Security Options - Configure

Please keep in mind that changes made in the Configure area can have system-wide effects. Typically, only management and IT personnel are granted rights to this area.

Account

Permission	Enables	Implications	Related
Account Name	Full access (view and edit) to Configure > Account > Account Name.	Users can determine how employee and individual client account names are created (i.e. whether to use an entity's middle name and whether to use all or only certain prefixes/suffixes).
Account Sources	Full access (view and edit) to Configure > Account > Account Sources	Users can create, modify, and delete account sources to help track where new clients are coming from. These sources populate the Account Source dropdown menu in Account detail and the Source dropdown menu in Opportunity detail. They are typically used for reporting purposes.
Agency Defined Categories	Full access (view and edit) to Configure > Account > Agency Defined Categories.	Users can create, modify, and delete agency defined categories, which can be applied to any or all entity types in Applied Epic. These categories are typically used for reporting and marketing purposes.
Auto Capitalization	Full access (view and edit) to Configure > Account > Auto Capitalization	Users can enable or disable Auto Capitalization for proper name fields throughout the system and set up Auto Capitalization rules (for example, to capitalize after hyphens and spaces or after common prefixes like Mc and O’).
Contact Classifications	Full access (view and edit) to Configure > Account > Contact Classifications.	Users can create, modify, and delete contact classifications. Consistent use of these classifications significantly affects reporting workflows as well as users' ability to select contacts throughout the system (such as when identifying named insureds on a policy).	To assign contact classifications to activity categories, the user must be granted access to Categories under Configure > Activity.
Contact Descriptions	Full access (view and edit) to Configure > Account > Contact Descriptions.	Users can create, modify, and delete address descriptions and contact descriptions, as well as enable and disable field validation for the Address Description and Contact Description fields. Enabling field validation means that only the descriptions listed in Configure are available entries for this field. Disabling field validation means that anything can be entered in the field.
Contact Languages	Full access (view and edit) to Configure > Account > Contact Languages.	Users can determine which languages are available for selection as a contact's primary language and for attachment templates.
Define Relationships	Full access (view and edit) to Configure > Account > Define Relationships.	Users can create, modify, and delete relationship types. This includes defining both roles in a relationship as well as inactivating or reactivating a relationship type.	Any user granted this right should also be granted the Type Assignment On Demand Report right under Configure > Account. It is advisable to run this report to determine whether and where a relationship type is being used before modifying or deleting the relationship type.
DNC Subscription Information	Full access (view and edit) to Configure > Do Not Call > Subscription Information.	Users with this right can view and edit subscription information to Do Not Call lists. Because of legal compliance ramifications and because this area should rarely be used, access should be extremely limited.
DNC Update Schedule	Full access (view and edit) to Configure > Do Not Call > Update Schedule.	Users with this right can determine how often the Do Not Call list is applied to contact information throughout the system, updating DNC labels (which indicate that a phone number is included on the DNC list and that there is not a pre-existing business relationship). Because of legal compliance ramifications and because this area should rarely be used, access should be extremely limited.
Duplicate Account Check	Full access (view and edit) to Configure > Account > Duplicate Account Check.	Users can determine whether duplicate account checks are performed when a new account is added to each of the entity types in Applied Epic. They may also determine what information the system looks at when running the duplicate account check.
Employee Benefits	Full access (view and edit) to Configure > Account > Employee Benefits.	Users can add, edit, inactivate, reactivate, and delete the options that display in the employee benefits lookup fields in on the following screens: Account Detail, Contact Detail, and Policy Information (custom forms only). Users can also set fields to Read-only, which forces other users to select configured dropdown options and restricts them from entering freeform text. Access to this area should be limited because users must adhere to established standards when entering clients’ employee benefits information, and because this area impacts benefits custom forms in the Policy Information section.	Any user granted this right should also be granted the Custom Policy Info right under Configure > Policy as this area contains additional benefits fields that are only found in the Policy Information section.
Edit Compliance Indicators	Full access (view and edit) to Configure > Account > Compliance Indicators.	Users can enable or disable FATCA compliance indicators.
Edit Compliance Status Settings	Full access (view and edit) to Accounts > Compliance Indicators > Update Compliance Status in the Configure area.	Users can update the FATCA compliance status of Company or Broker accounts.
Edit Service Codes	Full access (add, view, edit, delete, print) to Configure > Accounts > Service Codes.	Access to this area should be limited, as the core group of service codes, once established, would not need to be edited often.
View Service Codes	View-only access to Configure > Accounts > Service Codes.	This right allows users to view and print the list of service codes, but it does not enable them to modify the codes.
Identification Codes	Full access (add, view, edit, delete, print) to Configure > Accounts > Identification Codes.	Users can activate or inactivate the Identification Codes available on the Identification Numbers tab in Broker, Company, Employee, Finance Company, Other Interest, or Vendor Detail. This provides you the flexibility to capture a wide variety of identification numbers for different types of entities relevant to you, depending on the location and nature of your business.
Import/Export Contacts	Full access (view and edit) to Configure > Account > Import/Export Contacts.	Users can define mapping files to be using when importing and exporting contacts. It may be beneficial to grant this right to any user who will be importing contacts, as this right enables the user to create a new mapping file in order to import a file that does not quite fit an existing mapping. If the import is always done in a consistent manner, however, you may wish to limit the number of users who may edit mapping files.
Import Prospects	Full access (view and edit) to Configure > Account > Import Prospects.	Users can define mapping files to be using when importing prospects. It may be beneficial to grant this right to any user who will be importing prospects, as this right enables the user to create a new mapping file in order to import a file that does not quite fit an existing mapping. If the import is always done in a consistent manner, however, you may wish to limit the number of users who may edit mapping files.
Inactivation Reasons	Full access (view and edit) to Configure > Account > Inactivation Reasons.	Users can add, edit, and delete inactivation reasons. The number of users who can access this area should be limited, as consistent use of inactivation reasons has a significant effect on reporting workflows.
Individual Name Prefixes	Full access (view and edit) to Configure > Account > Individual Name Prefixes.	Users can add, edit, and delete prefixes available when adding entities and contacts in Applied Epic. In order to avoid duplicate entries or inconsistent spelling, the number of users who can access this area should be limited.
Individual Name Suffixes	Full access (view and edit) to Configure > Account > Individual Name Suffixes.	Users can add, edit, and delete suffixes available when adding entities and contacts in Applied Epic. In order to avoid duplicate entries or inconsistent spelling, the number of users who can access this area should be limited.
Occupations	Full access (view and edit) to Configure > Account > Occupations.	Users can add, edit, and delete occupations available when adding entities and contacts in Applied Epic. In order to avoid duplicate entries or inconsistent spelling, the number of users who can access this area should be limited.
Opportunity Products	Full access (add, edit, delete, and view) to Configure > Account > Opportunity Products	Users can add, edit, inactivate/reactivate, and delete the Opportunity Products that populate in the Product type dropdown on the Add an Opportunity screen. Sales staff can use Opportunity Products to categorize opportunities (for example, for related lines of business). Sales Team Managers and the principals of your organization can then use opportunity products as report criteria to track sales performance. Once you have defined your organization’s Opportunity Product options, they will seldom require editing. Therefore, access to this area should be limited.
Opportunity Stage Groups	Full access (add, edit, delete, and view) to Configure > Account > Opportunity Stage Groups	Users can add, delete, edit, and inactivate/reactivate the Stage Groups available for Opportunities in Applied Epic. Sales staff use the stage groups and their associated stages to track the progress of the opportunities in their pipeline. Stage Groups are also crucial for generating accurate report and Dashboard data for Sales Team Managers and the principals of your organization to use in tracking sales performance. Once you have initially set up the Stage Groups to correspond to particular sales processes within your organization, they will seldom require editing. Therefore, the number of users who can access this area should be limited.
Opportunity Stages	Full access (add, edit, delete, and view) to Configure > Account > Opportunity Stages	Users can add, delete, edit, and inactivate/reactivate the Stages available for Opportunities in Applied Epic. Sales staff use the stages and their associated probabilities to track the progress of the opportunities in their pipeline. Stages and probabilities are also crucial for generating accurate report and Dashboard data for Sales Team Managers and the principals of your organization to use in tracking sales performance. Once you have initially set up the Stages to correspond to the stages of your organization’s sales process, they will seldom require editing. Therefore, the number of users who can access this area should be limited.
Opportunity Unsuccessful Reasons	Full access (view and edit) to Configure > Account > Opportunity Unsuccessful Reasons	The reasons entered here are available for selection when an opportunity is closed as Lost. Because maintaining a standard list of unsuccessful reasons is necessary to monitor sales performance effectively via reporting workflows, the number of users granted this right should be limited.
Sales Team	Full access (view and edit) to Configure > Account > Sales Teams	Users can add, edit, delete and inactivate/reactivate the Sales Teams available in Applied Epic. Organizing your sales staff into Sales Teams and designating the appropriate users as Sales Managers ensures effective, accurate tracking of sales performance against individual and team targets, as well as giving Sales Team Managers access to their teams’ Dashboards. Because the makeup of your organization’s sales teams is not likely to change on a routine basis, the number of users who can access this area should be limited.
Servicing Roles	Full access (view and edit) to Configure > Account > Servicing Roles.	Users can add, edit, and delete servicing roles available for employees entered in Applied Epic. The servicing roles associated to an employee affect that employee's ability to be used in various workflows across Accounts, Policies, and Claims. Access to this area should be limited, as it is likely that the servicing roles available in an organization, once established, would not often be subject to change.
States/Provinces	Full access (view and edit) to Configure > Account > States/Provinces.	Users can add, edit, and modify states and provinces available for use in the system. Access to this area should be limited, as users will rarely need to add, delete, or modify a state or province.
System Settings	Full access (view and edit) to Configure > Account > System Settings.	Access to this area should be limited, as the settings established here affect system functionality for all users.
Telephone Country Codes	Full access (view and edit) to Configure > Account > Telephone Country Codes.	Users can add, edit, or modify international country codes. Access to this area should be limited, as users will rarely need to add, delete, or modify a country code.
ZIP/Postal Codes	Full access (view and edit) to Configure > Account > ZIP/Postal Codes.	Users can add, edit, or modify the ZIP/postal codes available when entering addresses in the system. Access to this area should be limited, as users will rarely need to add, delete, or modify these codes and their associated cities.
Type Assignment On Demand Report	Run the Type Assignment On Demand Report available from Configure > Account > Define Relationships.	The Type Assignment On Demand report displays all accounts currently linked by the selected relationship type, along with the role of each account.	In order to access the report, the user must also be granted the Define Relationships right under Configure > Account. Any user with the Define Relationships right should also be granted the Type Assignment On Demand Report right, because users should run this report to determine whether a relationship type is in use before modifying or deleting the relationship type.

