Security Group Functional Rights Explained

Security permissions can be defined by roles, which allow staff to have the appropriate rights only while acting in a specific role associated with a work object.

Security permissions can also be defined by security groups to which the staff is assigned, which allow staff to have rights to the work object regardless of their role.

Note: If all child functions within a parent are set to the same value (Undefined, Grant, or Never Allow), the parent function is automatically changed to that same selection.

The functional right assignment can be one of the following:

• Undefined. Access is not yet assigned.
• Granted. Access is allowed.
• Never Allowed. Restricts all access, including any inherited access. This keeps the users assigned to the security group from performing the function even when the same users are members of another security group or assigned a role that has been granted the same permission.

Administration Manager

Firm

Function	Permission Description
Firm setup	Grants the user the ability to add, edit or delete firm information.
Lists	Grants the user the ability to add, edit or delete list information.
Active Directory Integration	Grants the user the ability to run the Active Directory Setup wizard, add and/or edit staff during a manual or scheduled import and access any areas of the Active Directory ribbon options in the Staff main window.

Security

Parent Function	Child Function	Second-level Child Function	Third-level Child Function	Permission Description
Role profile				Grants the user the ability to add, edit, view, or delete roles. A firm will create roles when staff should act in roles while working on projects for clients or working on specific work objects (ex. tax returns or binders) for clients.
Security group profile				Grants the user the ability to add, edit, view, or delete security groups. Security groups are used to assign functional rights to selected areas for one or more users of the firm.
	General			Grants the user the ability to add, edit, view or delete information on the General page of the security group profile.
	Functional rights			Grants the user the ability to assign functional rights to the security group profile.
	Assigned staff			Grants the user the ability to assign staff to the security group profile. Any staff secured in a staff access group that the user does not have access to edit will not be available to add for assignment.
Client access group profile				Grants the user the ability to add, edit, view, or delete client access groups. Client access groups secure selected clients from all staff who are not assigned to the group.
	General			Grants the user the ability to add, edit, view or delete information on the General page of the client access group profile.
	Secured clients			Grants users the ability to select the clients that are to be secured in the client access group.
	Staff with access			Grants the user the ability to assign staff to the client access group. Any staff secured in a staff access group that the user does not have access to edit will not be available to add for assignment.
Staff access group profile				Grants the user the ability to add, edit, view, or delete staff access groups. Staff access groups secure selected staff from all staff who are not assigned to the group.
	General			Grants the user the ability to add or edit information on the General page of the staff access group profile.
	Secured staff			Grants the user the ability to add or edit information on the Functional Rights page of the staff access group profile.
	Staff with access			Grants the user the ability to assign staff who will receive access to work with the secured staff for the specified organizational unit.

Staff Manager

Parent Function	Child Function	Second-level Child Function	Third-level Child Function	Permission Description
Staff profile				Grants users the ability to add, edit, view, or delete staff profiles.
	General			Grants users the ability to add or edit information on the General tab of a staff profile.
	Address Phone			Grants users the ability to add, edit, or view Address/Phone information on the Address/Phone tab of a staff profile.
	Administrative
		Payroll information
			Federal tax ID	Grants users the ability to add, edit, or view the Federal Tax ID field on the Administrative tab of a staff profile.
			Employee Number	Grants users the ability to add, edit, or view the Employee Number field on the Administrative tab of a staff profile.
			Pay type	Grants users the ability to add, edit, or view the Pay type field on the Administrative tab of a staff profile.
			Hire date	Grants users the ability to add, edit, or view the Hire date field on the Administrative tab of a staff profile.
			Hire salary	Grants users the ability to add, edit, or view the Hire salary field on the Administrative tab of a staff profile.
			Review date	Grants users the ability to add, edit, or view the Review date field on the Administrative tab of a staff profile.
			Current salary	Grants users the ability to add, edit, or view the Current salary field on the Administrative tab of a staff profile.
	Assignments
		Teams		Grants users the ability to view team assignments for a staff profile.
		Security groups		Grants users the ability to view security group assignments for a staff profile.
		Client access		Grants users the ability to view client access group assignments for a staff profile.
		Staff access		Grants users the ability to view staff access group assignments for a staff profile.
		Licenses Product Access		Grants users the ability to view licensing and product access assignments for a staff profile.
	Security related to			Grants users the ability to view security assignments related to organizational units, clients, staff, and projects from within the staff profile.
License/Product Access				Grants users the ability to access the assignment page and assign licenses and product access to staff of the firm.
Reset login password				Grants users the ability to reset the passwords for staff they have permission to view in the staff grid.
Staff template				Grants users the ability to add, edit, view, or delete staff templates.
Team profile				Grants users the ability to add, edit, view, or delete staff teams.
Staff Notes
	Own Notes			Grants users the ability to add, edit, view, or delete their own staff notes.
	Others' shared notes			Grants users the ability to edit, view, or delete shared notes for other staff.
	Others' private notes			Grants users the ability to edit, view, or delete private notes for other staff.

