Effective permissions for external users

Permissions enable users to perform a particular function or task within a specific area of the product. These permissions are derived from a user's type, a user's admin privileges, and whether or not they are operating in a role-based or user-based company.

External users have the ability to switch in to a company from a console company. The console company users have their own set of permissions.

To view an external user's effective permissions in the Permissions report, go to Company > Setup > Users > External users and select View permissions.

Effective permissions for external users

There are different factors which attribute to an external user's effective permissions. User types, roles, and admin privileges are carried over into the client company.

For example, if an external user has employee level permissions in the console, they will also have employee level permissions in the client company they switch into. The client company can further set permissions internally. These permissions are checked against the permissions the external user's existing permissions. This combination is an example of effective permissions.

User-based consoles permissions

If the console is configured for user-based permissions, the effective permissions of the user who switches in to the client company are determined by the user's external user record in the client company. This means that a console user could have different permissions in different client companies. For example, if a console user works in five different client companies, administrators can manage the user's permissions in each company on an individual basis.

Role-based console permissions

If the console is configured for role-based permissions, the effective permissions of the user who switches in to the client company are determined by the user's role-based permissions in the console. In other words, a console user's permissions will carry over into the client company.

The effective permissions of the slide-in user in the client company are determined by the user’s role-based permissions in the console. Permissions are carried with the user from the console to the client company when the users slide-in to the client company.

Run a report on an external user's effective permissions

If you're working in a company that is accessed from a console (such as an Accountant Console or Partner Console), the users who switch to the company from the console appear in the External Users list. Viewing the effective permissions for external users works the same way, but starting from the External Users list.

To run a Permissions report on external users:

1. Go to Company > Setup > Users > External users to see the External users list. 
2. Find the user whose permissions you want to view, and select View permissions. A consolidated report of all the user's permissions appears.

Because some features are related or depend on each other, the user might have additional permissions that weren’t explicitly assigned. To view these additional permissions, select the Show derived permissions checkbox.