Accounting

Permission	Enables	Implications	Related
Accounting Methods	Full access (view and edit) to Configure > Accounting > Accounting Methods.	Access to this area should be limited, as the accounting settings established here (on a per-agency basis) have an impact in many areas throughout the system. This area is typically only used if a new agency is added to the system or if a new core accounting functionality is delivered with an update.
Allocation Entries	Full access (view and edit) to Configure > Accounting > Allocation Entries.	In this area, a user can define allocation methods and structure groupings that determine how the amounts for certain items (disbursements, vouchers, journal entries, receipts) are allocated across different structures when the Get Allocation link label is accessed in the General Ledger. Because a link to these allocation methods/structure groupings is stored in the detail rows that they create when applied in the General Ledger, making significant edits to methods/structure groupings that are in use is not recommended. Access to this area should be limited to personnel who are responsible for configuring allocation entries and who are fully aware of the implications of modifying them.
Chart of Accounts - View	View-only access to Configure > Accounting > Chart of Accounts.	This right allows users to view Chart of Accounts information (including account numbers, types, levels, groups, and associated structures) and to print a list of accounts, but does not enable them to revise the information or to perform any actions available from this screen.
Chart of Accounts - Edit	Full access (add, view, edit, delete, print, inactivate/reactivate, define bank account, associate structures to accounts) to Configure > Accounting > Chart of Accounts.	Rights to edit this area should be restricted, as users would only need to modify the Chart of Accounts if a new agency were added to the system, if a new core accounting functionality delivered with an update necessitated new required accounts, or if a new General Ledger account needed to be defined for tracking details. Access to this area is not necessary in order to add new subaccounts when brokers, companies, or producers are added. Adding the broker/company/producer to the system automatically creates the General Ledger subaccount. Access to this area is also not necessary in order to use the Modify GL Subaccount action available from broker, company, or employee detail. That security right is located under General > General.
Chart of Account Groups - View	View-only access to Configure > Accounting > Chart of Account Groups.	This right allows users to view and print the list of Chart of Accounts groups, but does not enable them to edit group information.
Chart of Account Groups - Edit	Full access (add, view, edit, delete, print) to Configure > Accounting > Chart of Account Groups.	The Chart of Accounts groups are not often modified once established, so edit rights for this area should be restricted.
Check Layout	Full access (add, view, edit, delete, revert to default) to Configure > Accounting > Check Layout.	Relatively limited access should be granted for this area. Users typically would only modify the stock template used when printing checks if a new bank account were procured that required a check output different from what was previously established.
Default/Recurring Entries	Full access (add, view, edit, delete, copy, inactivate/reactivate, run On Demand Default/Recurring Entries report) to Configure > Accounting > Default/Recurring Entries.	This security right does not control which users can use the default/recurring entries in the General Ledger. However, a user without this right is unable to use the Add as Default Entry link available when adding a disbursement, journal entry, or voucher in the General Ledger.
GL Opening Balances	Full access (view, edit, run On Demand GL Opening Balances report) to Configure > Accounting > Default/Recurring Entries.	Access to this area should be limited, as the actions available here are typically only performed when a new agency is added to the system.
GL Schedules	Full access (add, view, edit, delete) to Configure > Accounting > General Ledger Schedules.	Access to this area should be limited, as the core group of General Ledger schedules, once established, would not be edited often. Even with this security right, users are unable to add new General Ledger schedules from within the General Ledger.
Government Tax/Fee Rates - View	View-only access to Configure > Accounting > Government Tax/Fee Rates. Permission to print the list of government tax/fee rates.	The rates entered here determine how taxes and fees payable to the government are generated when billing certain policy types in certain issuing locations.
Government Tax/Fee Rates - Edit	Full access (add, edit, delete, copy) to Configure > Accounting > Government Tax/Fee Rates.	Because the rates used when generating taxes and fees are designed to adhere to government standards and will not often require change, access to edit tax/fee rates should be restricted.
Import/Export	Full access (add, view, edit, delete, copy mapping file, export blank template) to Configure > Accounting > Import/Export.	A single security right provides access to the Direct Bill Import, General Ledger Export, GL Budget Import, Payment Transmission File Export, and Receipt Import sub-areas. Because accounting import/export files should generally follow consistent formats, and because users without this security right can still use the mapping files to perform imports and exports in the General Ledger area, you may wish to limit the number of users who are granted this right.
Installment Plans	Full access (add, view, edit, delete) to Configure > Accounting > Installment Plans.	Access to this area should be limited, as the core group of installment plans, once established, would not be edited often.
Invoice Layouts	Full access (add, view, edit, delete, copy, reassign, revert to default) to Configure > Accounting > Invoice Layouts.	Access to this area should be limited, as the core group of invoice layouts, once established, would not be edited often.
Maximum Write-offs	Full access (view and edit) to Configure > Accounting > Maximum Write-Offs.	Access to this area should be limited. The maximum write-off amounts entered per agency establish the dollar amounts allowable for all users when writing off A/R, premium payable, or producer/broker payable amounts. This area should only be accessed when a new agency is added to the system or when a core accounting functionality delivered in an update requires a new write-off amount.
Message Gallery	Full access (add, view, edit, delete) to Configure > Accounting > Message Gallery.	The messages entered here are available for selection when printing a transaction, invoice, or statement. If you wish to maintain a standard message list, you should restrict most users from accessing this area.
Payment Methods	Full access (view and edit) to Configure > Accounting > Payment Methods.	Brokerages in the United Kingdom use this area to configure licenses for payment vendors with whom they have established a contract to process credit card transactions. This functionality is not applicable to North American organizations.
Payment Vendor Licenses	Full access (add, view, edit, delete, revert to default) to Configure > Accounting > Payment Vendor Licenses.	Brokerages in the United Kingdom use this area to configure licenses for payment vendors with whom they have established a contract to process credit card transactions. This functionality is not applicable to North American organizations.
Receipt for Payment Layout	Full access (add, view, edit, delete, revert to default) to Configure > Accounting > Receipt for Payment Layout.	Access to this area should be limited, as the core group of receipt layouts, once established, would not be edited often.
Required Accounts - View	View-only access to Configure > Accounting > Required Accounts.	This right allows users to view and print the list of required accounts and associated General Ledger accounts, but does not enable them to modify account information or generate subaccounts.
Required Accounts - Edit	Full access (view, edit, generate required subaccounts) to Configure > Accounting > Required Accounts.	Edit rights for this area should be restricted, as the information here determines how Month-End posts to the General Ledger accounts. This area should only be modified when a core accounting functionality delivered in an update necessitates the addition of new required accounts.
Reversal/Void Reasons - View	View-only access to Configure > Accounting > Reversal/Void Reasons.	This right allows users to view and print a list of configured reversal/void reasons, but does not enable them to modify the information.
Reversal/Void Reasons - Edit	Full access (add, view, edit, delete) to Configure > Accounting > Reversal/Void Reasons.	If you wish to maintain a standard list of reversal/void reasons, you should restrict most users from editing this area.
Service Class Codes	Full access (view and edit) to Configure > Accounting > Service Class Codes.	These codes are necessary if the organization will be creating payment transmission files. These codes should not change often.
Statement Layouts	Full access (add, view, edit, delete, reassign, revert to default) to Configure > Accounting > Statement Layouts.	Access to this area should be limited, as the core group of statement layouts, once established, would not be edited often.
System	Full access (view and edit) to Configure > Accounting > System Settings.	Access to this area should be limited, as the settings established here affect system functionality for all users. This area should only be accessed when a core accounting functionality delivered in an update adds a new choice to System Settings.
Transaction Codes - View	View-only access to Configure > Accounting > Transaction Codes.	This right allows users to view and print the list of transaction codes as well as view details for each code, but does not enable them to modify the information.
Transaction Codes - Edit	Full access (add, view, edit, delete, inactivate/reactivate) to Configure > Accounting > Transaction Codes.	Rights to edit this area should be restricted, as the core group of transaction codes, once established, would not be edited often. An exception would be if an update offered new description variables or transaction default characteristics that the user wished to take advantage of.

