Available Permissions for Custom Roles

Permissions and Descriptions

Default Permission Permission Group Description
Assign or Remove Permissions for Account Recordkeeping Services Account Recordkeeping Services

Allows an Account Administrator to assign or remove permissions for Account Recordkeeping Services. This permission works in combination with other Security Administration permissions (i.e. remove user from an account). It was created to prevent collisions for Accounts with more than one product.

Example:

An account is licensed for Product A and Product B. There are users in the Account for Product A and Product B.

An Account Administrator for Product A needs to remove a user. There are users in the list for both Product A and Product B.

If the Account Administrator has the Assign or Remove Permissions for Product A and Assign or Remove Permissions for Product B, the Administrator can remove a user that has permissions for Product A and/or Product B.

If the Account Administrator has the Assign or Remove Permissions for Product A only, the Administrator can only remove the users that have permission for Product A, and they are not allowed to remove a user that has Product B permissions.

Basic Access for Account Recordkeeping Services Account Recordkeeping Services Allows a user to access Account Recordkeeping Services.
Create Account Owner/Beneficiary Account Recordkeeping Services Allows a user to add new party information on the website including; name, address, TIN, account type, mailing address, account summary (balance) etc.
Create Message Center Account Recordkeeping Services Allows a user to create secure e-mail within the Account Recordkeeping Services website.
Create Transaction Account Recordkeeping Services Allows a user to create specific transaction information including; transaction date, amount, and transaction description (contribution, distribution, earnings).
Manage Account Users Account Recordkeeping Services Allows an Account Administrator to access Administration.
Modify Account Owner/Beneficiary Account Recordkeeping Services Allows a user to modify the party information/account summary on the website including; name, address, TIN, account type, mailing address, account summary (balance) etc.
Modify Message Center Account Recordkeeping Services Allows a user to access secure e-mail within the Account Recordkeeping Services website.
Modify Transaction Account Recordkeeping Services Allows a user to modify specific transaction information including; transaction date, amount, and transaction description (contribution, distribution, earnings).
View Account Owner/Beneficiary Account Recordkeeping Services Allows a user to view party information/account summary on the website including; name, address, TIN, account type, mailing address, account summary (balance) etc.
View Message Center Account Recordkeeping Services Allows a user view-only access to secure e-mail within the Account Recordkeeping Services website.
View Reports Account Recordkeeping Services Allows a user to view system generated reports and create on-demand reports.
View Transaction Account Recordkeeping Services Allows a user to view specific transaction information including; transaction date, amount, and transaction description (contribution, distribution, earnings).
Add User to Account Security Administration Allows an Account Administrator to add users to an account.
Assign or Remove Permissions for STS Administration Security Administration Allows an Account Administrator to assign or remove permissions in Security Administration.
Basic Access for Security Administration Security Administration Allows a user to have basic access to Security Administration..
Clone Account Security Administration Allows an Account Administrator to copy an account to create additional accounts.
Download Certificates Security Administration Allows an Account Administrator to view the Client Authentication Page and download a certificate for configuring the integrations between products.
Edit Account Security Administration Allows an Account Administrator to manage account information.
Edit Account Roles Security Administration Allows an Account Administrator to edit account roles in an account.
Edit Account User Security Administration Allows an Account Administrator to edit account users in an account.
Manage IP Filtering Security Administration Allows an Account Administrator to add or remove IP Addresses in the IP Address list in IP Filtering.
Remove User from Account Security Administration Allows an Account Administrator to remove users in an account.
Reset Account User Multifactor Authentication Security Administration Allows an Account Administrator to reset multifactor authentication for a user in Security Administration
Reset Account User Password Security Administration Allows an Account Administrator to reset an account user password in an account.
Unlock Account User Security Administration Allows an Account Administrator to unlock a user in an account.
View Account Roles Security Administration Allows an Account Administrator to view account roles in an account.
View Account User Security Administration Allows an Account Administrator to view account users in an account.