The following describes the various privileges that may be assigned to a user group. To set the privileges for a user group:

1. Login to the workgroup as Admin
2. Click on the Admin icon in the button bar
3. Click on the User Administration button
4. Click on the Edit Groups button
5. Click on the Edit button to the left of the user group for which the privileges will be modified
6. To grant a privilege to a user group, check the box to the left of the privilege. To deny a privilege, uncheck the box.
7. Click OK to save your changes.

When assigning user group privileges, please note that all users are members of the "Users" group. Therefore, if a privilege is granted to the "Users" group, all users will have the privilege. Also, users can be members of one or more user groups, so the operations a user can perform are based on the privileges assigned to all of the user groups in which the user is a member.

General Privileges

The following privileges are basic ProblemTracker operations. An icon will appear in the top button bar for members of the user groups which have been granted one or more of the following general privileges:

Task
Members or groups with this privilege are allowed to use the Task operation.

Delete
Members or groups with this privilege are allowed to delete records.

History
Members or groups with this privilege are allowed to make queries into the record history database (changes made by whom and when).

Admin
Members or groups with this privilege allowed to perform Admin functions.

Help
Members or groups with this privilege are allowed to access the help documentation.

Add Privileges

The following privileges are related to the Add operation. The members of the user group(s) that are granted any of the privileges below will have the "Add" icon displayed in the button bar:

Add
Members or groups with this privilege are allowed to add records.

Add Attachments via Add Page
All members of groups with this privilege are allowed to add an Attachment on the Add page (along with the original problem record). To subsequently modify attachments (Edit, Delete, or Add additional attachments), a user must also be a member of a group with the Edit Attachments privilege.

Can Be Assignee For Add
All members of groups with this privilege appear in the Assignee list when a record is added. This allows you to limit which users can be assigned to a newly added record.

View Privileges

The following privileges are related to the View operation. The members of the user group(s) that are granted any of the privileges below will have the "View" icon displayed in the button bar and in the reports displayed on the Home and Query pages:

View Fields
Members or groups with this privilege are allowed to view the fields within records. The fields which the members or groups are allowed to view are based on the Field Level Visibility settings on the View page for each user group.

View Attachments
Members or groups with this privilege are allowed to view attachments within records.

View Source Code List
Members or groups with this privilege are allowed to view source code files associated with records when Source Code Control Integration is enabled.

View Record History
Members or groups with this privilege are allowed to view record history (audit trail documenting changes made by whom and when).

View User Information
When the "Assigned To" or "Reported By" fields appear on the View Page or in reports on the Home or Query pages, all members or groups with this privilege will be able to click on the user's name to see the details of their user administration profile (e.g. phone number, email address, company name).

Edit Privileges

The following privileges are related to the Edit operation. The members of the user group(s) that are granted any of the privileges below will have the "Edit" icon displayed in the button bar and in the reports displayed on the Home and Query pages:

Edit Fields
Members or groups with this privilege are allowed to edit the fields within records. The fields which the members or groups are allowed to edit are based on the Field Level Visibility settings on the Edit page for each user group.

Edit Attachments
Members or groups with this privilege are allowed to edit the attachments within records.

Edit Source Code List
Members or groups with this privilege are allowed to edit the source code files associated with records when Source Code Control Integration is enabled.

Query Privileges

The following privileges are related to the Query operation. The members of the user group(s) that are granted any of the privileges below will have the "Query" icon displayed in the button bar:

Query
Members or groups with this privilege are allowed to query the database for records. The fields which the members or groups are allowed to query are based on the Field Level Visibility settings on the Query / Home pages for each user group.

Save Group Queries
Members or groups with this privilege are allowed to add, edit, and delete group-level saved queries for any group in which they are a member.

Save Group Report Formats
Members or groups with this privilege are allowed to add, edit, and delete group-level saved report formats for any group in which they are a member.

Edit Query Result Set
Members or groups with this privilege are allowed to perform a query and then perform an edit that affects all the records in the query result set. If a user is also a member of a group with Delete privilege, then they can perform a delete of all records matching a query.