Activity

Permission	Enables	Implications	Related
Access Levels	Full access (view and edit) to Configure > Activity > Activity Access Levels.	This should be considered in conjunction with user security, as activity access levels determine which users have access to non-public activity and task notes. Rights to each of the activity access levels defined in this area are found under General > Activities.
Amount Qualifiers	Full access (view and edit) to Configure > Activity > Activity Access Levels. Default permission is Deny upon upgrading.	In order to ensure the integrity of reporting data, it is recommended to limit the number of users who are granted this security right.
Categories	View and edit access to Configure > Activity > Categories.	To enable users to add activities and filter activities in reporting workflows efficiently and effectively, Applied recommends that you maintain a standard list of activity categories. Therefore, access to this area should be limited.	To assign contact classifications to activity categories, users must also be granted access to Contact Classifications under Configure > Account.
Inactivate/Reactivate Categories	Use the Inactivate/Reactivate action, available from the Configure > Activity > Categories screen, to modify an activity category.	Because inactivating an activity category currently in use can disrupt workflows, it is recommended to limit the number of users who are granted this security right.	In order to access this action, the user must also be granted the Categories right under Configure > Activity.
View Codes	View activity code information in Configure > Activity > Codes.	Because this area does not contain sensitive information, allowing a user view-only rights has little impact.
Edit Codes	Edit activity codes in Configure > Activity > Codes.	This right allows users to modify existing activity codes but does not allow them to add new codes. It would be advisable to grant more users the Edit Codes right than the Add Codes right, as this enables them to make necessary changes but allows you to maintain a streamlined activity list.	In order to edit codes, the user must also be granted the View Codes right under Configure > Activity.
Add Codes	Add activity codes in Configure > Activity > Codes.	Access to this area should be limited, as the core group of activity codes, once established, would not be edited often.	In order to add codes, the user must also be granted the View Codes right under Configure > Activity. If the user is not also granted the Edit Codes right, the user will be able to enter all detail when adding the code, but will not be able to revise the code once it is added.
Delete Codes	Delete activity codes from the list in Configure > Activity > Codes.		In order to delete codes, the user must also be granted the View Codes right under Configure > Activity. Codes can only be deleted if they have not been used, so this security right should be considered in conjunction with the Inactivate/Reactivate Codes right.
Events	Full access (view and edit) to Configure > Activity > Events.	This right enables the user to configure the system events responsible for triggering activities. This includes determining whether each system event triggers an activity, defining which activity codes are available for the event, and selecting the default activity code for the event. Because follow-up items are very important, the number of users who can modify this information should be limited.
Unsuccessful Reasons	Full access (view and edit) to Configure > Activity > Unsuccessful Reasons.	The reasons entered here are available for selection when an activity is closed unsuccessfully. Because maintaining a standard list of unsuccessful reasons is necessary in order to monitor activities effectively via reporting workflows, the number of users granted this right should be limited.
Inactivate/Reactivate Codes	Use the Inactivate/Reactivate action, available from the Configure > Activity > Codes screen, to modify an activity code.	Because inactivating an activity code currently in use can disrupt workflows (for example, if the code is being used for tracking purposes to monitor a common workflow in Applied Epic), it is recommended to limit the number of users who are granted this security right.
Process Activities	Full access (view and edit) to Configure > Activity > Process Activities.	This security right enables the user to determine, by agency/branch combination, whether activity further actions are automatically processed (scheduled to be processed at a certain time) or manually processed (in the Procedures area), and to schedule the automatic processing. The user may also modify each agency/branch's printer and fax settings as well as determine error report recipients.
Work Groups	Full access (view and edit) to Configure > Activity > Work Groups.	This security right enables a user to add, edit, and delete activity work groups. Organizing your staff into work groups allows employees to share responsibility for routine work items and complete them more efficiently. Limit access to this area to users with insight into the most effective makeup for your organization’s work groups.
Inactivate/Reactivate Work Groups	Perform the Inactivate/Reactivate action in Configure > Activity > Work Groups.	Because inactivating a work group in use can disrupt workflows, limiting access to this action is recommended.	To perform this action, the user must also be granted the Work Groups right under Configure > Activity > Work Groups.

