Last Updated: 8/22/14

Security Setup

See Also

 

There are three main parts to setting up security levels in Chronicle:

Getting to the Security Setup

1.

Click on the Chronicle icon in the upper left corner of Chronicle. This is your tools list. Select Main System Setup

If Main System Setup isn’t in listed under Tools; see Adding Main System Setup to Your Tools List.

2.

In the list of tabs on the left, click Security to get to the security setup. (Show/hide screen)

There are four tabs within the security setup. The What Each Level Can Do tab lets you set the security levels for different options in Chronicle. It also lets you identify exceptions, that is, employees who can use the corresponding options even if their security levels are lower than the level set for the option. The Employee Security Levels tab lets you change security levels for your employees.

Changing Employee Security Levels

You can set or change security levels in the personal information for each employee when you add the employee and from the employee profile screen, but the setup option lets you see and adjust security levels for all of your employees at once.

1.

On the Security tab in the Setup, click the Employee Security Levels tab. (Show/hide screen)

2.

Double-click the employee to change the security level for.

You could also click the employee and then click the Edit Employee Security Level button above the list.

3.

Pick the appropriate security level and then click Next. (Show/hide screen)

You can’t assign anyone a higher security level than your own, and you can’t change the security level for anyone with a higher security level than yours.

Standard use of security levels

Typically, security levels are assigned like this:

For this role:

Use this security level:

Owner

7

office manager/production manager

6

estimator/project manager

5

office staff

3-4

technician/laborer

2

non-employee (limited access)

1

no Chronicle access

0

Setting Security Levels for Different Options in Chronicle

You can change the security levels for various types of options in Chronicle:

1.

On the Security tab in the Setup, click the What Each Level Can Do tab. (Show/hide screen)

2.

Double-click the security context to change the security level for.

You could also select the security context and click Edit Context Security Level.

For details on what each context controls, see What Different Security Contexts Control.

3.

Pick the appropriate security level and then click Ok.

Making Exceptions for Specific People and Options

Suppose you want your level 2 assistant, Sam, to add job events to the calendar and change calendar events for you (options that typically require security levels of 3 and 5), but you don’t want him to have access to other higher level options (and you don’t want other level 2 employees to use these options). You would simply identify Sam as an exception for those two options, meaning that he could use those options even though his security level is below what is usually required. To do this:

1.

On the Security tab in the Setup, click the What Each Level Can Do tab. (Show/hide screen)

2.

Click the security context to make an exception for.

For details on what each context controls, see What Different Security Contexts Control.

3.

On the right side of the screen, click Change Exceptions.

Chronicle lists all of your employees. (Show/hide screen)

4.

Check the box next to each employee that you want to be able to use options controlled by the context you selected. Uncheck anyone who you no longer wish to be an exception.

5.

After you’ve checked every employee that you want to be an exception for this context, click Next.

What Different Security Contexts Control

Here is a summary of the main parts of the program that different security contexts affect:

Security Context

Parts of Chronicle this context affects

ADDJOBCALENDAR

Add an event to a calendar for a job.

ALLACCOUNTINGVIEW

View any information on the financial tab, management graphs, and Profitability Snapshot.

ALLJOBVIEW

 

EDITDEPARTMENT

Add or change departments in the setup. This also controls whether you can delete required documents from the list in the setup.

EDITEVENT

Change or reschedule any event on the calendar.

EDITMASTERREPORT

Change Data Views (not something you want to mess with anyway).

EDITPAGERSERVICE

 

EDITPASSWORD

Change a password for someone other than yourself if you don't know that user's password.

EDITSYSTEMCATEGORY

Add, change, or delete categories in the setup.

EDITSYSTEMPANEL

Edit system panel pages, that is the panels that all users see if they haven’t created their own custom panels.

EDITSYSTEMTYPE

 

EDITTEMPLATE

 

LABORENTRYDELETE

 

LABORENTRYFORANOTHER

Enter or look at labor hours for anyone other than oneself.

ORDERAPPROVAL

 

PAYABLEVIEW

Look at payable information (available under Other Views on the Financial tab).

PAYRATECHANGE

Change an employee's pay rate and other information on the H/R tab for an employee. (If an employee’s security level is lower than this, the pay rate doesn’t appear at all in the employee’s H/R tab.)

PAYROLLVIEW

Look at or print the payroll report.

PERSONALINFOVIEW

Look at the Additional Info tab within the Personal Profile Info for a person.  (This tab contains the SSN and driver’s license number.)

SUPERVISOREDIT

Change an accounting ID, change a job’s billing or collections departments, add or change activities in the setup, delete surveys, delete questions from surveys, delete or rename document templates, change an activity’s completion date, delete an activity from a job, change or delete equipment, change a person’s security level, make a person inactive (that is, deleted)

VIEWBUDGET

Look at a job’s budget.

VIEWBUDGETLOG

 

VIEWEMPLOYEEJOURNAL

Use the journal manager (lets managers see all journals written by everyone during a particular date range), look at the journals for another employee.

VIEWJOBLABOR

See the list of all labor hours for a job.

JobPOView

Controls whether you can look at what's on the PO tab in the job file and use the Purchase Order Manager.

JobPOAddEdit

Controls whether you can add PO's and edit PO's you've added. (This doesn't let you change approved or paid PO's unless you also meet the security level to approve/mark paid.)

JobPOEditIfByAnother

Controls whether you can change PO's someone else has added.

JobPODelete

Controls whether you can delete and undelete PO's.

JobPOApprove

Controls whether you can approve PO's and edit approved PO's.

JobPOMarkPaid

Controls whether you can mark PO's paid and edit paid PO's.

 

 

 

 

Parts of Chronicle that Anyone Can Use (No Security Context)

If you don’t want someone using any options in Chronicle, you simply wouldn’t give access to the program. Certain parts in Chronicle are considered common to all users, so they have no security context at all. Anyone who can get into the program can:

Parts of Chronicle Where the Security Levels are Assigned as you Work

Journal entries, documents, surveys, and folders are each assigned security levels when they are created. This lets you decide as you create information who should be able to see it. Some journals should only be read by management; others could be relevant to anyone working on the job. To give flexibility here, Chronicle lets you assign a separate level to each of these types of items.