Greentree CRM Security

Greentree Desktop's data security model protects the confidentiality of your data.

User Level

User Level Security is set-up as part of user Maintenance. The CRM security settings are accessed through the CRM button on the User Preferences form. CRM uses the All/Team/Mine concept to control access to records. User level security is defined at the All and Team level, with the Mine view available times. User Preferences allow for:

Allow Security Changes - Determines if the user is authorised to maintain Assign To detail on the Security tab of the Maintenance forms.
Read/Change/ Delete All Records - Determines if the user is authorised to Read /Change/Delete Records, regardless of the user and Team that they are Assigned to. If the User is not authorised to use All records, then the All View will not be available on the Maintenance forms.
Read/Change/ Delete Team Records - Determines if the user is authorised to Read /Change/Delete records assigned to the Users Team(s). If the user is not authorised to use All or Team records, then only the Mine View will not be available on the Maintenance forms.
Can Verify Information - Determines if the user is authorised to Verify information using the Verified tick on the Maintenance forms.
Add My Own Records - Determines if the user is authorised to Add records.
Delete My Own Records - Determines if the user is authorised to Delete records that he is assigned to.
User Scripts - Determines if the user is authorised to use User Scripts.
System Scripts - Determines if the user is authorised to use System Scripts.

The Security hierarchy expands to CRM item level, which allows for authorization per individual CRM item, such as Organisations, Quotes, Calls.

A CRM User must have Read access for an Organisation to create Related records against the Organisation.

User Level - Financial Integration

The Integration tab under User Preferences, CRM button, enables you to indicate which Financial Integration items the user have access to — for example, link a CRM Organisation to AR Customer. This form lists all the CRM to Finance integration features. You must select the required items to authorise User access. CRM Users do not require a license to perform Financial Integration tasks from CRM. However, this feature allows CRM to maintain strict security.

Form Level

All the major forms in CRM contain a Security tab and a View field. The Security tab captures and displays the Assigned User and Team.

Assigned User displays the user that the record is Assigned To.
Assigned Team displays the Teams that the record is Assigned To.

Records are created with the Assigned User/Team defaulting based on:

User Preferences
- Default Assigned User:
  - Module Default: CRM System settings is used.
  - Mine: User defaults to the user who is currently logged in.
  - Unassigned: No default user will be assigned when a new record is created.
- Default Assigned Team:
  - Module Default: CRM System settings is used.
  - Default Team: The default Team for the currently logged in User is used.
  - Unassigned: No default Team will be assigned when a new record is created.
CRM System settings
- Default Assigned User:
  - Mine: Defaults to current user
  - Unassigned: No Security user will be assigned
- Default Assigned Team:
  - My Default Team: Defaults to current users default Team
  - Unassigned: No Security Team will be assigned

The View field contains the All/Team/Mine views that the user is authorised to use, based on User level Security settings. This field determines which records you have access to. These options are available, depending on your User Level Security settings:

All - All database records will be available, no limitation using the Assigned User /Team
Mine - Only the records that you are Assigned To will be available
Team - Only the records that are Assigned To your Teams will be available

The User Login super overrides the View setting, allowing access to all records.