Attachment

Permission	Enables	Implications	Related
Access Levels	Full access (view and edit) to Configure > Attachment > Access Levels.	This should be considered in conjunction with user security, as attachment access levels determine which users have access to non-public attachments. Rights to each of the attachment access levels defined in this area are found under General > Attachments.
Attachment Folders	Full access (view and edit) to Configure > Attachment > Attachment Folders.	Folder configuration is system-wide, and it is important to maintain standard attachment organization. Therefore the number of users granted this right should be limited.
Monitor Emails	Full access (view and edit) to Configure > Attachment > Monitor Emails.	Users with this right can set up monitoring for generic email addresses and associate them to the employees responsible for attaching messages sent to those addresses to the appropriate accounts and policies in the system. Because the settings in this area affect access to email addresses shared by multiple employees, this right should be limited.
Paper Types	Full access (view and edit) to Configure > Attachment > Paper Types.	This enables the user to add, edit, and delete paper types used in printing, and to determine which printers use that type of paper. Because a number of different printers may be used across different departments, it is advisable to make sure enough people are granted this right to effectively keep the area up to date.
Scanned Documents	Full access (view and edit) to Configure > Attachment > Scanned Documents.	Users with this right can determine the length of time that "recycled" unrouted attachments are retained in the system before being purged, and the length of time that information on scanned items is retained in Batch Scan History. They may also determine whether new scanned attachments are saved in TIF or PDF format.
System Generated Attachments	Full access (view and edit) to Configure > Attachment > System Generated Attachments.	Users with this right can determine the folder locations where system generated attachments are saved, as well as the security level of each type of attachment. Because it is important to adhere to established standards when storing system generated attachments, access to this area should be limited.
System Settings	Full access (view and edit) to Configure > Attachment > System Settings.	On this screen, users can determine whether client attachments throughout the system can be made available to insureds using Applied CSR24 Self Service. Because this setting applies only to organizations using both Applied Epic and Applied CSR24 and because it is unlikely that the setting would be changed often, access to this area should be restricted.
Templates	Full access (view and edit) to Configure > Attachment > Templates.	Because template configuration affects the system's output, and because specific workflows are necessary for the integration of templates with custom forms and supplemental screens, consistency in this area is very important. Therefore, the number of users granted this right should be limited.
Template Folders	Full access (view and edit) to Configure > Attachment > Template Folders.	It is important to adhere to a common practice when storing templates so that users can easily see what templates are available for use in the system. Access to this area, therefore, should be limited, possibly in conjunction with the Templates right under Configure > Attachment.

Auditing

Permission	Enables	Implications	Related
System Settings	Full access (view and edit) to Configure > Auditing > System Settings.	Access to this area should be limited, as the settings established here affect system functionality for all users. In general, you will only need to edit these settings when an update to Applied Epic expands core auditing functionality.

Interface

Permission	Enables	Implications	Related
Company	Full access (view and edit) to Configure > Interface > Company.	In this area, a user may perform all necessary setup for companies and brokers from whom the agency will be downloading. Users can configure a company for Direct Bill Commission Download, Automated Download Invoicing, Claims download, and/or eDocs & Messages download.
Mailbox	Full access (view and edit) to Configure > Interface > Mailbox.	In this area, a user may add, edit, delete, or activate/inactivate your organization’s mailbox account information. This mailbox information is required for processing download files into the system. Users can also specify whether download files are processed instantly or on a scheduled basis for each mailbox and download type.
Change Mailbox Password	Access to the Change Password button in Configure > Interface > Mailbox.	This right enables a user to update a mailbox password simultaneously in both Applied Epic and Applied Ivans Exchange. Keeping a mailbox password in sync prevents mismatched passwords between the two systems, which can result in download errors. Because this option impacts passwords in Applied Ivans Exchange as well as download file processing in Applied Epic, access should be limited.	To perform this action, the user must also be granted the Mailbox right.
Message Class	Full access (view and edit) to Configure > Interface > Message Class.	This right enables a user to add, edit, and delete message class codes used in download. Because this can affect how/if downloads are received, it is recommended that you contact Applied Systems Support before making any changes in this area.
System Settings	Full access (view and edit) to Configure > Interface > System Settings.	Users can configure many organization-level Interface settings in this area. These settings include the location of the Interface Files folder, data retention time, Communication Log layout, and Suspense Safe Mode. Users can also specify whether to allow Download to update existing policies with the downloaded issuing company, update In-Process policies, out-of-sequence Service Summary rows automatically, or reprocess suspense files. Because this area has wide-ranging impact to Interface functionality in your system, access should be restricted.

Email

Permission	Enables	Implications	Related
System Settings	Full access (view and edit) to Configure > Email > System Settings.	In this area, a user can determine whether Epic Email or Microsoft Outlook defaults for email workflows system-wide, or whether users can make this selection on an individual basis. Access to this area should be limited, as the settings established here affect email functionality for all users.
Branding Profiles	Full access (view and edit) to Configure > Email > Branding Profiles	In this area, a user can create new branding profiles or edit existing ones. Branding profiles allow you to create a custom header and footer for use by users in different roles or offices. Access to this area should be limited to users who are well-versed in your organization's branding standards and have the authority to create branding profiles for others to use when sending email.	To view or edit an email template, the user must be grated the Email Templates right.
Email Templates	Full access (view and edit) to Configure > Email > Email Templates	In this area, a user can create new email templates or edit existing ones. These templates can be used for common workflows. If necessary, the user can incorporate an existing branding profile and/or email signature into a template. Access to this area should be limited to users who you want to be able to create and manage email templates.	To view or edit a branding profile, the user must be granted the Branding Profiles right.
Email Events	Full access (view and edit) to Configure > Email > Email Events	In this area, a user can associate existing email templates to Email Events, which correspond to common distribution workflows, and optionally select an email template as the default for each event. Access to this area should be limited to users who are familiar with your organization’s templates and can make informed decisions about the templates to associate to each Email Event.
Applied Pay Email	Full access (view and edit) to Configure > Email > Applied Pay Email	In this area, a user can edit the template for the email message generated by the Email Payment Link action when a user takes a payment with Applied Pay.	Your organization must have an Applied Pay subscription to use this feature.

International

Permission	Enables	Implications	Related
Regional Settings	Full access (view and edit) to Configure > International > Regional Settings.	Settings established in this area are system-wide and include default country, default language, and default date/time formats. Selections made here determine how screens display throughout Applied Epic. Because it is not likely that this area would need to be visited more than once, access should be restricted.

Job Management

Permission	Enables	Implications	Related
DDO Email	Full access (view and edit to Configure > Job Management > DDO Email.	This feature allows you set Applied Epic up to distribute a file in its native format when distributing through email.
DMS Email	Full access (view and edit) to Configure > Job Management > DMS Email.	This right enables the user to view and modify agency-level settings for emails sent via Applied Epic's Distribution Manager. Information entered here affects all emails sent, so access to this area should be limited.
Fax Cover Pages	Full access (view and edit) to Configure > Job Management> Fax Cover Pages.	Users with this right can add, edit, or delete fax cover pages and determine which is the default cover page. This includes the right to edit the cover page in Microsoft Word. Because this affects the system's output, consistency in this area is very important. Therefore, the number of users granted this right should be limited.
Fax Setup	Full access (view and edit) to Configure > Job Management > Fax Setup.	This area focuses on the configuration of the Fax Services Client and its connection with the Applied Epic product database. This setup is highly technical and would be accessed only by users with specific roles.
Data Service Network Path	Full access (view and edit) to Configure > Job Management > Data Service Network Path.	This right enables the user to define network paths that are accessible within the system and to determine which Data Service Clients are able to access them. Workflows that take advantage of the Data Service Client require the selection of one of the network paths defined in this area.
Data Service Setup	Full access (view and edit) to Configure > Job Management > Data Service Setup.	This right enables the user to select Data Service Clients that are accessible to be used within the system. Administrators responsible for managing the Data Service Clients should be granted access to this area.
Queues	Full access (view and edit) to Configure > Job Management > Queues.	This enables the user to add, edit, and delete job queues, as well as determine the primary queue for the system. Because modifications to queues and their capacities can have an impact on system performance, access to this area should be limited.