Client Manager

Parent Function	Child Function	Second-level Child Function	Third-level Child Function	Permission Description
Client profile				Allows users to add, edit, view, or delete client profiles. Users can also search and filter clients within Client Manager views.
	Approved client			Allows users to add, edit, view, or delete approved clients.
	Prospect client			Allows users to add, edit, view, or delete prospect clients.
	Provisional client			Allows users to add, edit, view, or delete provisional clients.
	General			Allows users to edit, view, or delete information in the General section of the client profile.
		Client type		Allows users to edit or view the client type field of the client profile.
		General Information		Allows users to edit or view the General Information fields of the client profile.
			Client ID	Allows users to edit the Client ID field of the client profile.
	Associates			Allows users to edit, view, or delete associates of clients.
	Assignments			Allows users to edit assignments of the client from the client profile.
		Client groups		Allows users to view client group assignments for the client profile.
		Client access groups		Allows users to view or edit client access group assignments for the client profile.
	Address Phone			Allows users to edit or view address and phone information in the client profile.
	Administrative			Allows users to edit and view administrative information in the client profile.
		Entity profile information		Allows users to edit or view entity profile information in the client profile.
		Responsible staff		Allows users to edit or view responsible staff information in the client profile.
	Contacts			Allows users to edit, view, or delete contacts for the clients.
Client Notes
	Own notes			Allows users to add, edit, view, or delete their own client notes.
	Others' shared notes			Allows users to edit, view, or delete other users' shared notes.
	Others' private notes			Allows users to edit, view, or delete other's shared private notes. Note: The Private note option for both new and existing private notes is disabled due to the limited use of this setting. If your firm wants to keep private note contents, re-create them before September 1, 2017. All client private notes will be deleted in a future release. To find your private notes, run the Client Notes Report in Reports Manager using the Private field as a filter.
Client dashboard				Allows users to search for clients when working with the Client Dashboard on their desktop or mobile device.
Client associates profile				Allows users to add, edit, view, or delete client associate profiles.
Client group profile				Allows users to add, edit, view, or delete client group profiles.

Configure Notifications

Parent Function	Permission Description
Configure notifications	Allows users to view and edit notifications.

Client Collaboration

Dashboard

Function	Permission Description
Launch Client Collaboration	Allows users to access the Client Collaboration application. Users without this permission will not see the Client Collaboration link on the Dashboard, nor are they able to log in to the web site.

Request Dashboard

Function	Permission Description
Client Requests	Allows users to add, edit, view, and delete client requests on the Client Collaboration dashboard.
IND Organizer and Tax Documents	Allows users to download the organizer and tax documents for a particular request on the requests dashboard.
Document Locker	Allows users to upload, download, move, apply tags to, view, and delete documents in a Document Locker.

Library

Parent Function	Permission Description
IND Templates	Allows users to add, edit, view, and delete the various templates for 1040 returns.

Administration

Parent Function	Permission Description
Administration	Allows users to view and edit the firm's settings in the Administration section of Client Collaboration.

Document

Document Central

Parent Function	Child Function	Second-level Child Function	Permission Description
File Groups			Allows users to create, view, edit, and delete file groups. Additional permissions at the entity-level are required to add files to the file groups.
Recycle Bin			Allows users to view files in the recycle bin.
	Permanently Delete Files		Allows users to permanently delete files from the recycle bin.
	Restore		Allows users to restore files from the recycle bin back to their original location.
	File deletion log		Allows users to access the file deletion log
	Recycle bin options		Allows users to modify the recycle bin purge options
Reports
	Send as attachment		Allows users to send a Document report through email as an attachment.
	Export		Allows users to export a Document report to Excel® or PDF format.
	Print		Allows users to print a Document report.

