====== Permissions======

===== Overview =====
  * This section will walk through verifying settings and assigning the Donor 360 Standard User Permission Set, then creating a new Permission Set to add additional required access for Users. 

==== Content ====

  * [[donor360:postinstalltasks:permissions#Verify Settings for Permission Set|Verify Settings for Permission Set]]
  * [[donor360:postinstalltasks:permissions#Assign Permission Set to Users|Assign Permission Set to Users]]
  * [[donor360:postinstalltasks:permissions#Create New Permission Set|Create New Permission Set]]
  * [[donor360:postinstalltasks:permissions#Public Groups|Public Groups]]
  * [[donor360:postinstalltasks:permissions#Custom Settings|Custom Settings]] 

==== Verify Settings for Permission Set ====
Click **Setup**, in Quick Find enter **Permission Sets** and Select **Donor 360 Standard User**
  * Review the following Settings:
    * Assigned Apps should include **Donor 360**
{{ :donor360:licensesandpermissions:permsets.png?400 |}}   
   
==== Object Settings ====

      * Accounts
          * **Record Types** assign Household Account and Organization
          * **Object Permissions** include Read, Create, Edit, View All
          * **Field Permissions** include Read and Edit access to the appropriate fields

      * Account Attributes
          * **Object Permissions** include Read, Create, Edit, Delete
          * **Field Permissions** include Read and Edit access to the appropriate fields

      * Account Soft Credits
          * **Object Permissions** include Read, Create, Edit, View All
          * **Field Permissions** include Read and Edit access to the appropriate fields

      * Addresses (Object API Name is npsp_Addresses_c)
          * **Tab Settings** is Available and Visible
          * **Object Permissions** include Read, Create, Edit, Delete, View All, Modify All
          * **Field Permissions** include Read and Edit access to the appropriate fields

      * Affiliations (Object API Name is npsp_Affiliation_c)
          * **Tab Settings** is Available and Visible
          * **Object Permissions** include Read, Create, Edit, Delete 
          * **Field Permissions** include Read and Edit access to the appropriate fields

      * Campaigns
          * **Tab Settings** is Available and Visible
          * **Object Permissions** include Read, Edit 
          * **Field Permissions** include Read and Edit access to the appropriate fields

      * Contact Attributes
          * **Object Permissions** include Read, Create, Edit, Delete
          * **Field Permissions** include Read and Edit access to the appropriate fields

      * Contacts
          * **Object Permissions** include Read, Create, Edit, Delete, View All, Modify All
          * **Field Permissions** include Read and Edit access to the appropriate fields

      * Disbursements
          * **Object Permissions** include Read, Create, Edit
          * **Field Permissions** include Read and Edit access to the appropriate fields

      * FAQs
          * **Object Permissions** include Read, Create, Edit, Delete
          * **Field Permissions** include Read and Edit access to the appropriate fields

      * Funding Program
          * **Tab Settings** is Available and Visible
          * **Object Permissions** include Read, Create, Edit 
          * **Field Permissions** include Read and Edit access to the appropriate fields

      * Funding Requests
          * **Tab Settings** is Available and Visible
          * **Object Permissions** include Read, Create, Edit 
          * **Field Permissions** include Read and Edit access to the appropriate fields

      * GAU Allocations
          * **Object Permissions** include Read, Create, Edit 
          * **Field Permissions** include Read and Edit access to the appropriate fields

      * GAU Expenditures
          * **Tab Settings** is Available and Visible
          * **Object Permissions** include Read, Create, Edit 
          * **Field Permissions** include Read and Edit access to the appropriate fields

      * General Accounting Units
          * **Tab Settings** is Available and Visible
          * **Object Permissions** include Read, Create, Edit 
          * **Field Permissions** include Read and Edit access to the appropriate fields

      * Opportunities
          * **Record Type Assignments** is Donation, Interfund Transfer, Planned Donation / Expectancy, Prospective Donation, Prospective Fund
          * **Object Permissions** include Read
          * **Field Permissions** include Read access to the appropriate fields

      * Payments (Object API name npe01_OppPayment_c)
          * **Tab Settings** is Available and Visible
          * **Record Type Assignments** is Cash Payment, Non-Cash Payment
          * **Object Permissions** include Read, Create, Edit
          * **Field Permissions** include Read access to the appropriate fields

      * Relationships
          * **Object Permissions** include Read, Create, Edit
          * **Field Permissions** include Read access to the appropriate fields

A full list of objects used in the Donor 360 package is available on the [[..:object_configuration|Object Configuration]] page. Use this list of objects to ensure users have the appropriate Create, Read, Edit & Delete access to records and can access the appropriate fields. 