Leads Inbox

If you receive leads from a vendor partner or your own data capture platform, you must set up an integration using Applied Fortus before you can begin using Leads Inbox. Contact your Applied Sales representative for more information.

Permission	Enables	Implications	Related
Import Rules	Full access to Configure > Leads Inbox > Import Rules.	Users with this right can add, edit, or delete the rules used to update account, quote, and/or policy fields when leads are imported into the system. Your organization must configure a Default Rule before you can begin importing leads. Because these rules have broad impact on automated changes made to account information by imported leads, access to this area should be limited.
Automated Actions	Full access to Configure > Leads Inbox > Automated Actions.	Users with this right can specify which leads (by Initial Quote Status) import into the system automatically. They can also determine if and when the system archives leads automatically and when the system purges leads automatically. Because these settings have a broad impact on the system’s handling of incoming leads and can result in the permanent deletion of lead information, access to this area should be limited.
Duplicate Check	Full access to Configure > Leads Inbox > Duplicate Check.	Users with this right can define the thresholds for identifying an existing account as a potential duplicate when a lead is imported, and for merging an incoming lead into an existing account automatically. They can also define the criteria used to identify potential matching accounts. Because these settings determine when the system makes automated changes to account information and affect lead processing workflows for many users, access to this area should be limited.

Links

Permission	Enables	Implications	Related
Groups	Full access (view and edit) to Configure > Links > Groups.	Users with this right can add, edit, or delete groups of logins and determine which links those groups are able to access.
Links	Full access (view and edit) to Configure > Links > Links.	Users with this right can define links that are used to access websites or external applications from within the system. They may also determine which areas of the system the link will be accessible from, as well as which groups (defined in Configure > Links > Groups) can access the link.

Policy

Permission	Enables	Implications	Related
ACORD Form Print Default	Full access to Configure > Policy > ACORD Form Print Default.	In this area, a user may edit the system-wide preference for sectional or standalone forms individually for the lines of business that support both the sectional and standalone approach. Since these options will control which ACORD forms are selected to print within the distribution workflows, changing this option often is not recommended, as users will become accustomed to the default setting. Even though they may manually change which forms will be printed each time forms are distributed, unexpectedly or repeatedly changing the default form selection can result in incorrect/unintended forms submissions.
Additional Coverages	Full access to Configure > Policy > Additional Coverages.	In this area, a user may add, edit, and delete additional coverage codes to be used with particular application details. These codes may be specific to certain issuing companies or may be available for use with all companies.
Additional Parties Description	Full access to Configure > Policy > Additional Parties Description.	In this area, a user may add, edit, or delete descriptions available to define the roles of additional parties for claims. These descriptions are selected from the Involvement field on the Additional Parties screen within a claim. Users may also disable or enable field validation. If field validation is enabled, only descriptions from this list may be entered in the Involvement field.
Adjustors	Full access to Configure > Policy > Adjustors.	In this area, a user may add, edit, or delete adjustors available for selection when adding a claim. The contact information entered on this screen defaults onto the claim when the adjustor is selected.
Billing Plan	Full access to Configure > Policy > Billing Plan.	In this area, a user may add, edit, or delete billing plan descriptions. These descriptions are available for selection from the Billing Plan field on the Billing tab in line detail.
Claim Codes	Full access to Configure > Policy > Claim Codes.	In this area, a user may add, edit, or delete the claim codes available for selection when a claim is added. These codes classify claims for searching and reporting purposes.
Claim Types	Full access to Configure > Policy > Claim Types.	In this area, a user may add, edit, or delete claim types available for selection when a claim is added and edit their claim code associations.
Commission/Premium Calculations	Full access to Configure > Policy > Commission/Premium Calculations	In this area, a user may enable or disable Commission/Premium Calculations and specify criteria for when these calculations will run.
Commission Class Codes	Full access to Configure > Policy > Commission Class Codes	In this area, a user may add, edit, delete, or inactivate/reactivate commission class codes.
Custom Form Export	Full access to Configure > Policy > Custom Form Export.	In this area, a user may add, edit, delete, or inactivate/reactivate custom form templates.
Custom Forms	Full access to Configure > Policy > Custom Forms.	In this area, a user may add, edit, or delete forms that capture data for custom lines of business. The forms can contain common screens (such as Additional Interests or Remarks) as well as screens created by the user via the Screen Generator tool. Users with this right may also install and inactivate or reactivate custom forms.
Custom Policy Info	Full access to Configure > Policy > Custom Policy Information.	In this area, which is only applicable to brokerages using custom forms, a user may edit a custom form’s Policy Information section, activate or inactivate the Detail frame section, and/or mark the form Read only.	Any user granted this right should also be granted the Employee Benefits right under Configure > Account as this area contains additional benefits fields that are found within the Account detail and/or Contact details screens and the Policy Information section.
Document View	Full access to Configure > Policy > Document View.	In this area, a user may add, edit, or delete document views and map the worksheets and columns associated with them.
Forms & Endorsements	Full access to Configure > Policy > Forms & Endorsements.	In this area, a user may add, edit, or delete forms and endorsements available for selection from the Forms & Endorsements link in policy detail.
GL Class Codes	Full access to Configure > Policy > GL Class Codes.	In this area, a user may add, edit, or delete General Liability Hazard Class codes and descriptions. These codes display in the Class Code lookup on the Hazards form in policy detail for a General Liability policy.
Import/Export Risks	Full access to Configure > Policy > Import/Export Risks.	This enables a user to add, edit, or delete mapping files used to import risks onto policy applications and forms. Each mapping file added defaults to include all available fields for the selected risk type and application detail, so it is unlikely that much adjustment will need to be done in this area unless a custom mapping file is needed.
Integration	Full access to Configure > Policy > Integration.	In this area, a user may add, edit, or delete integrations between custom forms and ACORD forms. Access should generally be restricted to people responsible for the creation/implementation of custom forms to ensure that the fields are properly integrated in accordance with the information collected.
Marketing Carrier Responses	Full access to Configure > Policy > Marketing Carrier Responses.	In this area, a user may add, edit, or delete detail for marketing carrier responses, which allows the agency to better track reasons carriers gave certain responses. These items are available in the Description field to the right of the Carrier response dropdown menu when adding a carrier response and in Carrier Response Detail.
Marketing Client Responses	Full access to Configure > Policy > Marketing Client Responses.	In this area, a user may add, edit, or delete marketing client responses, allowing the agency track reasons clients declined or accepted coverage. These selections are available in the Client response field in Carrier Response Detail.
Marketing Submission Statuses	Full access to Configure > Policy > Marketing Submission Statuses.	In this area, a user can add, edit, or delete marketing submission statuses. These selections are available in the Submission Status dropdown menu when creating a carrier submission for a marketed policy.
Policy Type Classification	Full access to Configure > Policy > Policy Type Classifications.	In this area, a user may add, edit, or delete policy type classifications, which allow multiple policy types to be grouped together under the same description. A system can be set up to post income by policy type classification. If this is the case, modifications made to the classifications have a significant impact on the Income Statement report.
Prefills	Full access to Configure > Policy > Prefills.	In this area, a user may add, edit, or delete prefills that can be used to default information into an application. Prefills can be state- or province-specific or non-state- or non-province-specific.
Proposal Groups	Full access to Configure > Policy > Proposal Groups.	In this area, a user may add, edit, or delete groups of proposal templates and documents. These groups are available for selection when an On Demand proposal is created and prevent the user from having to select each template/document individually.
Renewals Manager Events	Full access to Configure > Policy > Renewals Manager Events	In this area, a user may determine the renewal stage that defaults when a policy is created.
Renewals Manager Settings	Full access to Configure > Policy > Renewals Manager Settings	In this area, a user may add, edit, delete, or inactivate/reactivate the Renewal Stages available for selection in Renewals Manager. These stages indicate a policy’s progress in the renewal process.
Sources	Full access to Configure > Policy > Sources.	In this area, a user may add, edit, or delete options available from the Source dropdown menu during the Add a policy workflow and also associate policy types to each Source. The sources entered here are used to run reports or to perform document merges for marketing purposes.
Statuses	Full access to Configure > Policy > Statuses.	In this area, a user may add, edit, delete, or inactivate/reactivate the statuses that may be assigned to a policy or line of business, as well as use the Modify GL Subaccount action to change the GL subaccount associated to a policy status. If the system is configured to post revenue by policy status, the GL subaccounts set here will affect how Month-End posts revenue.
Summary/Proposal Templates	Full access to Configure > Policy > Summary/Proposal Templates.	In this area, a user may add, edit, or delete proposal and summary of insurance templates for different application details, as well as determine which summary of insurance template is the default for each application detail.
Supplemental Screens	Full access to Configure > Policy > Supplemental Screens.	In this area, a user may add, edit, delete, inactivate/reactivate, or install supplemental screens used to capture data not covered by an ACORD or custom form.
System Settings	Full access to Configure > Policy > System Settings.	Access to this area should be limited, as the settings established here affect system functionality for all users.
Types	Full access to Configure > Policy > Types.	In this area, a user may add, edit, delete, or inactivate/reactivate policy/line types. Information that can be modified from this screen includes the policy type code, term default, associated application detail, department/profit center, and classification.
Vehicle ISO Zones	Full access to Configure > Policy > Vehicle ISO Zones.	In this area, a user may add, edit, or delete codes and descriptions for vehicle ISO zones. These zones are available for selection when determining the Farthest terminal option on the Vehicles tab of a Business Auto application.
Vehicle Make & Model	Full access to Configure > Policy > Vehicle Make/Model.	In this area, a user may add, edit, or delete the vehicle make/model combinations available for selection on Personal Auto and Business Auto applications.
Vehicle Symbol/Age Group	Full access to Configure > Policy > Vehicle Symbol/Age Group.	In this area, a user may add, edit, or delete the codes and descriptions for vehicle symbol/age groups available for selection on the Vehicles tab of a Personal Auto or Business Auto application.
Vehicle Territory	Full access to Configure > Policy > Vehicle Territory.	In this area, a user may add, edit, or delete the codes and descriptions for vehicle territories available for selection on the Vehicles tab of a Personal Auto or Business Auto application.
WC Class Codes	Full access to Configure > Policy > WC Class Codes.	In this area, a user may add, edit, or delete the codes used for rating information on a Workers Compensation policy.

