| Permission | Enables | Implications | Related |
| Full access to Utilities > Archive> Accounting. | In this area, a user can archive transactions in finalized accounting months more than two years prior to the current accounting month, to improve system performance and streamline access to more recent data. Although archived data can still be viewed for reference, it cannot be restored to an active state for additional work. For this reason, access should be very limited. |
| Permission | Enables | Implications | Related |
| Full access to Utilities > Attachments > Move Attachments. | This utility enables a user to move a large number of attachments across all accounts from one folder location to another. It should be restricted to users who would likely be responsible for such a large-scale reorganization. |
| Permission | Enables | Implications | Related |
| Release System Locks | Full access to Utilities > Diagnostic > Release System Locks. | In this area, a user can clear system locks resulting from errors as well as valid locks created as part of the concurrency model of the system. In nearly all cases, locks are created only temporarily while a user is in a particular area of the system, such as a policy or transaction. If a user's active lock is cleared, that user's workflow could be interrupted. Therefore, this security right should be restricted to those who are fully aware of the implications of releasing system locks. | |
| Client Sessions | Full access to Utilities > Diagnostic > Client Sessions. | In this area, a user can view all active user sessions as well
as clear a session. Clearing a session might be necessary for
troubleshooting purposes or if a user was accidentally left logged
on in a different location, but clearing an active session means
that all unsaved work will be lost. Access to this utility, therefore,
should be restricted to those who are fully aware of the implications
of clearing a session.
A user with this security right also has access to the Turn On/Off User Lockout action. When user lockout is turned on, only users who are granted the Allow Login During Lockout right under General > Signon are permitted to log into the system, or to stay logged in if they are currently. Any users without the Allow Login During Lockout right will receive a warning two minutes before their sessions close automatically. |
|
| View Other Users' Forgotten Clients | Full access to Utilities > Diagnostic > Forget Clients. | This utility is only applicable to the US market and should not be enabled for the UK or Canadian markets. |
| Permission | Enables | Implications | Related |
| Full access to Utilities > Interface > Cleanup. | In this area, a user can delete all data from all interface tables or from individual interface tables (e.g. Policy Suspense Tables, Communication Log Tables). Interface tables are temporary holding tables, and deleted rows are purged automatically after a maximum of 90 days. The Cleanup utility should only be used in extreme circumstances, and access should be very limited. |
| Permission | Enables | Implications | Related |
| Full access to Utilities > Logins > Reset Password. | In this area, a user can reset the login password for another user. |
| Permission | Enables | Implications | Related |
Attachment View |
Full access to Utilities > Purge > Attachment View. | In this area, a user can view existing settings for Attachment Purge jobs. This right may be useful for auditing purposes, as it can help a user determine whether a missing attachment in the system may have been purged. | |
Attachment Execute |
Full access to Utilities > Purge > Attachment Execute. | In this area, a user can execute an Attachment Purge job. Purged attachments are permanently deleted from your system and cannot be restored under any circumstances. For this reason, access should be extremely limited. | Granting this permission also grants the permissions covered by the Attachment View right (to view existing settings for Attachment Purge jobs). |
Renewal Commission Data View |
View-only access to Utilities > Purge > Renewal Commission Data. | In this area, a user can view Renewal Commission Data purge jobs. Access to this area should be limited to users who run the Verify Policy Renewal Commission Agreements report for auditing purposes. | |
Renewal Commission Data Execute |
Full access to Utilities > Purge > Renewal Commission Data. | In this area, a user can create and run Renewal Commission Data purge jobs. Users with this right can purge behind-the-scenes audit data used by the Verify Policy Renewal Commission Agreements report. Because this utility permanently deletes data used to track changes that the system has made to commission agreements on renewed policies, access should be extremely limited. | Users must also be granted the Renewal Commission Data View right under Utilities > Purge. |
Personal Information |
Full access to Utilities > Purge > Personal Information | Brokerages in the United Kingdom use this utility to purge contact details from client accounts in compliance with GDPR requirements. This functionality is not applicable to Canadian brokerages. | . |
| Permission | Enables | Implications | Related |
| Workload Reassignment | Access to Utilities > Reassign > Workload Reassignment. | Access to the Workload Reassignment utility should only be granted to managerial personnel with a thorough understanding of how the utility works. | In order to run the Employee Workload report, the user must also be granted the Employee Workload Report right under Utilities > Reassign. |
| On Demand Employee Workload Report | Run the On Demand Employee Workload report available in Utilities > Reassign > Workload Reassignment. | Access to this report should only be granted to users who would have a need to view other employees' workload information. | Users with this right can access the Workload Reassignment screen in order to run the Employee Workload report, but are unable to run the Workload Reassignment utility unless also granted the Workload Reassignment right under Utilities > Reassign. |
| View Workloads Regardless of Structure | Generate Employee Workload reports for employees outside one's own agency/branch. | This right should only be granted to managerial personnel that are allowed to view client data across all agencies in the system. | Users must also be granted the Workload Reassignment and Employee Workload Report rights under Utilities > Reassign. |
| Reassign Workloads Regardless of Structure | Reassign workloads to employees outside one's own agency/branch. | This enables the user to reassign servicing roles for clients, lines of business, or claims, regardless of the agencies/branches associated to the entities. This right should be restricted to managerial personnel who can make decisions across multiple agencies and branches. | Users must also be granted the Workload Reassignment right under Utilities > Reassign. |
| Default Workload Criteria Selections to All | Use the Default to ‘All’ Selected link label when selecting reassignment criteria. | This right enables the user to set all Criteria Selections to All on the Reassignment Detail screen, rather than making deliberate selections for each criterion. When granting this right, be aware that setting the criteria to All rather than reviewing and verifying each one increases the risk of making inaccurate selections for the reassignment. | Users must also be granted the Workload Reassignment right under Utilities > Reassign. |
| Producer/Broker Reassignment | Access to Utilities > Reassign > Producer/Broker Reassignment. | This right enables the user to access the Producer/Broker Reassignment utility, set up and preview a reassignment, and access the On Demand Pr/Br Workload Report to view reassignments that have already been run. | Organizations that have enabled Share Revenue, either currently or at any point in the past, cannot use this utility. |
| Run Producer/Broker Reassignment | Run the Producer/Broker Reassignment. | Running this utility reassigns policies from one producer/broker to another, removing any existing commission agreements. This action cannot be undone. Because this utility changes policy and commission information in your system, access should be limited to managerial personnel with the authority to modify commissions and a thorough understanding of the utility. | Users must also be granted the Producer/Broker Reassignment right under Utilities > Reassign. |
| Delete Producer/Broker Reassignment Workloads and Audits | Delete Producer/Broker Reassignments. | Deleting a producer/broker reassignment also deletes the On Demand report detailing the policies reassigned. Because this report provides an important record of changes made to your data, permission to delete it should be limited. Deleting reassignments is discouraged, except for those that have not been run. | Users must also be granted the Producer/Broker Reassignment right under Utilities > Reassign. |
| Permission | Enables | Implications | Related |
| Rebuild GL Balances | Full access to Utilities > Rebuild > Rebuild GL Balances. | This utility should only be run when an agency notices an out-of-balance situation, and only under the supervision of Applied Systems Support. All users must be out of the system in order to run the utility. It enables the user to diagnose potential issues prior to rebuilding General Ledger balances for an agency. Because this can affect a huge amount of data, access should be very limited. |