Why use a custom Security Role?
ConnectWise strongly recommends using a custom role for integrations to ensure that the minimum necessary level of permissions are available to the integration.
The permissions laid out below are the minimum necessary for the 1stream integration to work with ConnectWise.
Items that are bolded are required. Items that are underlined are not required for current features, but will break future planned features if not granted.
Security Role
- Companies
- Company Maintenance: Add/Edit/Inquire All
- Contacts: Add/Edit/Inquire All
- CRM/Sales Activities: Add/Edit/Inquire All
- Manage Attachments: Add/Inquire All
- Notes: Add/Edit/Inquire All
- Finance
- Agreements: Add/Inquire All
- Billing View Time: Inquire All
- Projects
- Project Headers: Add/Edit/Inquire All
- Project Tickets: Add/Edit/Inquire All
- Sales
- Opportunity: Add/Edit/Inquire All
- Service Desk
- Close Service Tickets: Add/Edit/Inquire All
- Resource Scheduling: Add/Edit/Inquire All
- Service Tickets: Add/Edit/Inquire All
- System
- Manage Hosted API: Add/Edit/Inquire All
- Member Maintenance: Inquire All
- My Company: Inquire All
- Table Setup: Add/Inquire All
- Time and Expense
- Time Entry: Add/Edit/Inquire All
Why do you need XYZ permission?
Companies
Company Maintenance
- Add - Allows your users to create new companies that call in
- Edit - Allows your users to modify the company phone number
- Inquire - Without this, we can't query what companies exist.
Contacts
- Add - Allows your users to create new contacts for users who call in
- Edit - Allows your users to update contact information
- Inquire - Without this, we can't do anything.
CRM/Sales Activities
- Add - Allows your users to create new activities, for things like call records
- Edit - Allows activities to be edited, to do things like attach recordings
- Inquire - Without this, we can't do anything with activities.
Manage Attachments
- Add - Allows your users to attach call recordings, ingest MMS message images, and utilize Voicemail to Ticket
- Inquire - Required to add
Notes
- Add - Allows your users to add company and contact notes
- Edit - Allows your users to modify company and contact notes
- Inquire - Allows your users to review company and contact notes in 1stream
Finance
Agreements
- Add - Allows you to add agreements to tickets
- Inquire - Required to touch agreements
Billing View Time
- Inquire - Required for access to time entry data
Projects
Project Headers
- Add - Allows users the ability to add projects. This is not a public capability as of October 2024.
- Edit - Allows users the ability to edit projects. This is not a public capability as of October 2024.
- Inquire - Required to view project tickets
Project Tickets
- Add - Allows users to create project tickets. This is not a public capability as of October 2024.
- Edit - Allows your users to edit project tickets.
- Inquire - Allows your users to view project tickets.
Sales
Opportunity
- Add - Allows your users to add opportunities.
- Edit - Allows your users to edit opportunities.
- Inquire - Required to work with opportunities.
Service Desk
Close Service Tickets
- Add - Allows closing tickets
- Edit - Allows closing tickets
- Inquire - Allows viewing closed ticket statuses
Resource Scheduling
- Add - Allows your users to schedule tickets
- Edit - Allows your users to modify schedules on tickets
- Inquire - Allows your users to view schedules on tickets
Service Tickets
- Add - Allows your users to create tickets
- Edit - Allows your users to modify tickets
- Inquire - Required to work with tickets
System
Managed Hosted API
- Add - Allows adding the Pods for click to dial
- Edit - Allows editing the Pod for click to dial
- Inquire - Allows viewing the pods, required for above
- You can Customize this one to limit certain pods from our view
Member Maintenance
- Inquire - Required to view the list of members in the system
My Company
- Inquire - Required to pull information about the company/instance itself.
Table Setup
- Add - Allows adding data to the necessary system tables.
- Inquire - Allows pulling data from the necessary system tables.
- You can Customize this one, limiting to the tables below specifically:
- Company
- Company Status
- Company Type
- Configuration
- Configuration Status
- Note Type
- Contacts
- Communication Type
- Contact Type
- General
- Custom Fields
- Manage Hosted API
- Opportunities
- Campaign Status
- Campaign Type
- Opportunity Status
- Opportunity Type
- Project
- Project Board
- Project Status
- Project Type
- Service
- Priority
- Service Board
- SLA
- Source
- Time
- Work Role
- Work Type
- Company
Time and Expense
Time Entry
- Add - Allows your users to create time entries
- Edit - Allows your users to edit time entries. This is not a public capability as of October 2024.
- Inquire - Allows your users to view time entries