Proofs

Permission	Enables	Implications	Related
Auto IDs	Full access to Configure > Proofs > Auto IDs.	In this area, a user may add, edit, or delete auto ID configurations and determine which card is the default card on a per state basis.
Auto ID Card Options	Full access to Configure > Proofs > Auto ID Card Options.	In this area, a user may determine whether separate PDFs should be created for each auto ID cards (as opposed to having multiple cards per PDF), whether the PDFs should be saved locally, and where the local copies should reside. Because this is a setting that would not be changed often once established, access to this area should be limited.
Binders	Full access to Configure > Proofs > Binders.	This right enables the user to make system-wide decision regarding the configuration and issuing of binders. Because these settings would not be changed often once established, access to this area should be limited.
Certificates	Full access to Configure > Proofs > Certificates.	This right enables the user to make system-wide decision regarding the configuration and issuing of certificates. Because these settings would not be changed often once established, access to this area should be limited.
Holders	Full access to Configure > Proofs > Holders.	In this area, a user may add, edit, or delete holder inactivation reasons.
New York Auto ID License	Full access to Configure > Proofs > New York Auto ID License.	In this area, a user may add or edit license numbers and keys for New York auto ID cards per agency/branch. Access to this area should be limited to personnel responsible for the agency or branch's New York licensing information. Modifying settings on this screen with incorrect data can result in the creation of invalid New York auto ID cards.
CSIO eSlips/eDelivery	Full access to Configure > Proofs > CSIO eSlips/eDelivery.	In this area, a user may add, edit, or delete CSIO eSlips/eDelivery credentials and associate them to branches. These credentials enable users to send eSlips and documents to insureds with the CSIO My Proof of Insurance eDelivery solution. Because these settings will not change often once established, access to this area should be limited.	You must register for a My Proof of Insurance eDelivery account with CSIO using this request form to obtain the credentials you configure in this area.
Evidences	Full access to Configure > Proofs > Evidences.	This right enables the user to make system-wide decision regarding the configuration and issuing of evidences. Because these settings would not be changed often once established, access to this area should be limited.
New York ICC Codes	Full access to Configure > Proofs > New York ICC Codes.	This right enables the user to add, edit, and delete codes used for companies that issue auto policies in New York. Access to this area should be limited to users familiar with New York auto ID requirements. Incorrectly modifying codes on this screen can result in creation of invalid New York auto ID cards.
Liability Certificates	Full access to Configure > Proofs > Liability Insurance Cards.	In this area, a user may add, edit, or delete configurations that determine how Canadian Motor Vehicle Liability cards are printed.
Import/Export	Full access to Configure > Proofs > Import/Export Holders.	Users can define mapping files to use when importing holders. It may be beneficial to grant this right to any user who will be importing holders, as this right enables the user to create a new mapping file in order to import a file that does not quite fit one of the existing mappings. If the import is always done in a consistent manner, however, you may wish to limit the number of users who may edit mapping files.
Types	Full access to Configure > Proofs > Types	Users can define which Certificate Types are available in the system. Because these settings will not change often once established, access to this area should be limited.

Real-Time

Permission	Enables	Implications	Related
Accounts	Full access (view and edit) to Configure > Real-Time > Accounts.	The connection information and settings on this screen are established when a Real-Time account is set up. A user with this security right can run an account update as well as access the Admin utility.
Finance Company	Full access (view and edit) to Configure > Real-Time > Finance Companies.	In this area, a user can add, edit, or delete company contracts and producer subcodes for finance companies installed in the system.
Lines of Business	Full access (view and edit) to Configure > Real-Time > Lines of Business.	In this area, a user can assign an XML line of business code to each line of business code installed in Applied Epic. This is necessary in order for the lines of business to be recognized by Real-Time Interface.
Rate Manager	Full access (view and edit) to Configure > Real-Time > Rate Manager.	In this area, a user can determine Rate Manager settings, including whether activities should be created per quote session or for each carrier quoted, as well as whether the quote results should default as attached to the client in Applied Epic.