Administration Manager

Parent Function	Child Function	Permission Description
Document Lists		Allows users to view and edit Document lists.
	Disallowed file types	Allows users to add, edit, view, and delete entries on the Disallowed file types list.
	Document Type	Allows users to add, edit, view, and delete entries on the Document types list.
	Years	Allows users to add, edit, view, and delete entries on the Years list.
	Non-client types	Allows users to add, edit, view, and delete entries on the Non-client types list.
	Non-client ID numbers	Allows users to add, edit, view, and delete entries on the Non-client ID numbers list.

Firm

Parent Function	Child Function	Second-level Child Function	Third-level Child Function	Permission Description
File Management				Allows users to work with files for the Firm entity.
	Add scanned file			Allows users to add scanned files to the Firm entity.
	Append to PDF			Allows users to append a PDF file to an existing file with the same name for the firm entity during the upload process.
	Archive/Unarchive files			Allows users to view, edit, and delete archive files for the firm entity and allows the user to move a firm entity's file to archive storage.
	Cancel check-out			Allows users to cancel check-out of a file which that user has checked out for the firm entity. Changes to the file since it was checked out will be lost.
	Check in/out			Allows users to check out and check in files for the firm entity. User can only check in files that were checked out by that same user.
	Copy/move			Allows users to copy or move files for the firm entity.
	Download			Allows users to download a read-only copy of a file for the firm entity.
	Edit retention period			Allows users to modify the retention period of a file for the firm entity.
	File groups			Allows users to add a file from the firm entity to a file group.
	History			Allows users to view history of a file for the firm entity.
	Properties			Allows users to view and edit the properties of a file for the firm entity.
	File-level permissions			Allows users to add, edit, view, and delete file-level permissions for a file belonging to the firm entity.
	Files			Allows users to add, direct edit, view, and delete files for the firm entity.
	Lock/unlock files			Allows users to lock and unlock files for the firm entity. User can only unlock files which were locked by that same user.
	Overwrite duplicates			Allows users to overwrite files for the firm entity when uploading a file with a duplicate name.
	Preview			Allows users to view a preview of a file for the firm entity.
	Previous versions			Allows users to view, restore, and delete previous versions of files for the firm entity. This feature requires the system to be configured to store two or more versions of files.
	Send as attachment			Allows users to send a file for the firm entity through email as an attachment.
	Synchronize offline files			Allows users to select files from the firm entity to be synchronized for offline viewing.
	Send to Engagement			Allows users to send files from the firm entity to an Engagement binder in the user's local file room (LFR).
	Cancel others checked out files			Allows users to cancel check-outs by other users.
	Task assignment			Allows users to assign tasks to other users.
Discussions				Allows users to view and participate in discussions about files for the firm entity.
	Own posts			Allows users to view, add, edit, and delete the user's own discussion posts about files for the firm entity.
	Others' posts			Allows users to view, add, edit, and delete other user's discussion posts about files for the firm entity.
	Reply to posts			Allows users to reply to posted discussion threads about files for the firm entity.
	Attach file to post			Allows users to attach a copy of the firm entity's file being discussed to notification emails.
	Close/reopen thread			Allows users to close or reopen discussion threads about files for the firm entity.
	Mark/unmark thread as sticky			Allows users to mark or unmark discussion threads about files for the firm entity as sticky. Sticky threads appear at the top of the list of discussion threads for a file.
Firm profile				Allows users to view and edit Document related options on the Firm Entity profile.
	Custom folders			Allows users to view, add, edit, and delete custom folders for the firm entity.
	Email encryption keys			Allows users to view and regenerate the encryption key for the firm entity.
		Email Key		Allows users to send the firm entity's encryption key through email.
	Folder templates			Allows users to view and edit the folder template for the firm entity.
Firm Setup				Allows users to view and edit document related options in Firm Setup. It is required to view the Document plug-in to Firm Setup.
	Audit Trail Reports			Allows users to view and delete audit trail reports.
		File Activity Report		Allows users to view and delete File Activity audit trail reports.
			Export	Allows users to export the File Activity audit trail report to Excel® or PDF format.
			Print	Allows users to print the File Activity audit trail report.
			Send as attachment	Allows users to send the File Activity audit trail report through email as an attachment.
		User Activity Report		Allows users to view and delete User Activity audit trail reports.
			Export	Allows users to export the User Activity audit trail report to Excel® or PDF format.
			Print	Allows users to print the User Activity audit trail report.
			Send as attachment	Allows users to send the User Activity audit trail report through email as an attachment.
	Audit Trail Settings			Allows users to view and edit audit trail settings.
		File Activity Report		Allows users to view and edit settings for the File Activity audit trail report.
			Archive	Allows users to archive File Activity audit trail reports. Archiving will save the report and allow the report to be sent through email as an attachment.
			Purge	Allows users to purge File Activity audit trail reports from the system.
		User Activity Report		Allows users to view and edit settings for the User Activity audit trail report.
			Archive	Allows users to archive User Activity audit trail reports. Archiving will save the report and allow the report to be sent through email as an attachment.
			Purge	Allows users to purge User Activity audit trail reports from the system.
	Classes and subclasses			Allows users to view, add, edit, and delete classes and subclasses used in Document.
	Configurations			Allows users to view and edit various configuration options in Document. These options include setting the number of file versions to store, default number of days to check out files, synchronized offline files settings, portal creation reminders, drag and drop and encryption settings, and disk space notification settings.
	Email Notifications			Allows users to view and edit email notification settings.
	Email encryption key			Allows users to view and edit encryption keys for all entities through Encryption Key Manager.
		Email key		Allows users to send any Encryption Key through email.
		Regenerate key		Allows users to regenerate any or all Encryption Keys.
		Control key expiration		Allows users to view and edit the default expiration date for generated Encryption Keys.
	File naming conventions			Allows users to view, add, edit, and delete file naming conventions for each entity type.
	Folder Templates			Allows users to view, add, edit, and delete folder templates for each entity type.
		Set default metadata		Allows users to view, edit, add, and delete default metadata assigned to folders in a folder template. User must also have permission to view and edit folder templates.
	Tax Mapping			Allows users to view, add, edit, and delete tax mappings for each entity type. This will allow for seamless integration with Tax.

