User Profiles and Privileges

Viewing User Profiles

Email Address and Lockdowns

User Time Zone

Privileges

Read-Only

Privilege Profiles (Extended edition)

Adding User Profiles

Editing User Profiles

Deleting User Profiles

Privilege Summary (Extended edition)

 

All Users can access the User Profile View window. Non-Application Administrators can view all User Profiles, but can only view their own User Login. Application Administrators can access all User Profiles (including User Profiles of other Application Administrators), and can change any User Login.

Viewing User Profiles

Navigation bar > Setup icon > Setup menu > "Your Profile" hyperlink > User Profile View window.

 

or

 

Navigation bar > Setup icon > Setup menu > User Manager hyperlink > User Manager window > Click your name or another Users name in the Name column > User Profile View window.

 

User Profile View window - Includes the following elements:

Password Lockdown Administration: If you forget your User Password and subsequently get locked out of the application, an Application Administrator can send your password to the email address that is listed here. If you are an Application Administrator, and you are sent any Solution Lockdown Alert Messages (SLAM) by the application (indicating the need to reactivate locked-out Users), they are sent to the email address listed here.

 

External Data Capture notifications or submissions: You may be chosen by an Application Administrator to receive email notification messages of successful or failed External Data Capture Form submissions. Such emails are sent to the email address listed here.

 

Changing or Requesting Your User Password: Any time your User Password is changed you will receive an email at this email address, or if you forget your User Password and request it be sent to you by an Application Administrator, it will be sent to this email address.

 

Wireless email: Whenever you send email to Contacts via the Wireless application, said email is addressed from the email address listed here.

Privileges

Application Administrators can assign Privileges or Privilege Profiles to any User or any other Application Administrator, but not to themselves.

 

Privilege Profile - Allows an Extended edition Application Administrator to assign an entire set of privileges to any Users or Application Administrators except themselves. This prevents having to select each privilege one-at-a-time, and allows for uniform privilege assignments en masse. Once a Privilege Profile is selected, all privilege check boxes and drop-down menus will reflect the appropriate selections for the Privilege Profile, in Read-Only format (the exception being the "Active User" privilege). If "None" is selected from the User Privilege Profile drop-down menu, this will remove the User from being bound to a Privilege Profile, and will enable all check boxes and drop-down menus. The privileges available in the User Privilege Profile drop-down menu are added / edited via the Privilege Profiles window.

 

Active User privilege - This privilege grants the User with Active Status in the application. The lack of this privilege means that the User has been assigned Inactive Status in the application, and means that the User cannot even log in to the application. As an Application Administrator you can grant or remove this status for any User Profile except your own, even if there is a Privilege Profile assigned (the Active User privilege can never be part of a Privilege Profile). Example: If the CTO has just defrauded the organization, the Application Administrator can immediately revoke the CTO's access to the application by assigning them with Inactive Status. The records of Inactive Users are still accessible by Application Administrators and any other Users who have access to the Inactive User. If an Application Administrator wants to make the records of an Inactive User inaccessible to all Users except for Application Administrators, the Inactive User's Company Position should be edited to be blank in their User Profile.

 

User Password Does Not Expire - This privilege prevents a User's User Password from expiring. This privilege will override the User Password Expiration setting chosen by an Application Administrator in Security Preferences (set automatically to 365 days for Express Users) and is not affected by a Force Password Change. The lack of this privilege means the User's User Password will expire based on the User Password Expiration setting chosen by an Application Administrator, and is affected by any "Force Password Change".

 

Kinds of Administrators

 

There are several kinds of Administrators. When the Help file refers to an "Administrator" without a qualifier (e.g., Extended edition Administrator), it is referring to Application Administrators.

 

Application Administrator - This privilege grants the User with Application Administrator privileges, meaning they have full power over virtually all Users, all data, all records, all Access Rights, all Privileges, and all settings in the application. While an Application Administrator wields significant power in the application, they don't need to have any programming or highly technical skills.

 

The person who initially establishes a log in to the application is by default the sole and original Application Administrator. An organization can have multiple Application Administrators. The original Application Administrator can create more Application Administrators to share the duties of overseeing the application. See the Help topic Power of the Application Administrator to help determine who should be granted this kind of power. If your organization decides to have multiple Application Administrators, each Application Administrator will have Full Access to every other Application Administrator. Only Application Administrators accessing another profile besides their own, can set or remove the Application Administrator privilege. (Note that if you remove this privilege from an Application Administrator who is also listed as the Primary Contact for your organization, you will probably want to pick a new Primary Contact in the Company Profile - Edit window). You can check to see if a User is an Application Administrator by checking the User Manager or their User Profile to see if the Application Administrator check box is selected.