Security

Permission	Enables	Implications	Related
Confidential Client Access Groups	Full access (view and edit) to Configure > Security > Confidential Client Access	This enables a user to add, edit, or delete Confidential Client groups. Access to this area should be limited.
Logins	Full access (view and edit) to Configure > Security > Logins.	This right enables a user to add, edit, or delete system logins. The logins' password and sign-on settings are established in this area, as well as the databases available to each login. Users with this right can also run the On Demand User Login report. Access to this area should be limited.	To change another user's password, the user must also be granted the Change Password right under General > General.
Groups	Full access (view and edit) to Configure > Security > Security Groups.	This enables a user to add, edit, and delete security groups, add or delete group members, and determine what security rights are granted to each group. Users with this right can also run the On Demand Security Group Detail report. Access to this area should be limited.	To add, edit, delete, inactivate, or reactivate user accounts, you must have the Logins permission granted. To view individual users' group membership, you must also have the Users permission granted.
Users	Full access (view and edit) to Configure > Security > Users.	This enables a user to modify security settings on a per-user basis. A user's security group membership, security rights, structure access, and bank account access can be viewed or edited from this screen. Users with this right can also run the On Demand User Detail report. Access to this area should be limited.	To change a user's security group membership or control their security settings at the group level, you must have the Groups permission granted.
License Groups	Full access (view and edit) to Configure > Security > License Groups.	This enables a user to add, edit, and delete license groups, add or delete group members, and determine the License limit for each group (which limits the number of concurrent logins available for the group members). License groups should be used when different offices within the organization pay for licenses separately, to prevent those offices from using more licenses than they should be allotted. Users with this right can also run the On Demand License Group Detail report. Access to this area should be limited.
Visibility	Full access (view and edit) to Configure > Security > Visibility.	This enables a user to hide areas of Applied Epic for specific users, or for all users except Enterprise Admins. Visibility settings are not a substitute for the rights granted or denied to users in Security. Because changing these settings can make it difficult or impossible to access some parts of the system, however, access to this area should be limited.

SMS

Permission	Enables	Implications	Related
Events	Full access (view and edit) to Configure > SMS > Events.	This area allows a user to enable and configure SMS Events. To ensure that your organization sends only an appropriate number of texts, limit access to this area to personnel who can make business decisions about the workflows and situations in which SMS messages are necessary.
Numbers	Full access (view and edit) to Configure > SMS > Numbers.	This area enables a user to add, edit, and delete Registered Numbers for use with SMS messaging and configure them for use by employees or structures. Because phone number registration relies on an integration outside of Applied Epic, access to this area should be limited.
System Settings	Full access (view and edit) to Configure > SMS > System Settings.	This area enables a user to enable or disable inbound and outbound SMS messaging system-wide, and to compose and schedule an automatic reply to inbound messages. Because enabling or disabling SMS functionality is a business decision with broad implications for the day-to-day operations of your organization, access to this area should be limited.
Templates	Full access (view and edit) to Configure > SMS > Templates.	This area enables a user to add, edit, and delete SMS message templates and tags for use when employees send text messages. To ensure clear and consistent template organization, access to this area should be limited.

Structure

Permission	Enables	Implications	Related
Organization - View	View-only access to Configure > Structure > Organization.	Users with this right can view and print a list of valid structural organizations but cannot modify the information.
Organization - Edit	Full access (view and edit) to Configure > Structure > Organization.	Users with this right may add or delete the agency/branch/department/profit center combinations that are recognized as valid structural organizations in the system. Because an organization would not often need to modify its structural setup, this right should be restricted.
Agencies - View	View-only access to Configure > Structure > Agencies.	Users with this right can view and print a list of agencies as well as view detail for each agency, but cannot modify the information or perform any actions available from this screen.
Agencies - Edit	Full access (view and edit) to Configure > Structure > Agencies.	This enables a user to add, edit, and delete agencies, as well as perform the Modify General Ledger Subaccount and Modify Initial Month actions available from this screen. Because an organization's structure would not change often, this right should be restricted.
Branches - View	View-only access to Configure > Structure > Branches.	Users with this right can view and print a list of branches and view branch contact information, but cannot make any modifications.
Branches - Edit	Full access (view and edit) to Configure > Structure > Branches.	This enables a user to add, edit, and delete branches. Because an organization's structure would not change often, this right should be restricted.
Departments - View	View-only access to Configure > Structure > Departments.	Users with this right can view and print a list of departments and view department contact information, but cannot make any modifications.
Departments - Edit	Full access (view and edit) to Configure > Structure > Departments.	This enables a user to add, edit, and delete departments. Because an organization's structure would not change often, this right should be restricted.
Profit Centers - View	View-only access to Configure > Structure > Profit Centers.	Users with this right can view and print a list of profit centers but cannot make any modifications.
Profit Centers - Edit	Full access (view and edit) to Configure > Structure > Profit Centers.	This enables a user to add, edit, and delete profit centers. Because an organization's structure would not change often, this right should be restricted.
Regions - View	View-only access to Configure > Structure > Regions.	Users with this right can view and print a list of regions but cannot make any modifications.
Regions - Edit	Full access (view and edit) to Configure > Structure > Regions.	This enables a user to add, edit, and delete regional codes. Because this information would not change often, this right should be restricted.
Organization Contacts - View	View-only access to Configure > Structure > Organization Contacts.	Users with this right can view addresses, phone numbers, fax numbers, email addresses, and websites entered for use by the organization, as well as the agencies, branches, and departments to which they are associated.
Organization Contacts - Edit	Full access (view and edit) to Configure > Structure > Organization Contacts.	This enables users to add, edit, and delete organization addresses, phone numbers, fax numbers, email addresses, and websites and to change their agency/branch/department associations.
Workflow Defaults - View	View-only access to Configure > Structure > Workflow Defaults.	Users with this right can view the organizational contact information set to default per structure combination when various workflows are performed, but cannot modify the information.
Workflow Defaults - Edit	Full access (view and edit) to Configure > Structure > Workflow Defaults.	This enables users to modify the default organizational contact information per structure combination for various workflows. It also grants access to the Copy Workflow Defaults action, which allows the defaults for one structure to be copied to other structures.