Office

Parent Function	Child Function	Second-level Child Function	Permission Description
File Management			Allows users to work with files for an Office entity.
	Add scanned file		Allows users to add scanned files to an Office entity.
	Append to PDF		Allows users to append a PDF file to an existing file with the same name for an Office entity during the upload process.
	Archive/Unarchive files		Allows users to view, edit, and delete archive files for an Office entity and allows the user to move a firm entity's file to archive storage.
	Cancel check-out		Allows users to cancel check-out of a file which that user has checked out for an Office entity. Changes to the file since it was checked out will be lost.
	Check in/out		Allows users to check out and check in files for an Office entity. User can only check in files that were checked out by that same user.
	Copy/move		Allows users to copy or move files for an Office entity.
	Download files		Allows users to download a read-only copy of a file for an Office entity.
	Edit retention period		Allows users to modify the retention period of a file for an Office entity.
	File groups		Allows users to add a file from an Office entity to a file group.
	History		Allows users to view history of a file for an Office entity.
	Properties		Allows users to view and edit the properties of a file for an Office entity.
	File-level permissions		Allows users to add, edit, view, and delete file-level permissions for a file belonging to an Office entity.
	Files		Allows users to add, direct edit, view, and delete files for an Office entity.
	Lock/Unlock files		Allows users to lock and unlock files for an Office entity. User can only unlock files which were locked by that same user.
	Overwrite duplicates		Allows users to overwrite files for an Office entity when uploading a file with a duplicate name.
	Preview		Allows users to view a preview of a file for an Office entity.
	Previous versions		Allows users to view, restore, and delete previous versions of files for an Office entity. This feature requires the system to be configured to store two or more versions of files.
	Send as attachment		Allows users to send a file for an Office entity through email as an attachment.
	Synchronize offline Files		Allows users to select files from an Office entity to be synchronized for offline viewing.
	Send to Engagement		Allows users to send files from an Office entity to an Engagement binder in the user's local file room (LFR).
	Discussions		Allows users to view and participate in discussions about files for an Office entity.
		Attach file to post	Allows users to attach a copy of an Office entity's file being discussed to notification emails.
		Close or reopen thread	Allows users to close or reopen discussion threads about files for an Office entity.
		Mark or unmark thread as sticky	Allows users to mark or unmark discussion threads about files for an Office entity as sticky. Sticky threads appear at the top of the list of discussion threads for a file.
		Others posts	Allows users to view, add, edit, and delete other users' discussion posts about files for an Office entity.
		Own posts	Allows users to view, add, edit, and delete the user's own discussion posts about files for an Office entity.
		Reply to posts	Allows users to reply to posted discussion threads about files for an Office entity.
	Cancel others checked out files		Allows users to cancel check-outs by other users.
	Task assignment		Allows users to assign tasks to other users.
Office Profile			Allows users to view and edit Document related options on an Office entity profile.
	Folder templates		Allows users to view and edit the folder template for an Office entity.
	Custom folders		Allows users to view, add, edit, and delete custom folders for an Office entity.
	Email encryption keys		Allows users to view and regenerate the encryption key for an Office entity.
		Email Key	Allows users to send an Office entity's encryption key through email.
	Extended storage file types		Grants the user the ability to add, view, edit, and delete Extended storage file types
	Office Storage		Grants the user the ability to view and edit the Office storage area
		Managed Storage	Grants the user the ability to view and edit the Managed storage area
		Extended Storage	Grants the user the ability to view and edit the Extended storage area
		Archive Storage	Grants the user the ability to view and edit the Archive storage area
		Recycle Bin Storage	Grants the user the ability to view and edit the Recycle Bin storage area
		Search Index Server	Grants the user the ability to view and edit the Search Index server