Metrics Privileges

The following privileges are related to the Metrics operation:

Metrics
Members or groups with this privilege are allowed to generate Metrics reports and will have the Metrics icon displayed in the top button bar.

Save Group Charts
Members or groups with this privilege are allowed to add, edit, and delete group-level saved charts for any group in which they are a member. In order to use this function, the "Metrics" privilege mentioned above should also be enabled.

Save Group Chart Layouts
Members or groups with this privilege are allowed to add, edit, and delete group-level saved report formats for any groups in which they are a member. In order to use this function, the "Metrics" privilege mentioned above should also be enabled.

Record Visibility Privileges

The following privileges are related to Record Level Visibility, a feature which restricts a user's access to records based on the user groups in which they are a member:

Edit Record Visibility
When a record is added, it is made visible to all groups in which the reporter is a member. Members with this privilege are allowed to explicitly select which other groups may view the record when it is added, and also change what groups may view the record at any later time. If a user does not have this privilege and Record-Level Security is enabled, then when they add a new record the visibility of the record is based on the General Preferences settings related to Record-Level Security. Typically you should add this privilege for internal users and exclude it from external users. This privilege is only meaningful if Record-Level Security is enabled. User groups without this privilege will not see the field "Make Visible to These User Groups" on the Add page.

Override Record-Level Security
All members of groups with this privilege are allowed to view all the problem records, irrespective of whether or not Record-Level Security has been enabled. This is typically used to allow members of "internal" user group(s) to view records added by all other "external" user group(s) without having to be a member of every user group. Users with this privilege and with Edit Record Visibility privilege can set the visibility of any record to any set of User Groups (not just to User Groups to which they belong). This privilege is only meaningful if Record-Level Security is enabled.

Alert Privileges (Enterprise Edition Only)

The following privileges are related to Alerts, a feature which allows alert notification messages to be sent when a record has not changed state during a certain period of time:

Edit Alert Settings
Members or groups with this privilege are allowed to modify the alert settings for a record. In addition, members or groups with this privilege will have the "Edit" icon present in the button bar and in the reports displayed on the Home and Query pages when the Alerts feature is enabled.

Edit Own Alert Settings
Members or groups with this privilege are allowed to modify the alert settings for records in which they are the current assignee. In addition, members or groups with this privilege will have the "Edit" icon present in the button bar and in the reports displayed on the Home and Query pages when the Alerts feature is enabled.

View Alert Settings
Members or groups with this privilege are allowed to view the alert settings for a record. In addition, members or groups with this privilege will have the "View" icon present in the button bar and in the reports displayed on the Home and Query pages when the Alerts feature is enabled.

Discussion Privileges (Enterprise Edition Only)

The following privileges are related to Discussion, a feature which allows users to discuss various topics within a particular record. The members of the user group(s) that are granted any of the privileges below will have the "Discuss" icon displayed in the button bar and other discussion icons in the reports displayed on the Home and Query pages when the Discussion feature is enabled:

View Messages
Members or groups with this privilege may view messages within discussion threads for any record the group can access.

Post Messages
Members or groups with this privilege may post a new message or reply to a message within the discussion threads for any record the group can access. Granting this privilege to a group automatically grants the group the "View Messages" privilege as well.

Initiate Discussion Threads
Members or groups with this privilege may create a new discussion thread for any record the group can access. Granting this privilege to a group automatically grants the group the "View Messages" and "Post Messages" privileges as well.

Edit Messages
Members or groups with this privilege may edit the messages within a discussion for any record the group can access. Granting this privilege to a group automatically grants the group the "View Messages" privilege as well.

Delete Messages and Threads
Members or groups with this privilege may delete the messages and / or threads within a discussion for any record the group can access. Granting this privilege to a group automatically grants the group the "View Messages" privilege as well.

The privileges above make reference to "any record the group can access". If record visibility is enabled with a workgroup, the user can only access a record or the discussion within a record if that record is visible to a user group in which the user is a member.