Table Privileges

This set of privileges applies to auxiliary tables and determines if users or group members can submit, update, view, and delete information or create, modify, and run reports for the specified tables. Privileges must be assigned to individual tables.

The following information applies to table privileges:

Privileges apply to the selected auxiliary table. For information about how privileges apply to system auxiliary tables, refer to Privilege Behavior for System Tables.
In SBM Composer, each field is assigned to a privilege section, which is used to group fields for display or to limit user accessibility to certain fields. When quick forms are used, field privilege sections are used to control security and field layout. When custom forms are used, field privilege sections are used to control security only.
An attachment can be a URL, a link to a file, or a link from one item to another. A note is a Text field provided for adding notes pertaining to the item. E-mail messages sent from primary and auxiliary items are also categorized as notes.
Users who do not have privileges to view an item's attachments cannot view file attachments and images that are added to Text fields, notes, and e-mail messages using the Rich Text Editor.
Users who are assigned a "view" note privilege can also send e-mail messages from notes they can view. E-mail messages sent from notes are only attached to the item from which they are sent if the user has "add" note privileges. In addition, you must also select the Insert E-mail as Note system setting in SBM System Administrator before e-mail messages to items are attached to items. (On-premise only.)
Unrestricted item links can be viewed by users who have privileges to view the linked item. Restricted item links can be viewed by users who have privileges to view the linked item and privileges to view attachments on the item containing the item link.
Users are available as e-mail recipients in the Send E-mail dialog box for items they have privileges to view. Groups who are assigned the "View All Items" privilege are available as e-mail recipients in the Send E-mail dialog box.

Users can send e-mail messages from auxiliary items they can view. For those messages to be attached to the item, however, users must be granted "Add Note" privileges.
Labels for fields sections, item details, and report privilege categories can be customized and may be reflected on the Tables privileges page.

Privileges for System Tables

On-premise customers automatically receive several system auxiliary tables which provide unique features, particularly for users with External User and Occasional User product access. Users with these limited access types can only be granted privileges in specific tables, and these privileges work in conjunction with other privileges.

For example, external users must be granted the View Your Contact Information privilege to see their Contact record. You can then grant the View User Fields privilege for the Contacts table so they can see fields in that section in their Contact record. Granting only the View User Fields privilege to external users for the Contacts table has no effect without also granting the View Your Contact Information privilege.

The following table describes privilege relationships for users with External User and Regular user product access.

Privileges	Applicable System Table	Description	Related Privileges
View User Fields View Attachments on Any Item View Notes on Any Item	Contacts Problems Resolutions	Allows users with External User and Occasional User access to view fields in the User Fields section, notes and attachments in: Public records in the Problems and Resolutions tables Their own Contact record	Grant privileges to view items in specific Knowledge Base folders that do not allow anonymous access. (Folders page) View Public Problems and Resolutions (System page) View Your Contact Information (System page)

Privileges

Applicable System Table

Description

Related Privileges

View User Fields

View Attachments on Any Item

View Notes on Any Item

Contacts

Problems

Resolutions

Allows users with External User and Occasional User access to view fields in the User Fields section, notes and attachments in:

Public records in the Problems and Resolutions tables
Their own Contact record

Grant privileges to view items in specific Knowledge Base folders that do not allow anonymous access. (Folders page)
View Public Problems and Resolutions (System page)
View Your Contact Information (System page)

Table Privilege List

The following table describes each auxiliary table privilege and the product-access types for which it applies.