Business Unit

Parent Function	Child Function	Second-level Child Function	Permission Description
File Management			Allows users to work with files for a Business Unit entity.
	Add scanned file		Allows users to add scanned files to a Business Unit entity.
	Append to PDF		Allows users to append a PDF file to an existing file with the same name for a Business Unit entity during the upload process.
	Archive/Unarchive files		Allows users to view, edit, and delete archive files for a Business Unit entity and allows the user to move a firm entity's file to archive storage.
	Cancel check-out		Allows users to cancel check-out of a file which that user has checked out for a Business Unit entity. Changes to the file since it was checked out will be lost.
	Check in/out		Allows users to check out and check in files for a Business Unit entity. User can only check in files that were checked out by that same user.
	Copy/move		Allows users to copy or move files for a Business Unit entity.
	Download		Allows users to download a read-only copy of a file for a Business Unit entity.
	Edit retention period		Allows users to modify the retention period of a file for a Business Unit entity.
	File groups		Allows users to add a file from a Business Unit entity to a file group.
	History		Allows users to view history of a file for a Business Unit entity.
	Properties		Allows users to view and edit the properties of a file for a Business Unit entity.
	File-level permissions		Allows users to add, edit, view, and delete file-level permissions for a file belonging to a Business Unit entity.
	Files		Allows users to add, direct edit, view, and delete files for a Business Unit entity.
	Lock/Unlock files		Allows users to lock and unlock files for a Business Unit entity. User can only unlock files which were locked by that same user.
	Overwrite duplicates		Allows users to overwrite files for a Business Unit entity when uploading a file with a duplicate name.
	Preview		Allows users to view a preview of a file for a Business Unit entity.
	Previous versions		Allows users to view, restore, and delete previous versions of files for a Business Unit entity. This feature requires the system to be configured to store two or more versions of files.
	Send as attachment		Allows users to send a file for a Business Unit entity through email as an attachment.
	Synchronize offline files		Allows users to select files from a Business Unit entity to be synchronized for offline viewing.
	Discussions		Allows users to view and participate in discussions about files for a Business Unit entity.
		Attach file to post	Allows users to attach a copy of a Business Unit entity's file being discussed to notification emails.
		Close or reopen thread	Allows users to close or reopen discussion threads about files for a Business Unit entity.
		Mark or unmark thread as sticky	Allows users to mark or unmark discussion threads about files for a Business Unit entity as sticky. Sticky threads appear at the top of the list of discussion threads for a file.
		Others posts	Allows users to view, add, edit, and delete other users' discussion posts about files for a Business Unit entity.
		Own Posts	Allows users to view, add, edit, and delete the user's own discussion posts about files for a Business Unit entity.
		Reply to posts	Allows users to reply to posted discussion threads about files for a Business Unit entity.
	Send to Engagement		Allows users to send files from a Business Unit entity to an Engagement binder in the user's local file room (LFR).
	Cancel others check out files		Allows users to cancel check-outs by other users.
	Task assignment		Allows users to assign tasks to other users.
Business Unit Profile			Allows users to view and edit Document related options on a Business Unit entity profile.
	Folder templates		Allows users to view and edit the folder template for a Business Unit entity.
	Custom folders		Allows users to view, add, edit, and delete custom folders for a Business Unit entity.
	Email encryption keys		Allows users to view and regenerate the encryption key for a Business Unit entity.
		Email key	Allows users to send a Business Unit entity's encryption key through email.

