Employee Permissions and Module Visibility

Enabled is not the same as allowed

A module can be enabled globally without being visible to every Employee. Employees need the relevant permission before the module and its actions are exposed.

Permission types

Modules can define permissions for actions such as:

• view
• create
• edit
• reply
• add internal note
• assign
• delete
• view broader record scope

The exact permission set depends on the module.

Record scope

Where a module supports scoped records, an Employee can be limited to records assigned to or otherwise available to that Employee rather than every record in the installation.

Administrator

Administrators are not restricted by normal Employee module permissions.

Testing permissions

After configuring an Employee:

1. Sign out of the Administrator account.
2. Sign in as that Employee.
3. Check the left navigation.
4. Open each allowed module.
5. Confirm disallowed modules are absent.
6. Confirm the Employee cannot reach unauthorized records by manually changing a URL.