User Options

Permission	Enables	Implications	Related
Customize Related Employees' Email Accounts	Use the Employee to edit lookup field in Configure > User Options > Distribution Email Accounts.	Users with this right can modify the name and email address that are visible to the recipient when an employee sends an email through Distribution Manager. This is defined on a per-agency basis. Users with this right will only be able to edit employees with whom they have a relationship. Relationships are defined in employee detail.
Customize Related Employees' Quicklinks	Use the Employee to edit lookup field in Configure > User Options > Customize Quicklinks.	Users with this right will only be able to define Quicklinks settings for employees with whom they have a relationship. Relationships are defined in employee detail.
Customize Related Employees' Sticky Notes	Use the Employee to edit lookup field in Configure > User Options > Customize Sticky Notes.	In this area, a user can establish default sticky note settings for other users, including sticky note color and whether sticky notes should always display when opening a screen. Users with this right will only be able to edit employees with whom they have a relationship. Relationships are defined in employee detail.
Customize Related Employees' Homebases	Use the Employee to edit lookup field in Configure > User Options > Customize Homebase, enabling the five tabs below for editing.	Users with this right will only be able to access employees with whom they have a relationship via the lookup field. Relationships are defined in employee detail.
Field Defaults - View	View-only access to one's own field default settings under Configure > User Options > Field Defaults.	You might wish to deny this right for the sake of simplicity if your organization does not use field defaults.
Field Defaults - Edit	Edit one's own field defaults for numerous workflows.	In order to promote data consistency, you may wish to deny most users the right to edit field defaults.	In order to access this area, a user must also be granted the Field Defaults View right under Configure > User Options.
Field Defaults - Customize Related Employees' Defaults	Edit other users' field defaults for numerous workflows.	In order to promote data consistency, you may wish to deny most users the right to edit field defaults. Users with this right will only be able to edit employees with whom they have a relationship. Relationships are defined in employee detail.	In order to access this area, a user must also be granted the Field Defaults View right under Configure > User Options.
Copy Settings To	Use the Copy Settings To action available in the Quicklinks, Sticky Notes, Field Defaults, Notifications, Print Destination, and Region and Language areas of Configure > User Options.	This action completely overwrites the selected employee's default settings for the applicable area. It is typically used to copy standard settings when setting up a new employee.	In order to use this action in various areas of Configure > User Options, the user must also be granted rights to those areas.
Limits	View and edit others’ Limits in Configure > User Options > Limits.	Users can specify the maximum A/R Write-Off, Client Refund, and Discount amounts or percentages for which each employee is authorized. Access to this area should be limited to personnel with the authority to make these decisions.
Notifications	View and edit one's own Notifications settings in Configure > User Options > Notifications.	You may wish to deny this right to ensure that all users receive notifications for certain events (whether successful or unsuccessful) and are unable to disable them.	Unless the user also has the Edit Restrictions and Print Center rights under Configure > User Options, the Restrictions and Print Center frames are not visible. The Print Center frame is available only in Applied Epic Browser.
Notifications - Customize Related Employees' Notifications	View and edit others' Notifications settings in Configure > User Options > Notifications.	The right to modify other users' notification settings should be limited to administrative personnel. Users with this right will only be able to edit employees with whom they have a relationship. Relationships are defined in employee detail.	Unless the user also has the Edit Restrictions and Print Center rights under Configure > User Options, the Restrictions and Print Center frames are not visible. The Print Center frame is available only in Applied Epic Browser.
Notifications - Edit Restrictions	View and edit the Restrictions frame under Configure > User Options > Notifications.	The controls in this frame determine whether or not a user is able to select the No notification setting when customizing Notifications for oneself or others.
Notifications – Print Center (Applied Epic Browser only)	View and edit the Print Center frame under Configure > User Options > Notifications.	This permission allows users to enable the Send ready-to-print documents to Print Center setting when customizing Notifications for themselves or others. The setting determines whether documents that are ready for printing display in the Print Center or Access > Notifications.	To use Print Center, the user must have the Applied Epic Connection Suite installed.
Print Destination	View and edit one's own printer/tray selections for certain jobs in Configure > User Options > Print Destination if Applied Epic is installed locally.	Only the print setting for the Print Cheques/Reprint Cheques job is editable on the Print Destination screen. If you want all cheques/cheque stubs to print to a single location to protect the sensitive information included, you may want to deny most users this right. The Print Destination screen is only available to users with Applied Epic installed locally on their computers.	To ensure that users cannot change printers when printing/reprinting cheques in the General Ledger, restrict the Change Printer right under General Ledger > Print Cheques as well. Neither the Print Destination screen nor the settings it controls are available to users accessing Applied Epic through a web browser.
Print Destination - Customize Related Employees' Print Destinations	View and edit others' printer/tray selections for certain jobs in Configure > User Options > Print Destination if Applied Epic is installed locally.	Only the print setting for the Print Cheques/Reprint Cheques job is editable on the Print Destination screen. Users can only edit print destinations for employees with whom they have a relationship defined in employee detail, and they can only select a printer installed on the employee’s station as their print destination. The Print Destination screen and the settings it controls are only available to users with Applied Epic installed locally on their computers.	Neither the Print Destination screen nor the settings it controls are available to users accessing Applied Epic through a web browser.
Region and Language	Edit one's own region and language setting defaults.	Selections made in this area determine how screens display throughout Applied Epic for a particular user. Unless your organization services clients in multiple countries, you may wish to restrict this right in order to preserve consistency.
Region and Language - Customize Related Employees' Region and Language	Edit other users' region and language setting defaults.	Selections made in this area determine how screens display throughout Applied Epic for a particular user. Unless your organization services clients in multiple countries, you may wish to restrict this right in order to preserve consistency. Users with this right will only be able to edit employees with whom they have a relationship. Relationships are defined in employee detail.	The user must also be granted the Region and Language right under Configure > User Options.
VINLink Decoder	Edit one's own username and password for VINlink Decoder.	Clicking the lookup button for the VIN field on the Vehicle Description tab of a CSIO auto policy launches the VINLink decoder, which verifies that the VIN number exists and matches the vehicle description. Entering a username and password for a user in VINLink Decoder Configuration automatically send this information to the VINLink website. It is not necessary to enter this information every time the tool is used.
VINLink Decoder - Customize Related Employees' VINLink	Edit other employees' usernames and passwords for VINLink Decoder.	Clicking the lookup button for the VIN field on the Vehicle Description tab of an Ontario, Alberta, or Northwest Territories auto policy launches the VINLink decoder, which verifies that the VIN number exists and matches the vehicle description. Entering a username and password for a user in VINLink Decoder Configuration automatically send this information to the WebVINLink website. It is not necessary to enter this information every time the tool is used. Users with this right will only be able to edit employees with whom they have a relationship. Relationships are defined in employee detail.
Distribution Email Accounts	View access to the Configure > User Options > Distribution Email Accounts screen.	Users with this right can view the Distribution Email Accounts screen. However, users must have at least one of the additional Distribution Email Accounts rights listed below to make any changes on this screen.
Distribution Email Accounts - Distribution Email Details	Full access (view and edit) to the Distribution Email Details frame on the Configure > User Options > Distribution Email Accounts screen.	Users with this right can modify the Associated agency, Display name, and Reply address settings in the Distribution Email Details frame for employees with whom they have a relationship defined in employee detail. Because changes to these settings affect other employees’ use of Distribution Manager, access to this area should be limited.	The user must also be granted the Distribution Email Accounts right under Configure > User Options.
Distribution Email Accounts - Email Servers Settings	Full access (view and edit) to the Mail Server Settings tab on the Configure > User Options > Distribution Email Accounts screen.	Users with this right can modify the SMTP settings for employees with whom they have a relationship defined in employee detail. These settings are required for each employee’s Distribution Email Account, and they enable employees to send email through Distribution Manager, and receive notifications for undeliverable Distribution Manager messages. Because these settings affect other users’ ability to send email as part of routine distribution workflows, access to this area should be limited. The Mail Server Settings tab displays only for users with this right.	The user must also be granted the Distribution Email Accounts right under Configure > User Options.
Distribution Email Accounts - Email Signature	Full access (view and edit) to the Email Signature tab on the Configure > User Options > Distribution Email Accounts screen.	Users with this right can add, edit, or delete their own custom DMS email signatures and signatures used by employees with whom they have a Relationship defined in employee detail (if they also have the Customize Related Employees’ Email Accounts right). Because email signatures reflect your organization’s brand, consistency in this area is important and access should be limited. The Email Signature tab displays only for users with this right.	The user must also be granted the Distribution Email Accounts right under Configure > User Options. To edit other employees' signatures, the user must be granted the Customize Related Employees' Email Accounts right under Configure > User Options.
Email User Setting	Edit one's own email integration option on the Configure > User Options > Email screen	Users with this right can view Email Settings Configuration and make updates to their own setting if User Option Preference is selected from Configure > Email > System Settings. If your organization has enabled the User Option Preference option for your email client, grant this right to all users to allow them to select their preferred email client.	Users with this right can only make changes in this area if User Option Preference is enabled in Configure > Email > System Settings.
Email User Setting - Customize Related Employees’ Email Integration	Edit other users’ email integration options on the Configure > User Options > Email screen	Users with this right can edit other users’ email integration options. If User Option Preference is selected from Configure > Email > System Settings, this option determines the email client that launches for all email-related functionality, except through the Distribution Manager. Access to this area should be granted only to personnel with authority to make system configuration decisions for other users.	To access the screen, the user must also be granted the Email User Setting right under Configure > User Options.