Staff

Parent Function	Child Function	Second-level Child Function	Permission Description
File Management			Allows users to work with files for a Staff entity.
	Add scanned file		Allows users to add scanned files to a Staff entity.
	Append to PDF		Allows users to append a PDF file to an existing file with the same name for a Staff entity during the upload process.
	Archive/Unarchive files		Allows users to view, edit, and delete archive files for a Staff entity and allows the user to move a firm entity's file to archive storage.
	Cancel check-out		Allows users to cancel check-out of a file which that user has checked out for a Staff entity. Changes to the file since it was checked out will be lost.
	Check in/out		Allows users to check out and check in files for a Staff entity. Users can only check in files that were checked out by that same user.
	Copy/move		Allows users to copy or move files for a Staff entity.
	Download		Allows users to download a read-only copy of a file for a Staff entity.
	Edit retention period		Allows users to modify the retention period of a file for a Staff entity.
	File groups		Allows users to add a file from a Staff entity to a file group.
	History		Allows users to view history of a file for a Staff entity.
	Properties		Allows users to view and edit the properties of a file for a Staff entity.
	File-level permissions		Allows users to add, edit, view, and delete file-level permissions for a file belonging to a Staff entity.
	Files		Allows users to add, direct edit, view, and delete files for a Staff entity.
	Lock/Unlock files		Allows users to lock and unlock files for a Staff entity. User can only unlock files which were locked by that same user.
	Overwrite duplicates		Allows users to overwrite files for a Staff entity when uploading a file with a duplicate name.
	Preview		Allows users to view a preview of a file for a Staff entity.
	Previous versions		Allows users to view, restore, and delete previous versions of files for a Staff entity. This feature requires the system to be configured to store two or more versions of files.
	Send as attachment		Allows users to send a file for a Staff entity through email as an attachment.
	Synchronize offline files		Allows users to select files from a Staff entity to be synchronized for offline viewing.
	Discussions		Allows users to view and participate in discussions about files for a Staff entity.
		Attach file to post	Allows users to attach a copy of a Staff entity's file being discussed to notification emails.
		Close or reopen thread	Allows users to close or reopen discussion threads about files for a Staff entity.
		Mark or unmark thread as sticky	Allows users to mark or unmark discussion threads about files for a Staff entity as sticky. Sticky threads appear at the top of the list of discussion threads for a file.
		Others posts	Allows users to view, add, edit, and delete other user's discussion posts about files for a Staff entity.
		Own posts	Allows users to view, add, edit, and delete the user's own discussion posts about files for a Staff entity.
		Reply to posts	Allows users to reply to posted discussion threads about files for a Staff entity.
	Send to Engagement		Allows users to send files from a Staff entity to an Engagement binder in the user's local file room (LFR).
	Cancel others checked out files		Allows users to cancel check-outs by other users.
	Task assignment		Allows users to assign tasks to other users.
Staff Profile			Allows users to view and edit Document related options on a Staff entity profile.
	Folder templates		Allows users to view and edit the folder template for a Staff entity.
	Custom folders		Allows users to view, add, edit, and delete custom folders for a Staff entity.
	Email encryption key		Allows users to view and regenerate the encryption key for a Staff entity.
		Email Own Key	Allows users to send their own Staff encryption key to themselves through email.
		Email Others Key	Allows users to send another Staff entity's encryption key to that staff through email.

