CRM security settings

• View: Organization Type access permissions determine organization view permissions (Security Level).
  

• Add:
  • Yes: Users can add organizations of the type(s) they have permission to access.
  • No: Users cannot add any organizations.
• Edit or Delete:
  • All: Users can complete the specified action on all organization types that they have permission to View.
  • Mine: Users can complete the specified action on organizations that they have permission to view if they are the account manager or a member of the account team. If the security level permissions include My Territories access, the user can also complete the specified action for organizations assigned to territories to which the user is assigned.
  • None: Users cannot complete the specified action on any organizations.

The listed settings are enabled by default for the following system security levels:

This attribute determines the user's ability to add organization contacts. It does not restrict the user's ability to view or edit contacts that have an association with account types that their Organization & Contact view permissions allow them to see.

• Yes: Users can add contacts.
  
• No: Users cannot add any contacts

The listed settings are enabled by default for the following system security levels:

Organization View permissions are determined by Organization Type access permissions (Security Level).

View, Edit, or Delete:

• All: Users can complete the specified action on all opportunities and quotes associated with organizations that they have permission to View.
• Mine: Users can complete the specified action on opportunities and quotes associated with organizations that they have permission to view if they are the account manager. If the security level permissions include My Territories access, the user can also complete the specified action for organizations assigned to territories to which the user is assigned.
• None: Users cannot complete the specified action for opportunities and quotes associated with any organizations.

Add:

• Yes: Users can add opportunities and quotes for organizations of the type(s) they have permission to access.
• No: Users cannot add any opportunities or quotes to any organizations.

The listed settings are enabled by default for the following system security levels:

View or Edit:

• All: Users can complete the specified action on all sales orders associated with organization types that they have permission to View.
• Mine: Users can complete the specified action on sales orders associated with the organization types that they have permission to view if they are the account manager for the organization or a member of the account team. If the security level permissions include My Territories access, users can also complete the specified action for organizations assigned to territories to which users are assigned.
  
• None: Users cannot complete the specified action on sales orders for any organizations.
  

Add:

• Not applicable. Sales orders are not manually added.

Delete:

• All: Users can complete the specified action on all sales orders associated with organization types that they have permission to View.
  
• Mine: Users can complete the specified action on sales orders associated with the organization types that they have permission to view if they are the account manager for the organization or a member of the account team. If the security level permissions include My Territories access, users can also complete the specified action for organizations assigned to territories to which users are assigned.
  
• None: Users cannot complete the specified action on sales orders for any organizations.

The listed settings are enabled by default for the following system security levels:

View, Edit, or Delete:

• All: Users can complete the specified action for any items associated with an organization type that they have permission to view.
  
• None: Users cannot perform the specified action for any organization.
  

Add:

• Yes: Users can add devices Your Autotask instance may be configured to use one of the following terms instead: Asset, Configuration Item, Installed Asset, Installed Product. and subscriptions for organizations of the type(s) they have permission to access.
  
• No: Users cannot add any devices or subscriptions.

The listed settings are enabled by default for the following system security levels:

View:

• If users cannot view any organization type, the permission is None.
• If the permission is Yes, users can view notes for any organizations of a type that they can view. It is not possible to edit this field.

Add:

• Yes: Users can add a CRM note to any object for any organization that users can view.
• No: Users cannot add any CRM notes.

Edit or Delete:

• All: Users can complete the specified action on all notes associated with organizations that they can access.
• Mine: Users can complete the specified action on notes assigned to them.
• None: Users cannot complete the specified action on any notes.

View:

• If users cannot view any organization type, permission is None.
• If permission is Yes, users can view to-dos for any organization that they can view. It is not possible to edit this field.
  

Add:

• Yes: Users can add a to-do for any organization that users can view.
  
• No: Users cannot add any to-dos.
  

Edit or Delete:

• All: Users can complete the specified action on all to-dos associated with organizations that they can access.
  
• Mine: Users can complete the specified action on to-dos assigned to them.
  
• None: Users cannot complete the specified action on any to-dos.

The listed settings are enabled by default for the following system security levels:

CRM attachment security applies to attachments on organizations, opportunities, sales orders, and devices. Users must have permission to access the parent item to access the associated attachments.

View:

• All: Users can view all attachments added to organizations, opportunities, sales orders, and devices that they can access.
  
• None: Users cannot view any CRM attachments.

Add:

• Yes: Users can add attachments to organizations, opportunities, sales orders, and devices that they can access.
• No: Users cannot add CRM attachments.

Edit:

• All: Users can edit any attachment added to organizations, opportunities, sales orders, and devices that they can access.
  
• Mine: Users can only edit organization, opportunity, sales order, and device attachments that they added.
  
• None: Users cannot edit any CRM attachments.

Delete:

• All: Users can delete any attachment added to organizations, opportunities, sales orders, and devices that they can access.
  
• Mine: Users can only delete organization, opportunity, sales order, and device attachments that they added.
  
