Standard user rights and user groups

Information about standard user rights and predefined user groups

Product line

Standard

Expert

Operating mode

CLOUD ABO

ON-PREMISES

Modules

Services & CRM

Budget & Phases

Purchases

Resource Planning

Business Intelligence

Created: 07.09.2007

Updated: 16.01.2023 | Note that built-in rights cannot be denied.

The read, create, write and delete user rights can be granted or denied on individual classes and their field names.

In addition, there are standard user rights which predefine certain rights and can also be granted. Standard user rights cannot be denied – they are either granted or not defined at all. These are:

Address administrator	Full access to all addresses (create/change/delete).
Address user	Read permission on addresses.
BI data	Allows querying of Business Intelligence data. The user must have this right on the selected class for the analysis to be shown. There are a number of standard permissions: A project manager has a BI data right on their own projects A project supervisor has a general BI data right A teamleader has BI data rights on all their team members See also the section on BI user rights.
Show detail view	Detailed representation of an entry in a single window. By default, this user right is granted on the BusinessClassesRoot data type. But it can also be granted separately on all other classes. See also the article User rights for detail windows.
Execute	Enables you to run scripts and reports. By default, this user right is granted for the data types scripts and reports.
Export	Controls the visibility of the Excel export button in lists. If the right has been granted, the Excel export button is displayed on lists.
Post creditors	Enables you to post creditors in financial accounting.
Project administrator	Full access to all projects (create/change/delete). Exception: Activation/deactivation of projects, which must be explicitly approved. In addition, the project administrator receives read access to most user attributes as well as write, create and delete rights on them, if the system setting project leader is allowed to change services is set.
Third party tracker	Enables you to enter services, expenses and outlays for others.
Project manager	Full access to own projects and projects for which you are registered as a key user or deputy key user. Exception: Activation/ deactivation of projects, which must be explicitly approved.
Time tracker	Enables you to enter services, expenses and outlays: Reading and writing of the following members: OpenServices OpenExpenses OpenOutlays PendingTasks Read only: Code IsValid Projectnumber Description Regarding Active Remarks InvoiceInterval Projecttype Language CustomerAddresstext Servicetype Expensetype InvoiceAddress VATType VATRate VATCode DocPath Type projectmanager KeyUser DeputyKeyUser Assistant Customer xInvoiceaddress paymenttype Currency Phase AllPhases RateLevel Servicetype Expensetype Outlaytype Project entry (service, expense, outlay): Basically, all rights to own entries or projects to which you are assigned. Project entry types (Servicetype, Expensetype, Outlaytype): Read access to everything. Presence time: Read and write access to everything.
Posting	Enables you to post invoices to financial accounting.
Resource Planning	If the Resource Planning module has been licensed, this user right controls whether the navigation button for Resource Planning is visible to the logged-in user. By default, it is added to the standard user group. The access rights in Resource Planning itself are described in User rights for Resource Planning .
SQL query	For SQL queries in Python scripts (`GetWithSQL` and `GetMemberWithSQL`), via COM (`GetWithSQL` and `MemberWithSQL`) and via XML (`sqlwhere`), either administrator rights or this SQL right are required. If no corresponding user right exists, an error message appears when SQL is called up. With this user right, the relevant users receive extensive SQL access to the data. We recommend that you only grant the SQL query user right very restrictively and create your own user group for this purpose.
Keyword folder administrator	Enables you to create, delete, and edit subfolders of keyword folders and their list settings. Users without this right can only modify folders and list settings if they are in their personal folder.
Super	Full access to all of Vertec.
System settings	Enables you to change the user-specific system settings.
Teamleader	Gives the teamleader a set of project supervisors rights over their team members.

Standard user groups

The standard user groups provided by Vertec bundle the above rights into meaningful groups. They are predefined so that you can easily organize your employees. You can also create other user groups, except for the following two user groups:

You should not delete the user group standard users. All employees should be assigned to it. This group is used to define certain settings, such as working hours, and is assumed to exist.
You should not delete the user group administrators, because only this user group has the super right which allows you to make all configurations in Vertec, and, for example, to activate or delete employees. Only the admin should be assigned to this user group.

The standard user groups bundle the following rights:

	Standard users	Project supervisors	Project managers	Keyword folder administrators	Address administrators	Administrators
Rights
Address administrator					x
Address user	x
BI data		x	x (own projects)
Show detail view	x
Execute	x
Export	x
Project administrator		x
Third party tracker
Project manager			x
Time tracker	x
Post creditors		x
Keyword folder administrator				x
Super						x
System settings	x
Teamleader

Standard user rights and user groups

Address administrator

Address user

BI data

Show detail view

Execute

Export

Post creditors

Project administrator

Third party tracker

Project manager

Time tracker

Posting

SQL query

Keyword folder administrator

Super

System settings

Teamleader

Standard user groups