receivable Register	Grants the user the ability to view and run the Accounts Receivable Register report that catches errors before posting AR and provides a record of the transactions posted.
			Accounts Receivable Void and Correction	Grants the user the ability to view and run the Accounts Receivable Void and Correction report that provides an audit trail of AR transactions that have been voided, corrected, or redistributed.
			AR Sales Tax Report	Grants the user the ability to view and run the Accounts Receivable Sales Tax report that includes sales tax amounts by client and sales tax authority associated with billing and/or AR transactions.
			Banked Hours	Grants the user the ability to view and run the Banked Hours report that tracks the total banked and used hours and associated totals by staff.
			Billed Fee Analysis	Grants the user the ability to view and run the Billed Fee Analysis report that summarizes data to compare period-to-date and year-to-date summary statistics for fees and expenses.
			Billing Register	Grants the user the ability to view and run the Billing Register report that shows invoice transactions prior to posting, allowing you to review and correct invoices prior to posting.
			Billing Report	Grants the user the ability to view and run the Billing report that shows posted and/or un-posted invoices.
			Billing Worksheet by Project	Grants the user the ability to view and run the Billing Worksheet by Project report that indicates which client WIP items to bill and the billing adjustments that need to be made.
			Billing Worksheet by Service Code	Grants the user the ability to view and run the Billing Worksheet by Service Code report that indicates which client WIP items to bill and the billing adjustments that need to be made.
			Client Billing Realization	Grants the user the ability to view and run the Client Billing Realization report that includes the WIP profitability and an analysis of historical billing activity in the firm.
			Client Ledger	Grants the user the ability to view and run the Client Ledger report that shows the detail WIP and AR transactions by client.
			Client Production	Grants the user the ability to view and run the Client Production report that shows production and billing totals for each client.
			Client Profit	Grants the user the ability to view and run the Client Profit report that provides an overview of profitability, showing production costs, expenses, invoiced amounts, and overall profit.
			Cash Received by Staff	Grants the user the ability to view and run the Cash Received by Staff report that shows payments broken down to each staff on the WIP that the payment is applied to.
			Collection Letters	Grants the user the ability to view and run the Collections Letters report that shows clients with accounts that are past due.
			Daily Staff Posted Hours	Grants the user the ability to view and run the Daily Staff Posted Hours report that shows posted staff hours per day and totals for a period of time.
			Deposit Report	Grants the user the ability to view and run the Deposit report that prints a deposit report for only cash and check AR transactions for a specific bank and deposit date.
			Finance Charge Register	Grants the user the ability to view and run the Finance Charge Register report that lists finance charges, allowing you to save a copy of finance charges calculated during or prior to posting.
			Firm Management	Grants the user the ability to view and run the Firm Management report that shows the firm’s productivity, summarizing current PTD/RTD and prior PTD/RTD WIP and AR activity.
			General Ledger Reconciliation	Grants the user the ability to view and run the General Ledger Reconciliation report that summarizes all activity for the firm, giving management a view of all activity for the firm on one sheet.
			High Client Billing	Grants the user the ability to view and run the High Client Billing report that lists the highest billing or cash receipts clients.
			Intracompany Cost and Profit	Grants the user the ability to view and run the Intracompany Cost and Profit report.
			Invoice Number Status	Grants the user the ability to view and run the Invoice Number Status report that shows all invoices by number order to track the status of each invoice number.
			Invoice Paragraphs List	Grants the user the ability to view and run the Invoice Paragraphs List report that lists billing paragraphs in the Invoice Paragraph library.
			Invoice Realization with Reason Code	Grants the user the ability to view and run the Realization by Reason Code report that tracks realization by reason code.
			Managed Revenue	Grants the user the ability to view and run the Managed Revenue report that shows the percentage of billed WIP or expected percentage of unbilled WIP and revenue generated or expected for the client.
			Monthly Activity	Grants the user the ability to view and run the Monthly Activity report that ages the A/R and WIP beginning and ending balances.
			Monthly Comparison	Grants the user the ability to view and run the Monthly Comparison report that compares billing, production, and payment amounts by client for current and prior fiscal year.
			PTD Billing	Grants the user the ability to view and run the PTD Billing report that shows period-to-date billed WIP.