Regular User, Managed Administrator, and Script/API	Occasional	External	On-premise Only	Privilege Description
				Submit – Allows users to submit new items.
				Update – Allows users to update items.
				Delete – Allows users to delete items.
				View – Allows users to view table items in report and search results and by clicking the relational table icon next to the field on forms.
				View User Fields – Allows users to view all fields assigned to the User Fields section. Refer to Privilege Behavior for System Tables before assigning this privilege to users with External User or Occasional User product access.
				View Advanced Fields – Allows users to view all fields assigned to the Advanced Fields section.
				View Manager Fields – Allows users to view all fields assigned to the Manager Fields section.
				View System Fields – Allows users to view all fields assigned to the System Fields section.
				Update User Fields – Allows users to modify fields assigned to the User Fields section.
				Update Advanced Fields – Allows users to modify fields assigned to the Advanced Fields section.
				Update Manager Fields – Allows users to modify fields assigned to the Manager Fields section.
				Update System Fields – Allows users to modify fields assigned to the System Fields section.
				View Hidden Fields in Details Reports – Allows users to view in Detail reports fields that have been moved to the Hidden Fields section.
				View User Fields on Submit – Allows users to view all fields assigned to the User Fields section upon submitting an item.
				View Advanced Fields on Submit – Allows users to view all fields assigned to the Advanced Fields section upon submitting an item.
				View Manager Fields on Submit – Allows users to view all fields assigned to the Manager Fields section upon submitting an item.
				View System Fields on Submit – Allows users to view all fields assigned to the System Fields section upon submitting an item.
				View User Fields on Update – Allows users to view all fields assigned to the User Fields section when they update items.
				View Advanced Fields on Update – Allows users to view all fields assigned to the Advanced Fields section when they update items.
				View Manager Fields on Update – Allows users to view all fields assigned to the Manager Fields section when they update items.
				View System Fields on Update – Allows users to view all fields assigned to the System Fields section when they update items.
				View Attachments on Any Item – Allows users to view attachments to all items. Refer to Privilege Behavior for System Tables before assigning this privilege to users with External User or Occasional User product access.
				View Attachments You Authored – Allows users to view attachments they created to items.
				Add Attachments to Any Item – Allows users to add attachments to any item.
				Edit Attachments on Any Item – Allows users to edit any attachments to items.
				Edit Attachments You Authored – Allows users to edit attachments they authored.
				Set Unrestricted Status of Attachments – Allows users to set individual attachments as "unrestricted". This enables users who have privileges to view the item to which the file, URL, or item link is attached to also view the attachment even if they have no attachment view privileges.
				Delete Attachments on Any Item – Allows users to delete attachments from any item.
				Delete Attachments You Authored – Allows users to delete attachments they authored.
				View Notes on Any Item – Allows users to view notes on all items. Refer to Privilege Behavior for System Tables before assigning this privilege to users with External User or Occasional User product access.
				View Notes You Authored – Allows users to view notes they created.
				Add Notes to Any Item – Allows users to add notes to any item.
				Edit Notes on Any Item – Allows users to edit any notes in items.
				Edit Notes You Authored – Allows users to edit notes they authored.
				Set Unrestricted Status of Notes/E-mail – Allows users to set individual notes and e-mail messages attached to a table item as "unrestricted. This enables users who have privileges to view the item to which the note or e-mail message is attached to also view the note or e-mail message even if they have no note view privileges.
				Delete Notes on Any Item – Allows users to delete notes from any item.
				Delete Notes You Authored – Allows users to delete notes they authored.
				View Change History – Allows users to view the Change History for items. This privilege also enables users to create Change History reports for the selected table.
				Manage Private Reports – Allows users to create reports that only they can run, modify, and delete.
				Create Guest-Level Reports – Allows users to create reports with guest-level access.
				Create User-Level Reports – Allows users to create reports with user-level access.
				Create Manager-Level Reports – Allows users to create reports with manager-level access.
				Modify Guest-Level Reports – Allows users to modify any guest-level report.
				Modify User-Level Reports – Allows users to modify any user-level report.
				Modify Manager-Level Reports – Allows users to modify any manager-level report.
				Run Guest-Level Reports – Allows users to run any guest-level report.
				Run User-Level Reports – Allows users to run any user-level report.
				Run Manager-Level Reports – Allows users to run any manager-level report.
				Delete Guest-Level Reports Allows users to delete any guest-level report.
				Delete User-Level Reports – Allows users to delete any user-level report.
				Delete Manager-Level Reports – Allows users to delete any manager-level report.
				Access Public Reports You Authored – Allows users to modify, run, and delete guest-level, user-level, and manager-level reports they created.
				Create/Modify Advanced SQL Queries – Allows users to create and modify reports that contain advanced SQL queries as search specifications. Users who are granted this privilege can create and modify Advanced SQL reports that do not use pass-through SQL. To use pass-through SQL for reports, users must be granted this privilege and the Create/Modify Pass-Through SQL Queries privilege located on the System privileges page.
				Mass Update Items – Allows users to update and delete multiple items in the selected table.