 

Click to learn more about the Application Administrator's powers and responsibilities.

Click to learn more about an Application Administrator's limitations.

Click to learn more about Application Administrator access with multiple Application Administrators.

Click to learn more about transferring Application Administrator powers.

 

Process Builder Administrator - A User lacking this privilege:

This privilege allows the User to:

Click to learn more about a Process Builder Administrator's powers and responsibilities.

 

Dashboard Administrator - (Extended edition) A User lacking this privilege can only access, add, and edit their own Dashboards. This privilege allows the User to:

Selecting the fields displayed in a Chart Element Drill-Down output is the responsibility and function of an Application Administrator, not a Dashboard Administrator.

 

Document Library Administrator - This privilege allows the User to add, edit, and delete document folders via the Manage Folders hyperlink (in the left-hand panel of the Document Library).

 

Communication Templates Administrator - This privilege provides the User with the following:

Lead Queue Administrator - This privilege allows the User to:

Campaign Administrator - This privilege is only available if Campaigns are activated for your organization by an Application Administrator via the Application Modules hyperlink (in the Setup menu). This privilege allows the User to:

Campaign Administrators cannot manage the following features - Campaign Layouts, Campaign Status, Campaign Field Management, Campaign Type, or Campaign Member Status. These features can only be managed by Application Administrators.

 

Import privileges - Having this privilege for any kind of import (Accounts & Contacts), (Deals), or (Leads), means the User has Import privileges to import those kinds of records via the Import Wizard. Note that Deal Import privileges are only available to Extended edition Users. A User lacking any kind of Import privilege cannot use the Import Wizard to import data (new Accounts and Contacts, and / or new Deals, and / or new Leads) to the application. The application will not allow a User to be granted Account & Contact Import privileges if they currently have Read-Only access to Accounts and Contacts, and the same applies to Deals and to Leads. Read-Only access must first be removed before Import privileges can be granted.

 

Multi-Record Field Update privilege - This privilege allows the User to:

Multi-Record Field Update privilege and Read-Only access:

Multi-Record Reassign Ownership privilege - This privilege allows the User to reassign ownership of multiple Accounts, Contacts, Deals, and/or Deal Steps simultaneously.

 

Multi-Record Reassign Ownership privilege and Read-Only access:

Sync Tool privilege - This privilege allows the User to use the Sync tool to synchronize their data with Microsoft Outlook, Palm Desktop, ACT!, or GoldMine.

 

Offline privilege - This privilege allows the User to subscribe/unsubscribe Accounts, Contacts, Deals, Appointments, Tasks, and Multi-Notes in the Online application and pull them into the Offline application. Revoking a User's Offline privileges prevents them from further subscribing to records and from connecting Offline to Online, but said User can still view any records that were in their Offline application when privileges were revoked. Because it's offline, there is no way for the Offline application to recognize that a User's privileges have been revoked until said User tries to connect with the Online application. This privilege will not be displayed at all if the Offline application is not enabled for your organization. If you are adding a new User Profile, and you try to grant Offline privileges but have already assigned all of your Offline licenses, clicking [Save] launches a message indicating that Offline privileges cannot be granted. Either purchase more Offline licenses or revoke a User's Offline privileges.

 

Web Services API privilege - This privilege provides Extended edition Users with the following:

Wireless Application privilege - Will only appear for organizations that access their data wirelessly. This privilege allows Application Administrators to use the Wireless application, and to setup and manage the Wireless application for their Users (via the Wireless Setup hyperlink) in the Setup menu. This privilege allows non-Application Administrators to use the Wireless application, but they will not have access the Wireless Setup hyperlink.

 

Communication privileges - There are the following kinds of Communication privileges:

Send Email & Use Outlook Email plug-in (privilege) - This privilege provides the User with the following:

Word Merge via Comm Mgr plug-in (privilege) - This Communication privilege provides the User with the following:

Note The Comm Events mini-tab will also be available for any Users who previously had the Communication Manager privilege and conducted Communication Events. This privilege has since been split up between the different Communication privileges.

Reports Tab Visible - Users lacking access to the Reports tab are unable to:

Subtotal Report Definitions - Indicates to what extent a User has access to Subtotal Report definitions.

 

Subtotal Report Snapshots - Indicates to what extent a User has access to Subtotal Report snapshots.

 

List Queries privilege - Indicates to what extent a User has List Queries privileges.

 

List Layouts privilege - Indicates to what extent a User has List Layouts privileges.