			PTD RTD Production	Grants the user the ability to view and run the PTD/RTD Production report that shows period-to-date and range-to-date time and expenses.
			PTD RTD Staff Bill NonBill	Grants the user the ability to view and run the PTD/RTD Staff Bill Nonbill report that includes PTD and RTD (range-to-date) billable and nonbillable hours, and ratio to total hours by staff.
			PTD RTD Staff Billing	Grants the user the ability to view and run the PTD/RTD Staff Billing report that includes PTD and RTD staff production.
			PTD RTD WIP AR Reconciliation	Grants the user the ability to view and run the PTD/RTD WIP AR Reconciliation report.
			PTD Staff Billing	Grants the user the ability to view and run the PTD Staff Billing report that compares period-to-date summary staff realization statistics.
			PTD Staff Service	Grants the user the ability to view and run the PTD Staff Service report that shows billable and nonbillable hours and amounts by staff and service code and/or client.
			Service Code List	Grants the user the ability to view and run the Service Code List report that lists the service codes properties and attributes.
			Staff CPE	Grants the user the ability to view and run the Staff CPE report that tracks staff CPE information and is used when filling out certification papers.
			Staff Management	Grants the user the ability to view and run the Staff Management report that measures staff realization and productivity performance during key review periods and at year end.
			Staff Monthly Comparison	Grants the user the ability to view and run the Staff Monthly Comparison report that compares staff current and prior year hours or amounts by month.
			Staff Monthly Production	Grants the user the ability to view and run the Staff Monthly Production report that compares staff current and prior year RTD production hours or amounts by month.
			Staff Nonbillable	Grants the user the ability to view and run the Staff Non-billable report that includes nonbillable hours by staff and service code.
			Staff Posted Summary	Grants the user the ability to view and run the Staff Posted Summary report.
			Staff Production	Grants the user the ability to view and run the Staff Production report that provides a summary of staff production, adjustments, and total production for a given period.
			Staff Productivity	Grants the user the ability to view and run the Staff Productivity report that compares billable and nonbillable hours for each staff.
			Staff Productivity Budget	Grants the user the ability to view and run the Staff Productivity Budget report that compares staff budget to actual hours and realization.
			Staff Realization and Productivity	Grants the user the ability to view and run the Staff Realization and Productivity report that compares realization and productivity by staff.
			Staff Realization by Allocation	Grants the user the ability to view and run the Staff Realization by Allocation report that shows staff billing amounts.
			Staff Time Analysis	Grants the user the ability to view and run the Staff Time Analysis report that shows time staff spends on each client, project, and service code.
			Staff WIP Productivity	Grants the user the ability to view and run the Staff Productivity report that shows billable WIP for staff.
			Three Year Realization	Grants the user the ability to view and run the Three Year Realization report that shows trends in client production, billings, and accounts receivable.
			Time Analysis	Grants the user the ability to view and run the Time Analysis report that summarizes WIP activity.
			Time and Expense	Grants the user the ability to view and run the Time and Expense report that shows time and expense entries.
			Time sheet	Grants the user the ability to view and run the Timesheet report that includes staff billable hours or nonbillable allowances as well as banked/used hours based on a set threshold.
			WIP Activity Net of Retainers	Grants the user the ability to view and run the WIP Activity Net of Retainers report that shows WIP activity totals for the period specified by staff.
			WIP AR Aging	Grants the user the ability to view and run the WIP/AR Aging report that shows accumulated WIP and AR in up to seven user-defined aging intervals.
			WIP AR Reconciliation	Grants the user the ability to view and run the WIP/AR Reconciliation report that provides an overview of account activity for clients with beginning and ending WIP and AR balances for a specified date range.
			WIP AR Summary	Grants the user the ability to view and run the WIP/AR Summary report that summarizes outstanding WIP to determine the clients needing to be billed.
			WIP Corrections and Deletions	Grants the user the ability to view and run the Corrections report that provides an audit trail of corrected transactions.
			WIP Detail Ledger	Grants the user the ability to view and run the WIP Detail Ledger report that includes unbilled detail WIP.
			General Ledger Export	Grants the user the ability to view and run the General Ledger Export report.
			Rate Correction Register	Grants the user the ability to view and run the Rate Correction Register report that shows the modified or recalculated time transactions and WIP.