Client

Parent Function	Child Function	Second-level Child Function	Permission Description
File Management			Allows users to work with files for a client entity.
	Add scanned file		Allows users to add scanned files to a client entity.
	Append to PDF		Allows users to append a PDF file to an existing file with the same name for a client entity during the upload process.
	Portal		Allows users to create and delete client portals, and view and edit configuration options for those portals.
		Approve or Reject Portal Files	Allows users to approve or reject files added to the portal by client end users. This permission is required to be a firm approver for a portal.
		Recall published files	Allows users to recall a published file from the portal and bring it back to Document. Changes made to the file while in the portal are lost. The file will no longer be available to client users of the portal.
		Publish	Allows users to publish a file from Document or other CCH ProSystem fx applications to the portal.
		Unpublish	Allows users to unpublish a file from the portal and bring it back to Document. Changes made to the file while in the portal will be retained. The file will no longer be available to client users of the portal.
	Archive/Unarchive files		Allows users to view, edit, and delete archive files for a client entity and allows the user to move a firm entity's file to archive storage.
	Cancel check-out		Allows users to cancel check-out of a file which that user has checked out for a client entity. Changes made to the file since it was checked out will be lost.
	Check in/out		Allows users to check out and check in files for a client entity. User can only check in files that were checked out by that same user.
	Copy/move		Allows users to copy or move files for a client entity.
	Download		Allows users to download a read-only copy of a file for a client entity.
	Edit retention period		Allows users to modify the retention period of a file for a client entity.
	File groups		Allows users to add a file from a client entity to a file group.
	History		Allows users to view history of a file for a client entity.
	Properties		Allows users to view and edit the properties of a file for a client entity.
	File-level permissions		Allows users to add, edit, view, and delete file-level permissions for a file belonging to a client entity.
	Files		Allows users to add, direct edit, view, and delete files for a client entity.
	Lock/unlock files		Allows users to lock and unlock files for a client entity. User can only unlock files which were locked by that same user.
	Overwrite duplicates		Allows users to overwrite files for a client entity when uploading a file with a duplicate name.
	Preview		Allows users to view a preview of a file for a client entity.
	Previous versions		Allows users to view, restore, and delete previous versions of files for a client entity. This feature requires the system to be configured to store two or more versions of files.
	Send as attachment		Allows users to send a file for a client entity through email as an attachment.
	Synchronize offline files		Allows users to select files from a client entity to be synchronized for offline viewing.
	Discussions		Allows users to view and participate in discussions about files for a client entity.
		Attach file to post	Allows users to attach a copy of a client entity's file being discussed to notification emails.
		Close or reopen thread	Allows users to close or reopen discussion threads about files for a client entity.
		Mark or unmark thread as sticky	Allows users to mark or unmark discussion threads about files for a client entity as sticky. Sticky threads appear at the top of the list of discussion threads for a file.
		Others posts	Allows users to view, add, edit, and delete other users' discussion posts about files for a client entity.
		Own posts	Allows users to view, add, edit, and delete the user's own discussion posts about files for a client entity.
		Reply to posts	Allows users to reply to posted discussion threads about files for a client entity.
	Send to Engagement		Allows users to send files from a client entity to an Engagement binder in the user's local file room (LFR).
	Cancel others checked out files		Allows users to cancel check-outs by other users.
	Task assignment		Allows users to assign tasks to other users.
Client Profile			Allows users to view and edit Document related options on a client entity profile.
	Folder templates		Allows users to view and edit the folder template for a client entity.
	Custom folders		Allows users to view, add, edit, and delete custom folders for a client entity.
	Email encryption key		Allows users to view and regenerate the encryption key for a client entity.
		Email Key	Allows users to send a client's encryption key to the client through email.

Non-Client

Parent Function	Child Function	Second-level Child Function	Permission Description
File Management			Allows users to work with files for a non-client entity.
	Add scanned file		Allows users to add scanned files to a non-client entity.
	Append to PDF		Allows users to append a PDF file to an existing file with the same name for a non-client entity during the upload process.
	Archive/Unarchive files		Allows users to view, edit, and delete archive files for a non-client entity and allows the user to move a firm entity's file to archive storage.
	Cancel check-out		Allows users to cancel check-out of a file which that user has checked out for a non-client entity. Changes to the file since it was checked out will be lost.
	Check in/out		Allows users to check out and check in files for a non-client entity. User can only check in files that were checked out by that same user.
	Copy/move		Allows users to copy or move files for a non-client entity.
	Download		Allows users to download a read-only copy of a file for a non-client entity.
	Edit retention period		Allows users to modify the retention period of a file for a non-client entity.
	File groups		Allows users to add a file from a non-client entity to a file group.
	History		Allows users to view history of a file for a non-client entity.
	Properties		Allows users to view and edit the properties of a file for a non-client entity.
	File-level permissions		Allows users to add, edit, view, and delete file-level permissions for a file belonging to a non-client entity.
	Files		Allows users to add, direct edit, view, and delete files for a non-client entity.
	Lock/unlock files		Allows users to lock and unlock files for a non-client entity. User can only unlock files which were locked by that same user.
	Overwrite duplicates		Allows users to overwrite files for a non-client entity when uploading a file with a duplicate name.
	Preview		Allows users to view a preview of a file for a non-client entity.
	Previous versions		Allows users to view, restore, and delete previous versions of files for a non-client entity. This feature requires the system to be configured to store two or more versions of files.
	Send as attachment		Allows users to send a file for a non-client entity through email as an attachment.
	Send to Engagement		Allows users to send files from a non-client entity to an Engagement binder in the user's local file room (LFR).
	Synchronize offline files		Allows users to select files from a non-client entity to be synchronized for offline viewing.
	Discussions		Allows users to view and participate in discussions about files for a non-client entity.
		Attach file to post	Allows users to attach a copy of a non-client entity's file being discussed to notification emails.
		Close or reopen thread	Allows users to close or reopen discussion threads about files for a non-client entity.
		Mark or unmark thread as sticky	Allows users to mark or unmark discussion threads about files for a non-client entity as sticky. Sticky threads appear at the top of the list of discussion threads for a file.
		Others posts	Allows users to view, add, edit, and delete other users' discussion posts about files for a non-client entity.
		Own posts	Allows users to view, add, edit, and delete the user's own discussion posts about files for a non-client entity.
		Reply to posts	Allows users to reply to posted discussion threads about files for a non-client entity.
	Cancel others checked out files		Allows users to cancel check-outs by other users.
	Task assignment		Allows users to assign tasks to other users.
Non-client Profile			Allows users to view and edit Document related options on a non-client entity profile.
	Folder templates		Allows users to view and edit the folder template for a non-client entity.
	Custom folders		Allows users to view, add, edit, and delete custom folders for a non-client entity.
	Email encryption key		Allows users to view and regenerate the encryption key for a non-client entity.
		Email Key	Allows users to send a non-client entity's encryption key through email.

