How-To: Assign Program Level Permissions

Certain SC ACD accounts may need to be regulated to view data at the Program level only. When an account is configured this way, the user will be able to view data from assigned programs only.

This article will detail how to:

1. Create the Program Group
2. Add the User to the Program Group
3. Create the Access Control Entry
4. Create the Access Control List
5. Review the Settings

Permissions can be set or modified on any existing SC ACD account. For more details on how to set up an account from scratch, please see the article titled How-To: Create a SC ACD Account. 

 
To set permissions on a user account, you must be logged in as either a Supervisor or an Administrator.

1. Create the Program Group

• Log in to SC ACD
• Click on Administrator in the left-hand navigation bar
  
  
  
• From the Administrator options, click User Groups
   *Your available Administrator options may differ.
  
  
• Click the + New Group button
  
  
  
• From the Group Details tab:
  
  
  • Name: Group name
  • Short Name: Abbreviated group name
  • Suspended (Yes/No): For legacy purposes, user groups can not be deleted. To deactivate a group, set the Suspended setting to Yes.
  • Click Update to save the User Group

2. Add the User to the Program Group

• Click on Agent Management in the left-hand navigation bar
  
  
  
• Click the User Number of the agent your would like to add permissions to
  
  *If a user is not already created, click + New Agent and follow the steps listed here.
  
  
• In the user's profile, click the Groups tab
  
  
• On the Groups tab, click the New Group Assignment dropdown
  
  
  
• Select the User Group that you created in the previous step
  
  Weight does not factor in to Group permissions. It can be left blank, which will result in a weight assignment of 0.
  
  *This account is now joined to the program group as an Agent (default configuration of an account).
  
  
• Click Update to save the Group

If you are adding these permissions to an existing client account, that user may have had the Agent module removed and replaced with the Clients group. If you have created an account from scratch and want to grant only specific program access without the ability to take or make calls, you must do the following:

• Delete the Agents group
  
  
• Click New Group Assignment and add Clients
  
  
• Click Update to save the new Group configuration
  
  

3. Create the Access Control Entry

• Click on Administrator in the left-hand navigation bar
• From the Administrator options, click Access Control Entries
  
  
• Click +New Entry
  
  
  • Description: label (same as program name)
  • Type: [defaults to Permission] We are setting the Program as the control point, so select that option
  • Option: This is the Program ID
    • This assumes that the program has been created. This can be retrieved from the following location:
      Administrator / Program Manager 
      
      Programs are assigned a number based on the order in which they were created. If you know the name of the program, you can begin typing it in the search bar to start narrowing the results.
      
       
      Open Program Manager in a new tab so that you can easily switch back to the Access Control Entry.
      
  • Leave the rest of the settings as-is and click Update to save

4. Create the Access Control List

• From the Administrator options in the left-hand navigation bar, click Access Control List
• Click +New List
  
  
  • Access Control Entry: Click the dropdown and choose the control point that was created in step 3
    
  • Group Subject: Click the dropdown and choose the group that was created in step 1
    
  • Leave the rest of the settings as-is and click Update to save

5. Review the Settings

So far, we have:

• created a group (Test Program Group)
• added our user (testprogramlevel) to that group
• set up the Program (Test Program 1) to be associated with that group

The user account should now only have access to the assigned program (Test Program 1).
It is always advised to go back and check on what else the user has been given access to in order to ensure there are no other settings that will take precedence.

• From the Administrator options in the left-hand navigation bar, click Access Control List
• In the search bar, type "all" to view any lists that grant access to ALL PROGRAMS
  
• Reference the above entry (69) which is granting access to all programs for the Subject Group: Supervisors
  • If the user (testprogramlevel) is in the Supervisors group, they will have access to all programs anyway, and the above settings will not override that.
  • To check:
    • Click Agent Management
    • Locate the Agent, and click its number to access the settings
      
    • Click the Privileges tab
      
      *User account in question IS NOT part of the Supervisors group