Add or update user roles

Create and update user roles that determine system access to sessions Work type impacting the menu items and information available ( e.g. Home, Member, Claims, etc.)., functions, and data.

If this is a new user role:

Add an authorization role. Define the role's access to sessions, functions, tabs, subtabs, and features.
Create a general fund control to grant access to members and dependents funds.
Add a correspondence fund control to grant access to correspondence items by fund.
Add a status code control to grant access to add, edit, or delete specified member status codes.
Add a pension action code control to deny access to add, edit, and delete specified pension action codes.
Associate the role you created with users in the Profile Editor. See Set up a user profile.

Note: ServiceXG comes with the ADMINISTRATOR role already setup and linked to the BASYS profile. The ADMINISTRATOR role provides access to all features/functions (Delete access to ServiceXG functions and Display access to Classic functions).

Go to: Home > System Administration > Security > Authorization Role Editor

Authorization Role Editor Field Descriptions

* indicates a required field

Field	Description
Role Name *	A role name can be a job title or a word that identifies the set of permissions. The role name can have up to 30 characters (no spaces).
Role Description	A description of the role.
Fund Control	The fund control identifies the members, dependents, and fund data this role can access in sessions, functions, and subtabs that have `Display` access (rights or permission level) or higher. For example, if you select fund `W`, then this role can only access members and dependents who belong to fund `W` and records in sessions, functions, and subtabs that have `Display` access level or higher for fund `W`. Note: Fund level security doesn't apply to data contained in AUX files, which users can access via the Other Member Information, Other Dependent Information, and Other Employer Information functions.
Correspondence Fund Control	Identifies correspondence funds this role can access. Access level for the Correspondence function must be `Display` or higher.
Status Codes Control	The status codes the role can add, edit, or delete in the `Member Status Dates` function when the role's access level is at least `Add`.
Pension Action Code Control	The pension action codes for which the role is limited to display-only access in the `Action Codes and Credits` window even when the role’s access level is higher than `Display`.
Table fields
Session	The session, (e.g. Home, Member, Dependent, Employer, etc.).
Classic	A check in this column indicates a function that opens in a Classic (text-based user interface) session. If a menu item is Classic, the access level can only be `None` or `Display`.
Module	The module the function applies to. For example, the CON (Contributions) module has many functions: Member Contributions, Employer Wage Types, Work History, etc.
Home Menu	The Home-Session sub-menu under which the function can be accessed. If the column is blank, then the item can't be accessed from the Home Menu.
Area	The area, under the session menu, where the function displays.
Function	The window or screen.
Subtab	A subtab on the function. If this is blank, the function doesn't have any subtabs.
Feature	The feature of the corresponding subtab. For example, the Bank Information feature on the Sequence subtab.
Access Level	The default access level is `None` for all rows. If new functions are added, the access level is `None` by default. Depending on the function, some access levels might not be available. `None`—The role doesn't have access. The function won't display on any menus and won't be available on Home session the `Personalize` option. `Display`—The role can view, but can't add, change, or save data. `Add`—The role can only add a new record and can't update an existing one. `Update`—The role can view, add, and update existing data. `Delete`—The role can view, add new data, update, and delete a record. Note: Classic functions can only have `None` or `Display` access. `New`—A check mark indicates that a new function has been added. New items have access set to `None` by default.
Change Selected Row Access	Bulk change option that applies the selected access level simultaneously to all of the selected rows.

Add an authorization role

Hint: Before adding a role, plan out the roles and access levels. Determine system access levels.

If there's a role you'd like to begin with, you can use the Copy Role feature to copy an existing role and then update as needed.

Click Add Role.
Enter the role name and click Add.
Depending on the role, select from the following options as necessary. You can type a few characters to he
- Fund Control
- Correspondence Fund Control
- Status Codes Control
- Pension Action Code Control
Set the access levels. The table lists all sessions, functions, and subtabs in your system. The default access level is None for all rows.

Hint: We recommend you filter the table to display only the access levels you want to change. For example, you can filter the table to display only Member session functions or to display any new functions, sort the by the New column. Refer to Table features for details on how to filter entries.
- To update a single row, simply change the access level and select the check box for that row.
- To update multiple rows at the same time, select the check boxes in the first column of the rows to change.
- To select all rows, select the check box in the header (the very first check box).
In the Change Selected Row Access area at the bottom of the screen, select the access setting for the selected row (s) and click Apply.
Click Save to save the role. To assign the role to a user, see Set up a user profile.

Update an authorization role

Select a Role Name from the list.
Edit the role's settings as necessary.
Click Apply.
Click Save to save your changes.
When you're done making changes, click Close to exit the window.