 

Cannot Delete Accounts and Contacts - Removes the User's ability to:

Cannot Delete Deals - Removes the User's ability to:

Cannot Delete Leads - Removes the User's ability to delete Leads from the Lead List page and from the View Lead pop-up. This applies to Working Leads and Rejected Leads (Converted Leads cannot be deleted by Users whether or not they have the Cannot Delete Leads designation).

 

Cannot Delete Document Library files - Removes the User's ability to delete Documents from the Documents table on the Document Library View page. This does not remove the User's ability to delete attached documents.

 

Cannot Delete Appointments and Tasks - Removes the User's ability to:

Read-Only - If you are an Application Administrator accessing another profile besides your own, you can designate or remove Read-Only status to one or more areas of the application. The Read-Only designation overrides any other access grants and privileges (any exceptions are noted). Access grants can come implicitly from the Company Position Chart (CPC) or explicitly from Position-To-Position (P2P) Access Grants or Teams. An Application Administrator cannot assign themselves Read-Only status. Only another Application Administrator can assign an Application Administrator with Read-Only status. Read-Only example: If the CTO has just given his one-week notice, the Application Administrator has the option of immediately changing the CTO's access in all areas of the application to Read-Only.

 

Accounts & Contacts Read-Only check box - If this check box is not selected the User has full access to their own Accounts and Contacts, as well as any other Accounts and Contacts they normally have access to in Account Management. A User cannot be granted Read-Only status to Accounts and Contacts if they currently have Import privileges. If this check box is selected:

Accounts & Contacts Read-Only example 1 - If a User is given Read-Only status to Accounts & Contacts, that User cannot even create their own Accounts or Contacts.

 

Accounts & Contacts Read-Only example 2 - If the organization's CEO is an Application Administrator, and the Vice President of Marketing is also an Application Administrator, but the CEO does not want his/her own Accounts or Contacts to be editable to the VP of Marketing, the CEO can: a.) remove the VP's Application Administrator privileges, or b.) edit the VP's User profile to assign Read-Only status.

 

Deals Read-Only check box - If this check box is not selected the User has full access to their own Deals, as well as any other Deals they normally have access to in Account Management. A User cannot be granted Read-Only status to Deals if they currently have Import privileges. If this check box is selected:

Leads Read-Only check box - If this check box is not selected the User has full access to their own Leads, as well as any other Leads they normally have access to in Account Management. A User cannot be granted Read-Only status to Leads if they currently have Lead Import privileges. If this check box is selected:

Document Library Read-Only check box - If this check box is not selected the User has full access to their own documents, as well as any other documents they normally have access to in the Document Library. If this check box is selected:

Appointments & Tasks Read-Only check box - If this check box is not selected  the User has full access to their own Appointments and Tasks, as well as any other Appointments and Tasks they normally have access to in the Calendar. If this check box is selected:

Dashboards Read-Only check box - If this check box is not selected the User has full access to their own Dashboards, as well as any other Dashboards to which they normally have access. If this check box is selected (Dashboard Administrators cannot be designated as Read-Only to Dashboards):

Email Notifications - Application Administrators cannot assign Privileges to themselves, with the exception of the Email Notifications check boxes, which are enabled for any Application Administrator with no Privilege Profile (said check boxes are Read-Only for any Application Administrator assigned a Privilege Profile).

Privilege Profiles (Extended edition)

Privilege Profiles window - The hub for managing Privilege Profiles, this window allows an Application Administrator to view, add, edit, assign, and delete all Privilege Profiles, each of which consists of an entire set of privileges. This window is accessed by clicking the Privilege Profiles hyperlink in the Setup menu. The Privilege Profiles window includes the following elements:

Add / Edit Privilege Profile pop-up - Add a new Privilege Profile or edit an existing Privilege Profile via the Privileges check boxes / drop-down menus. The Add / Edit Privilege Profile pop-up includes the following elements:

Assign Privilege Profile pop-up - Allows you to assign and unassign privileges to Users en masse. The Users selected (individually, or via Positions or Teams) are bound to the Privilege Profile, meaning that whenever changes are made to the Privilege Profile, said changes are immediately designated to all Users assigned to the Privilege Profile. For example, if you edit the Privilege Profile that is assigned to all Users in your Inside Sales group, remove the Wireless privilege, and then click [Save] or [Save & Assign], the change will automatically be assigned to all Users that are selected as part of the Privilege Profile.

 

Note In cases where a Position or Team is selected, the Users in the Position or Team at the time it is selected are the only Users affected by any edits to the Privilege Profile going forward, not any Users subsequently added to that Position or Team. If you add a User to the Position "Inside Sales", you must assign the Privilege Profile to that User. This is why whenever you click the Assign hyperlink (from the Privilege Profiles window), any previously selected Positions or Teams are no longer listed in the Assign To listbox, but the Users in those Positions at the time of the assignment are listed.

