Managing Security Groups

Security groups are used to allow or restrict access for your staff to CCH Axcess modules and functions.

The General tab of the Security Group Profile window allows you to create a unique identifier and create or edit an optional description for each security group in your firm. You can also select the organizational units where the rights of the security group will be applied. Other tabs available from the profile window allow you to manage functional rights for a security group and to assign staff to a security group.

Rights defined in a security group apply when staff assigned to the security group work on areas shown on the Functional Rights tab.

Staff are assigned to security groups either individually or by attributes of the staff.

Access options include the following:

• Undefined. Functional right not yet assigned.
• Grant. Functional right allowed.
• Never allow. Restricts all functional rights including any inherited access.

Important: The Never allow assignment, in a security group, overrides that right granted in any other security group. For example, if you are in a security group that has Never allow specified as the right to electronically file tax returns, and you are also in a different security group where Grant is specified for the same right, you will not be able to electronically file tax returns.

To access the security group creation window, do the following:

1. Open Dashboard, click Application Links on the navigation panel, and then click Security groups under Security.
2. Do one of the following:
3. Add a security group.
4. Click New in the Create group on the Home tab, or right-click the grid and select New > Security Group from the menu to create a security group.
5. Copy an existing security group.
6. Do one of the following to create a security group with settings from an existing group:
   • Select an item in the grid and click Copy in the Create group on the Home tab.
   • Right-click an item in the grid and select Copy from the menu.
7. The security group profile displays with all information from the originating security group, except for the name and description.

Note: Only the organizational units that you have rights to create security groups for are copied to the new group.

8. Edit an existing security group.
9. Do one of the following to display the security group profile for review or editing purposes:
   • Select a group in the grid and click Open in the Edit group on the Home tab.
   • Right-click an item in the grid and select an option from the Open sub-menu.
10. Delete a security group.
    1. Select an item in the grid and click Delete in the Edit group on the Home tab.
    2. Click Delete on the confirmation window to permanently remove the security group from the grid.

    Note: The Full Rights security group cannot be deleted and the Default Administrator cannot be unassigned from the Full Rights security group.

3. Enter or edit profile settings, as needed. See the following topics for more information on each profile tab:
   • Setting Up Security Group General Information
   • Managing Security Group Functional Rights
   • Assigning Staff to Security Groups
4. Click one of the Save buttons or Cancel.

Button	Description
Save	Saves the changes and the window stays open for editing. An error message displays if you click this button before entering all required information.
Save & New	Saves the changes and opens a new window to create a new entry. An error message displays if you click this button before entering all required information. Note: This option is not available in edit mode.
Save & Close	Saves the changes and exits the window. An error message displays if you click this button before entering all required information.
Cancel	Exits the window without saving your changes.