• None: Users cannot delete any CRM attachments.

The listed settings are enabled by default for the following system security levels:

About this setting

This option enables you to configure user access to Contact Groups features and management pages. Users with these settings cleared have no access to Contact Group management. To learn more, refer to The Contact Group Manager.

The listed settings are enabled by default for the following system security levels:

Security Level	Permission
Co-managed Help Desk
Minimal Access
Time & Attendance
Team Member
Contractor
Private CRM
Sales
Service Desk User
Project Manager
Dashboard User
Manager
System Administrator, Full Access User
API User

About this setting

Selecting this option will provide users with this security level AND Reports permission access to the CRM category and the Exports section on the > Reports > Report Categories > CRM tab. Refer to Report security settings to learn more.

The listed settings are enabled by default for the following system security levels:

Security Level	Permission
Co-managed Help Desk
Minimal Access
Time & Attendance
Team Member
Contractor
Private CRM
Sales
Service Desk User
Project Manager
Dashboard User
Manager
System Administrator, Full Access User
API User

About this setting

This setting grants users access to the Device Discovery Wizard. Without this permission, users have no access to the feature. For more information, review our Launching the Device Discovery Wizard article.

The listed settings are enabled by default for the following system security levels:

Security Level	Permission
Co-managed Help Desk
Minimal Access
Time & Attendance
Team Member
Contractor
Private CRM
Sales
Service Desk User
Project Manager
Dashboard User
Manager
System Administrator, Full Access User
API User

About this setting

This setting empowers users to access and manage quote templates and quote email message templates. This setting does not affect users' ability to change templates assigned to quotes. That permission is controlled by users' Edit permission for the CRM objects Opportunities and Quotes.

The listed settings are enabled by default for the following system security levels:

Security Level	Permission
Co-managed Help Desk
Minimal Access
Time & Attendance
Team Member
Contractor
Private CRM
Sales
Service Desk User
Project Manager
Dashboard User
Manager
System Administrator, Full Access User
API User

About this setting

Select this option to allow users with this security level to initiate an RMA request from the Device page and Device tables.

The listed settings are enabled by default for the following system security levels:

Security Level	Permission
Co-managed Help Desk
Minimal Access
Time & Attendance
Team Member
Contractor
Private CRM
Sales
Service Desk User
Project Manager
Dashboard User
Manager
System Administrator, Full Access User
API User

About this setting

The users for whom you enable this setting can change an organization's Account Manager, which reassigns the organization to a new owner.

The listed settings are enabled by default for the following system security levels:

Security Level	Permission
Co-managed Help Desk
Minimal Access
Time & Attendance
Team Member
Contractor
Private CRM
Sales
Service Desk User
Project Manager
Dashboard User
Manager
System Administrator, Full Access User
API User

About this setting

Users who have this feature enabled will be able to change the Opportunity Owner on the Edit Opportunity page, which reassigns the opportunity to a new owner.

The listed settings are enabled by default for the following system security levels:

Security Level	Permission
Co-managed Help Desk
Minimal Access
Time & Attendance
Team Member
Contractor
Private CRM
Sales
Service Desk User
Project Manager
Dashboard User
Manager
System Administrator, Full Access User
API User

About this setting

This setting determines if a user can see the Device Mapping section (and its content) in > CRM, as well as the Go to Device Mapping button on the Device widget drill-in table. It also controls page-level security on the Device Mapping page.

This check box is enabled by default for all security levels that have access to CRM and for whom the Datto RMM Integration or the Advanced Datto Integration is active.

The listed settings are enabled by default for the following system security levels:

Security Level	Permission
Co-managed Help Desk
Minimal Access
Time & Attendance
Team Member
Contractor
Private CRM
Sales
Service Desk User
Project Manager
Dashboard User
Manager
System Administrator, Full Access User
API User

About this setting

Enable this feature to allow users to see all organizations in organization picklists and data selectors. Doing so will allow users to search for and create organization-related items for organizations that they do not have permission to view.

IMPORTANT  Do not check this setting if you are creating or editing a restricted security level. Users with this setting selected will be able to see the names, addresses, and phone numbers of all organizations in your Autotask instance.

The listed settings are enabled by default for the following system security levels:

Security Level	Permission
Co-managed Help Desk
Minimal Access
Time & Attendance
Team Member
Contractor
Private CRM
Sales
Service Desk User
Project Manager
Dashboard User
Manager
System Administrator, Full Access User
API User

About this setting

Resources with this security level will see the Erase (Redact) section on the Edit Contact page, and they will be able to redact contacts that they can edit. For more on this feature, refer to Erasing (redacting) contacts and resources.

The listed settings are enabled by default for the following system security levels:

About this setting

Use this setting to define which data should be available to display on the CRM dashboard tabs. The options are: None, Mine (data for the assigned resource), My Territories (all resources in the assigned resource's territory), and All.

The listed settings are enabled by default for the following system security levels: