Record Level Security

In setting up security roles, you control the specific records that a role can access. This is called record level security or row level security. You can also specify the type of access the role has for a group of records: read only, modify only, add/modify, or full.

Specify record level security on the Record Access tab of Settings > Security > Roles.

Record level security works in conjunction with Vantagepoint lookup lists. Each list includes only those records that the user's role is able to access. The user cannot navigate to any records that they do not have permission to access.

Record level security also works in conjunction with the work breakdown structure and other hierarchical structures in Vantagepoint. For example, if a role has access rights to a project (level one of the work breakdown structure), then that role also has access rights to phases (level two) and tasks (level three) of that project. However, if a role only has access to a specific phase of a project, the role can only access tasks within that particular phase.

Examples

For example, the project manager role has full access to the Projects hub, whereas the project consultant role only needs read access to the Projects hub.

In a more complex example, the project manager role has read access to all project records but only has full access to projects for which the user is the assigned project manager.

Access

The Record Access tab of Role Security Settings lists all of the Vantagepoint application areas. For each application area, you can choose one of the following access levels:

  • Read Only: Members of the role can view records but cannot add records, modify existing records, or delete records.
  • Modify Only: Members of the role can view records and edit information, but cannot add new records or delete records.
  • Add/Modify: Members of the role can view, modify, and add records, but cannot delete records.
  • Full: Members of the role can view, add, modify, or delete records.

Access to AI Generated Smart Summaries

Access to the Smart Summaries tool requires both system level access and security role access.

  • Enable system level access using the AI Generated Smart Summaries option on the Options form of General Settings (Settings > General > Options).
  • When you enable system level access, additional options are displayed in the Smart Summaries Access section of the Record Access tab (Settings > Security > Roles). You can then use these options to specify security role access to the Smart Summaries tool for specific forms, such as the Projects form and the Firms form.

For more information, see Access Rights Tab of the Roles Form and Set Up Role Security Access to Smart Summary Previews.

Record Level View

On the Record Access tab, click in the Record Level View field to display the lookup for an application area. Use the lookup to enter criteria that define the records that the role can view.

Record Level Update

On the Record Access tab, click the Record Level Update field to display the lookup for an application area. Use the lookup to enter criteria that define the records that the role can update. The choices that you make here must be consistent with the role's access level. For example, if a role has Read Only access rights to an application area, you cannot then give the role update privileges to records in that application area.