Overview

The user privilege model within FundApps specifies the functionality available to different user types throughout the system, defined by the following user roles:

Reviewer - access to results, which includes the ability to assign & comment. Also able to view portfolios, individual rules, value sets and regulatory data. Designed as basic-level access.
Manager - same functionality as Reviewer with the ability to upload positions. Also able to view properties and data views, allowing rule analysis. Designed as the standard role for compliance users.
Legacy Administrator - combines the privileges of the Provisioning Administrator and the Business Administrator, providing full day-to-day administrative control of FundApps.
Provisioning Administrator - is designed to manage users, Single Sign-On, and grant Just-In-Time access whilst having no access to the platform's services and financial data:
- Users: Provisioning Administrators can view/create/modify/delete users.
- SSO Settings: Provisioning Administrators can view/create/modify/delete Single Sign-On configuration.
- Grant Access: Provisioning Administrators can grant FundApps' support access to a client's environment through the Just-In-Time mechanism.
Business Administrator - This role is designed to manage all facets of the platform except for the management of users, single sign-on and the ability to grant access to FundApps support team.
API - specific role designed to be assigned for login via the API. It provides the ability to upload data and receive status responses. API users are not able to log in to the UI platform.
Tech User - this role was specifically designed with our client's IT teams in mind. Tech users can log in and perform technical tasks without being able to take action on the results.

To manage users, the following article provides the steps to be taken by a Legacy or Provisioning Administrator.

Privilege Matrix

Legacy Administrator

Area	Actions Available
Users	View, create, edit, delete users
Single Sign-On	View, create, edit, delete SSO configuration
Support Access	Grant Just-In-Time access to FundApps Support
Audit Trail	View
Companies	View, create, edit, delete
Data Overrides	View, create, edit
Data Views	View
Disaggregations	View
Filing Manager	View, download, submit
Global Company Database	View
Global Settings	View, edit, change warning %
Issuer Requests	General
Portfolios	View, upload, download, create, edit, assign rule folder, assign aggregation, set warning %
Properties	View
Regulatory Data	View
Results	View, post comments, assign/take, verify/reject
Disclosures	Generate, disclose, mark as filed
Rules	View, approve, deactivate, set warning %
Reporting	View
Uploads	View previous uploads, import positions
Tasks	View, assign, confirm
Transactions	Import, download
Value Sets	View

Provisioning Administrator

Area	Actions Available
Users	View, create, edit, delete users
Single Sign-On	View, create, edit, delete SSO configuration
Support Access	Grant Just-In-Time access to FundApps Support

Business Administrator

Area	Actions Available
Audit Trail	View
Companies	View
Data Overrides	View, create, edit
Data Views	View
Disaggregations	View
Filing Manager	View, download, submit
Global Company Database	View
Global Settings	View, edit, change warning %
Issuer Requests	General access
Portfolios	View, upload, download
Properties	View
Regulatory Data	View
Results	View, post comments, assign/take, verify/reject
Disclosures	Generate, disclose, mark as filed
Rules	View, set warning %
Reporting	View
Uploads	View previous uploads, import positions
Tasks	View, assign
Transactions	Import, download
Value Sets	View

Manager

Area	Actions Available
Companies	View
Data Overrides	View
Data Views	View
Filing Manager	View, download, submit
Global Company Database	View
Issuer Requests	General access
Portfolios	View, upload, download
Properties	View
Regulatory Data	View
Results	View, post comments, assign/take, verify/reject
Disclosures	Generate, disclose, mark as filed
Reporting	View
Uploads	Import positions
Tasks	View, assign
Transactions	Import, download
Value Sets	View

Reviewer

Area	Actions Available
Companies	View
Data Overrides	View
Data Views	View
Filing Manager	View
Global Company Database	View
Portfolios	View, download
Properties	View
Regulatory Data	View
Results	View, post comments, assign/take
Reporting	View
Uploads	View previous uploads
Tasks	View, assign
Value Sets	View