Dashboard

Parent Function	Child Function	Second-level Child Function	Permission Description
User Options			Allows users to view and edit user options related to Document.
Utilities			Allows users to view the Document utilities module on the Dashboard.
	Document Tools		Allows users to view the Document tools module on the Dashboard.
		File Export Utility	Grants the user the ability to view and edit the File Export Utility.
		File GUID Translator	Allows users to use the GUID Translator tool.
		Portal Conversion Utility	Grants the user the ability to view and edit the Portal Conversion Utility.

Portal

Administration Manager

Parent Function	Child Function	Second-level Child Function	Permission Description
Portal Lists			Allows users to view and edit portal lists.
	Portal Announcements		Allows users to add, edit, view, and delete portal announcements.

Dashboard

Parent Function	Child Function	Second-level Child Function	Parent Function
User Options			Allows users to view and edit portal-related user options.

Firm

Parent Function	Child Function	Second-level Child Function	Parent Function
Firm Setup			Allows users to view and edit portal-related options in Firm Setup. This right required to view the Portal plug-in to Firm Setup.
	Portal Settings and Defaults		Allows users to view and edit portal settings and default options.
		Audit Trail Settings	Allows users to set audit trail tracking settings
		Email Notifications	Allows users to view and edit portal email notifications.
		Folder Templates	Allows users to add, edit, view, and delete portal folder templates, which are applied when portals are created.
		Licensing Details	Allows users to view the licensing details for portals licensed by the firm.
		Storage Details	Allows users to view the storage details for portals licensed by the firm.

Client

Parent Function	Child Function	Second-level Child Function	Permission Description
Client Profile			Allows users to view and edit portal-related settings on the client profile. This permission is required to view the Portal plug-in to the client profile.
	Portal Management		Allows users to create, edit, view, and delete client portals.
		Client Area	Allows users to create or edit the client area for a client portal.
		Enable or Disable Portal	Allows users to activate or deactivate an existing client portal.
		Firm User Access List	Allows users to specify or change the list of firm users who have access to a portal.
		Folder Templates	Allows users to select a folder template to assign to a portal during portal creation. If no files have been added to an existing portal, this permission allows the user to change the assigned folder template for the portal.

Reports

All modules

Parent Function	Child Function	Second-level Child Function	Third-level Child Function	Permission Description
Shared Library
	Shared Views			Grants the user the ability to add, edit, view, or delete shared views.
Firm Library
	Custom			Grants the user the ability to add, edit, view, or delete custom reports.
	Standard			Grants the user the ability to access standard reports.
		Firm
			Client Profile Report	Grants the user the ability to view and run the Client Profile report that shows the client ID, engagement, name, phone, extension, fax, and extension.
			Client Notes Report	Grants the user the ability to view and run the Client Notes report that includes client note information.
			Contact List	Grants the user the ability to view and run the Contact List report that includes either condensed or full contact information.
			Notifications Report	Grants the user the ability to view and run the Notifications report that includes notification log entry details.
			Staff List	Grants the user the ability to view and run the Staff List report that shows the following information: staff ID, staff name, login name, and status.