 

The Assign Privilege Profile pop-up includes the following elements:

Adding User Profiles

Only Application Administrators can access the User Profile - Add window to add additional Users.

 

To add a User Profile:

 

Navigation bar > Setup icon > Setup menu > User Manager hyperlink > User Manager window > [Add] > User Profile Add window.

If you click [Add] and you have already added your maximum number of Users, the following message displays: "You have reached your maximum of X Users. Click here to add more licenses." You must add more licenses before continuing.

 

or

 

User Profile Edit window > "Save and Add Another User" radio button > [Save] > User Profile Add window.

If you click [Add] and you have already added your maximum number of Users, the message just referenced appears.

 

or

 

From the Company Profile View window OR from the Company Profile Edit window > Subscription Status table > Create More Users hyperlink > User Profile Add window.

If the Create More Users hyperlink is unavailable, this means that you have reached your maximum number of Users, and cannot add more without adding more licenses.

 

User Profile - Add window - Allows you to add new Users to the application, and includes the following elements / characteristics (any field in the User Profile - Add window marked with a red asterisk is mandatory and must be completed):

Editing User Profiles

Only Application Administrators can edit profiles of other Users in the User Profile - Edit window. Non-Application Administrators can only access this window to edit their own profile, although some fields and information boxes will still only be editable by an Application Administrator as described below.

 

To edit a User Profile:

 

User Profile View window > [Edit] > User Profile - Edit window.

 

OR

 

Navigation bar > Setup icon > Setup menu > User Manager hyperlink > User Manager window > edit hyperlink (to the left of the appropriate name in the Name column) > User Profile - Edit window.

 

User Profile - Edit window - Includes the following elements / characteristics (any field in the User Profile - Edit window marked with a red asterisk is mandatory and must be completed):

the Online application: Use your new User Password the next time you log in.

 

Sync tool: Update the User Settings window in the Sync tool with your new User Password before you conduct a synchronization.

 

the Offline application: When logging in to the Offline application for the first time since changing your User Password, use whichever User Password you last used to log in to the Offline application. Once you are logged in to the Offline application, enter your new User Password to the Login pop-up, which you launch by clicking [Full Refresh], [Send Changes], or [Discard Changes & Refresh] in the Stats and Refresh window. After conducting a refresh (Full Refresh, Send Changes, or Discard Changes & Refresh), use your new User Password when logging in to the Offline application or when refreshing.

 

Email Plug-in: After installing the Email plug-in (for email integration with Outlook), update the Linked Email tab in Microsoft Outlook (Tools > Options > Linked Email tab) any time you change your User Password.

 

Wireless/IM: Use your new User Password the next time you log in to the application wirelessly via either mini-browser or instant messenger.

Deleting User Profiles

The ability to delete Users does not currently exist inside the application. If Application Administrators want to remove one or more Users yet still maintain the same number of licenses (seats), they should first make the Users Inactive, then edit the User Profiles of said Users to remove unwanted information, and then change each User's first and last name to something such as Available User1 or Open Seat1.

 

Note Making a User Inactive prevents them from logging in, but any Accounts, Contacts, Deals, and Leads that they owned are unaffected other than that the Owner of those records is now "Open Seat1" or whatever you changed the User's name to.

 

If Application Administrators want to remove one or more Users permanently, thereby decreasing the number of licenses (seats), they should contact technical support (via the technical support icon on the navigation bar).

Privilege Summary (Extended edition)

Privilege Summary window - Accessed via the Setup menu by clicking the Privilege Summary hyperlink (available only to Application Administrators). The Privilege Summary table lists all Users application-wide and indicates whether they have been granted (via their User Profile) each privilege. Certain privileges offer different layers of access (Subtotal Report Definitions, Subtotal Report Snapshots, List Queries, List Layouts), thus in such cases the table will offer additional columns to reflect this. The table also indicates (where appropriate) if each User listed is Active or Inactive in the application. The Privilege drop-down menu displays all User privileges. The Privilege Summary window also includes the some of the following elements:

Important You can always reset this browser security setting before running the export if you are concerned that such a change could inadvertently enable future undesirable or unsafe downloads.

 

This documentation is copyright (c) 1997-2007. All Rights Reserved Worldwide. This documentation is provided under license, and is subject to periodic change, at the absolute discretion of the company and its authors. Unauthorized distribution of these materials for any purpose or to any third party is prohibited.