==== Assign Permission Set to Users ====
{{ :donor360:licensesandpermissions:assignpermset.png?400|}} 
 * Click **Setup**, Under ADMINISTRATION open **Users**
  * Select **Users** and Select the User to Assign the permission set to
    * Hover on **Permission Set Assignments**, Click **Edit Assignments**
    * Select the **Donor 360 Standard User** from the Available Permission Sets list
    * Click **Add** arrow, **Save**


==== Create New Permission Set ====
  *** Setup>Permission Set>New**
    * Add a Name to the New Permission Set, something like Donor 360 Standard User Supplemental or whatever fits your org's naming convention
    * **Save**
    * Once created, Select **Object Settings**
{{ :donor360:postinstalltasks:createnewpermsetobjectsettings.png?600 |}}

      * Search and Select (Ctrl+F will search your web page) the **Accounts** object, Click **Edit**
        * Under Object Permissions, Check **Read**. Read is the minimum required permission
        * **Save**
        * The example below has Read, Create and Edit for both Household Accounts and Organizations
{{ :donor360:postinstalltasks:permsetaccounts.png?600 |}}
      * Click breadcrumb to return to Object Settings, Search and Select **Contact** object, Click **Edit**
        * Under Object Permissions, Check **Read** 
        * **Save**
  
{{ :donor360:postinstalltasks:permsetbreadcrumbcontact.png?600 |}}     

       * Can also select the next object from the Object drop-down
{{ :donor360:postinstalltasks:permsetobjectdropdown.png?600 |}}
      * Click breadcrumb to return to Object Settings, Search and Select **Opportunity** object, Click **Edit**
        * Under Object Permissions, Check **Read** 
        * **Save**

      * Click breadcrumb to return to Object Settings, Search and Select **Contact Attribute** object, Click **Edit**
        * Under Object Permissions, Check **Create** & **Edit**. Read will auto-check 
        * **Save**

      * Click breadcrumb to return to Object Settings, search and select **Payments**. 
        * Be sure to choose the object with the API name that is **npe01_OppPayment_c**
        * Under Object Permissions, Check **Create** & **Edit**. Read will auto-check 
        * **Save**

      * Click breadcrumb to return to Object Settings, search and select **Affiliation**. 
        * Under Object Permissions, Check **Create** & **Edit**. Read will auto-check
        * **Save**

      * Click breadcrumb to return to Object Settings, search and select **Address**. 
        * Be sure to choose the object with the API name that is **npsp_Address_c**
        * Under Object Permissions, Check **Create** & **Edit**. Read will auto-check
        * Verify that Household Addresses and Organization Addresses is also checked
        * **Save**
  
    * From the main page of the Permission Set record, Click **Manage Assignments** button, then click **Add Assignment**
{{ :donor360:postinstalltasks:permissionsetmanageassign.png?600 |}}

{{ :donor360:postinstalltasks:permissionsetmanageassignaddassignment.png?600 |}}
      * Use the list views available and the search box to search and select users to assign the new Permission Set to.

{{ :donor360:postinstalltasks:permissionsetmanageassignaddassignmentselectusers.png?600 |}}
      * Click **Next**, then click **Assign**

==== Public Groups ====
A Report folder must be shared with internal users for some processes to function correctly. 
  * From Home page, Click **Reports** tab, **All Folders**
  * On the far right of the **Donor360** Folder, click the drop-down arrow, the Select **Share**
{{ :donor360:postinstalltasks:reportsallfoldersdonor360share.png?600 |}}

  * Share with **Public Groups**
  * Names, Select **All Internal Users**
  * Share, Select **View**
  * Click **Share** then **Done**
{{ :donor360:postinstalltasks:reportsallfoldersdonor360shareinternalusers.png?600 |}}


==== Custom Settings ====
Grant Settings is a collection of settings used to manage grant summary roll-ups. The values should already be set so just verify the Funding Request Statuses which count as **Awarded** in your organization. 
  * Setup>Search and Select **Custom Settings**
  * Look for Grant Settings, then click **Manage**
  * Under Default Organization Level Value, Location should be the org name, **GrantStatusToCountAsApproved** should=Awarded
{{ :donor360:postinstalltasks:customsettingsgrantsettings.png?600 |}}

HHML Postal Mailing Report is used to indicate which report should be used for the Household Postal Mailing Report, invoked via the custom **Household Postal Mailing** Button on Campaign records.
  * Setup>Search and Select **Custom Settings**
  * Look for **HHML Postal Mailing Report**, then click **Manage**
  * Under Default Organization Level Value, Location should be the org name, **Report API Name** should=D360Campaign_Household_Mailing
{{ :donor360:postinstalltasks:customsettingshhmlpostalmailingreport.png?600 |}}