			General Ledger	Grants the user the ability to view and run the General Ledger report that Shows the amounts for all client’s activities for the period entered.
		Tax
			Authorizations by Product	Grants the user the ability to view and run the Authorizations by Product report that shows the number of authorizations processed for each authorization type within a specified time period.
			Authorized Returns	Grants the user the ability to view and run the Authorizations report that lists the clients for which authorizations have been applied.
			Detailed Returns Processed	Grants the user the ability to view and run the Detailed Returns Processed report that shows the number of returns that have been calculated by organizational unit for a maximum of 366 days.
			Returns Processed	Grants the user the ability to view and run the Returns Processed report that shows the number of all return entities that have been calculated in a tax year for each product and taxing authority.
		Workstream
			Project Budget to Actual	Grants the user the ability to view and run the Project Budget to Actual report that shows budgeted versus actual project and workstep hours and amounts.
			Project Estimates Worksheet	Grants the user the ability to view and run the Project Estimates Worksheet report that provides details regarding project estimate dates and hours.
			Project File Holder History	Grants the user the ability to view and run the Project File Holder History report that provides a history of project file holders.
			Project Forms	Grants the user the ability to view and run the Project Forms report that lists projects and their associated forms.
			Project Status History	Grants the user the ability to view and run the Project Status History report that provides the history of project status changes.
			Project Summary	Grants the user the ability to view and run the Project Summary report that summarizes current projects.
			WIP Assigned to Projects	Grants the user the ability to view and run the WIP Assigned to Projects report that shows WIP project assignments for selected clients by project due date range, including billed, nonbilled, assigned, and unassigned WIP.
			Staff Project Budget To Actual	Grants the user the ability to view and run the Staff Project Budget to Actual report that shows budgeted versus actual project hours and amounts for staff.
			Staff Workstep Assignments	Grants the user the ability to view and run the Staff Workstep Assignments report that lists worksteps assigned to staff.
			Staff Workstep Estimates Worksheet	Grants the user the ability to view and run the Staff Workstep Estimates Worksheet report that provides details regarding staff project estimate dates and hours.
			WIP Project Corrections	Grants the user the ability to view and run the WIP Project Corrections report.
Labels	Print Labels			Grants the user the ability to set up and print varying label types, such as client, contact, and staff labels.
Data Axcess	Request and Download			Grants the user the ability to download information using the Data Axcess APIs or the Data Axcess Utility. Normally this populates a data warehouse managed by the firm for custom reports.

Tax

All modules

Module	Parent Function	Child Function	Permission Description
Tax Preparation
	Tax templates		Grants the user the ability to add, edit, or delete return templates.
	Tax returns		Grants the user the ability to add, edit, view, or delete tax returns.
		Add new client when creating new return	Grants the user the ability to add a client on the fly when creating a tax return.
	Recover returns		Grants the user the ability to restore returns from recovery files.
	Backup Returns		Grants the user the ability to back up returns.
	Restore Returns		Grants the user the ability to restore returns from backup files.
	Remove lock on return in use		Grants the user the ability to remove in-use locks on returns.
	Tax return configuration sets		Grants the user the ability to add, edit, view, or delete tax return configuration sets.
	Shared Tax view library		Grants the user the ability to add, edit, view, or delete shared tax views.
	Return transfer		Grants the user the ability to export tax data so it can be imported to pre-migration versions of Tax.
	EFS status - Upload and hold return for release		Grants the user the ability to upload returns to the Electronic Filing Status System and hold the returns for release to taxing authorities.
	EFS status - Upload and release return to taxing authority		Grants the user the ability to upload returns to the Electronic Filing Status System and release the returns to taxing authorities.
	Reset return password		Grants the user the ability to reset and assign new passwords to secured returns.
	Remove lock to prevent changes		Grants the user the ability to unlock and enable changes to returns.
	Delete all overrides		Grants the user the ability to clear all overrides in a tax return in one transaction.
Tax Correspondence Manager
	Access Correspondence Libraries		Grants the user the ability to edit and view Correspondence Libraries.
	Modify letters for return		Grants the user the ability to edit letters in returns.
Print
	Publish to document management systems		Grants the user the ability to send tax return files to document management systems.
	Organizer print sets		Grants the user the ability to add, edit, view, or delete Organizer print sets.
	Firm level return print sets		Grants the user the ability to add, edit, view, or delete firm level print sets.
Batch Manager
	Batch jobs submitted by others		Grants the user the ability to edit batch jobs submitted by other users.
	Access Organizer letter libraries		Grants the user the ability to edit and view Organizer letter libraries.
	Purge Notes		Grants the user the ability to batch purge notes from tax returns.
Staff
	Add signer		Grants the user the ability to edit and view signers.
Lists
	Tax lists		Grants the user the ability to add, edit, view, or delete return groups and signer locations.
Client
	Return group		Grants the user the ability to edit or view the return group field on the client profile.
User Utilities
	View password protected returns		Grants the user the ability to view the password for protected returns.
	Return importer		Grants the user the ability to import returns.
Firm Setup
	Tax options		Grants the user the ability to edit firm level Tax options.
Electronic Filing
	Access Electronic Filing Status		Allows users to log into the Electronic Filing Status System.
		Exported returns	Allows users to export returns from Tax to the Electronic Filing Status System.
	Release returns to taxing authority		Allows users to transmit returns from the Electronic Filing Status System to a taxing authority.
	Delete returns and change status to paper filed		Allows users to delete a return and change the status of a previously filed return with a status of Transmitted or Ready to Transmit to Paper Filed.
	Stop returns from being transmitted		Allows users to stop a previously filed return with a status of Transmitted or Ready to Transmit from being released to the taxing authority.
DataScan
	Access DataScan		Allows users the ability to create a new scan and access DataScan's main page.
	Scan password protected returns		Allows users to select to include password protected returns in scan results.
	Scans created by other users		Allows users to view, submit, edit, and delete scans created by other users.
		Access scan results of other users	Allows users to view and delete other users' scan results. Important: If a user is granted this permission, the user will be able to view other users' scan results, even if those results contain information the user does not have administrative rights to view.
	Scan Client Profile		Allows users to scan profiles within Client Manager. Note: Scan results will include only those clients for which the user has at least view-level permission.
My1040Data
	Access My1040Data Toolkit		Allows users to open the My1040Data Toolkit website when launched from Dashboard.
		Configure firm information	Allows users to enter firm information on the My1040Data Toolkit site Configure Firm pages

Workstream 

All modules

Module	Parent Function	Child Function	Permission Description
Manage Setup
	All Project firm lists		Grants the user the ability to add, edit, or delete firm lists and pools for Workstream.
	Project type		Grants the user the ability to add, edit, or delete project types.
	Project template		Grants the user the ability to add, edit, or delete project templates.
Workflow Management
	Project
		Edit actual start date	Grants the user the ability to edit the actual start date of the project. If the user updates a transaction in CCH Axcess Practice that impacts the actual start date, they are not required to have this permission.
		Enter manual adjustments to the budget summary	Grants the user the ability to enter manual adjustments to the budget summary of the project.
		Close project	Grants the user the ability to close a project.
		Reopen a project	Grants the user the ability to reopen a project.
		Edit closed projects	Grants the user the ability to edit closed projects.
		View project workstep	Grants the user the ability to view the worksteps on a project.
		Override form due date	Grants the user the ability to edit the form due dates for a project.
	Works from the pool		Grants the user the ability to use the working from the pool feature, which allows the user to set the file holder of the project.
	Roll forward		Grants the user the ability to roll projects forward.
	Project workstep		Grants the user the ability to work with project worksteps. If the user updates a transaction in CCH Axcess Practice that impacts the actual start date or WIP, they are not required to have this permission.
		Mark others workstep complete	Grants the user the ability to mark worksteps complete even if the workstep is assigned to another staff person.
		Reopen a workstep	Grants the user the ability to reopen a closed workstep.
	Manage own worksteps		Grants the user the ability to edit a workstep that he is assigned to. This is granted to all users by default.
	Project financials		Grants the user the ability to see budget or actual amounts on projects and/or worksteps.
	Batch link		Grants the user the ability to use the Batch Link utility, which allows you to link tax returns to projects in a batch.
	Utilities		Grants the user the ability to reorder worksteps.