This article provides a comprehensive guide to Access Control List (ACL) rights in various modules and functions of the EFS platform. It covers rights related to project management, mail dispatch, statistics and reporting, user administration, and specific modules like EFS Leadership, EFS Employee, EFS People, and MySight.
Rights Related to Project Management
| Right | Read | Write |
|---|---|---|
| archive_project | With read rights, you can archive projects and use the archive. | |
| chg_url | With write rights, you can change the URL of a project | |
| cr_language | With write rights, you can create a new language. | |
| cr_project | With write rights, you can create or copy new projects and change the basic characteristics of a project. Furthermore, write rights for cr_project are a necessary requirement for granting project import with import_project. | |
| ct42partadm | With read rights, you can view the participants list in participant administration. Furthermore, you gain access to data import.In EFS Survey Status, you gain access to respondent export | With write rights, you can create, edit or delete participants. |
| del_project | With write rights, you can assign the status “erasable” to projects. Please note: The status “erasable” has been removed. Therefore, this right is currently without effect. | |
| export_with_lfdn | With read rights, you can access and use the combined export of participant and result data in personalized surveys. You can also view the combined data in the menu Statistics → Detail view. Furthermore, when exporting the project, you may optionally include the result data, e.g. if a project needs to be moved to another EFS installation. | |
| import_project | With read rights, you can import projects. Please note: write rights for cr_project are a necessary requirement. | |
| print_survey | With read rights, you can print the survey. | |
| protect_questions | With read rights, you can view and export the results of protected questions | With write rights, you can mark questions as “protected”. |
| quotation_admin | With read rights, you can check the quota statistics in the Field report. | With write rights, you can use quotas |
| r_without_deleting | With read rights, you can access the option “Reset without deleting survey data” in participant administration | |
| show_dispcode | With read rights, you can view and export the disposition code of survey participants. In a personalized survey, the disposition code is shown in participant administration. In a panel survey, it is shown in the respective sample on the tab “Sample contents”. | |
| show_export | With read rights, you can access the Export menu of specific projects. | |
| show_source | With write rights you can use the edit source code button of the visual editor in the questionnaire editor. |
Rights Related to Mail Dispatch Functions
| Right | Read | Write |
|---|---|---|
| mail_admin | With read rights, you can access the overviews of existing mail templates in the projects and in the Libraries module. The Mail report in projects and in the Options module offers an overview on dispatch processes in areas you’re authorized to access (without read rights, you can only access your own dispatch processes in Mail report). | With read and write rights, all features for editing mail templates are available and you can also access new mail templates. |
| mail_admin_panel | With read rights, you can view the panel mailings in options > mail report. | |
| mail_admin_portal | With read rights, you can view the portal mailings in options > mail report. | |
| mail_admin_system | With read rights, you can view the system mailings in options > mail report. | |
| mail_attachment | With read rights, you can use attachments when sending mails. | |
| mail_cc | With read rights, you can define the additional recipient options CC and BCC in mail templates and mail dispatch processes. | |
| mail_email_mailadmin | With read rights, you can view the e-mail addresses of mails in the mail report. | |
| mail_email_preview | With read rights, you can view the recipients’ e-mail addresses in the mail preview. | |
| mail_passwords | With read rights, you can see the plain text passwords of participants or panelists when previewing mails.Please note: In employee surveys, the passwords are in general not visible. | |
| mail_reply | With read rights, you can define the additional options “Reply-To”, “Return-Path” and “Read confirmation” in mail templates and mail dispatch processes. | |
| options | With read rights, you can access the menu Libraries → Mail templates → Mail sender | |
| sms_delivery | With read rights, you can send sms as long as sms module is active. |
Rights Related to Statistics and Reporting Functions
| Right | Read | Write |
|---|---|---|
| config_fieldreport | With read rights, you can restrict field report, online statistics and open-ended answers to a variable which you can define yourself (Configuration button in the respective menus). | |
| data_cleaning | With read rights, you can access the data cleaning. | |
| detail_view_edit | With write rights, you can edit the result data | |
| export_code | With read rights, you can export the participants’ access code in the respondent export on EFS SurveyStatus. | |
| geolocation | With read rights, you can activate the collection of geolocation information and provider data in a project, derived from participants IP addresses. You can access these participant data in the menu “Statistics” -> “Detail view” and via export. | |
| ip_addresses | With read rights, you can activate the determination of hostname and IP address for a project. You can access the hostnames and IP addresses of survey participants in the menu Statistics → Detail view and via export. Furthermore, you can change your own preferences for hostname determination in new projects.Please also refer to the notes on the availability of hostnames and IP addresses in Chapter | |
| participant_details | With read rights, you can activate in a project the collection of extended device information of participants, derived from the browsers user-agent information. You can access this participant data in the menu “Statistics” -> “Detail view” and via export. | |
| quality_correction | With read rights, you can use quality correction (Menu Statistics→ Quality correction). | |
| report_erase_data | With read rights, you can delete the results for selected survey variables for individual or for all participants (Menu Statistics → Detail view and Statistics → Delete data). | |
| report_onlinefiles | With read rights, you can access the uploaded files. | |
| report_onlinerep | With read rights, you can access the open-ended answers (Menu Statistics → Open-ended answers). | |
| report_onlinestat | With read rights, you can access the submenu Online statistics in the menu Statistics. | |
| report_reporting | With write rights, you can accessEFS Reporting +. | |
| report_testdata | With read rights, you can access the participants’ survey results (Menu Statistics → Detail view). | |
| report_view_fieldrep | With read rights you can view the field report (menu Statistics).If a user has neither this nor one of the rights report_erase_data, report_onlinerep, report_onlinereport, report_onlinestatand report_testdata which are described above, then the link to the Statistics menu will be hidden. | |
| reporting_configuration | Allows access to the Reporting+ configuration area in the platform cockpit. For making changes write access is required. | |
| reporting_configuration_org | Allows access to the Reporting+ configuration area in the organization configuration. | |
| reporting_plus_only | With read right the user can access ONLY the project list with links to Reporting | |
| stat_split | With read rights, you can split field report and online statistics. |
Rights Related to User Administration Functions
| Right | Read | Write |
|---|---|---|
| chg_grp_acl | The Rights of the team(whole system) link is displayed. | |
| cr_area_fm | With write rights, you can assign or change the access rights to the area EFS Secure Exchange. | |
| cr_area_mobile_guii | With write rights, you can assign or change the access rights for EFS Mobile Access. | |
| cr_area_report | With write rights, you can assign or change the access rights to the area EFS Survey Status. | |
| cr_area_translations | With write rights, you can assign or change the access rights to the area EFS Translator Interface. | |
| cr_area_www | With write rights, you can assign or change the access rights to the EFS admin area. | |
| cr_teamaccount | With write rights, you can create new user accounts | |
| groupadmin | With read rights, you can view all teams, including teams you are not a member of. | With write rights, you can edit teams (except the team “System Administrator”) and assign object rights (e.g. for projects, reports etc.) to all teams. Furthermore, you can edit the account data of team members. When you create a new project and have write rights, you can assign all existing teams to it, and not only the teams that you are a member of. |
| org_groupadmin | With read rights, you can access the account data of your own organization’s users. | With write rights, you can administrate all users of your own organization (e.g. create accounts, edit account data or delete accounts). |
| orgadmin | With write rights, you can edit the accounting organizations on this installation in the Users→ Organizations menu. Additionally, you can change the assignment of users and projects to organizations. |
Access Rights
| Right | Read | Write |
|---|---|---|
| category_management | With write rights, you can manage categories. | |
| create_macro | With write rights, you can define new macros and assign the rights to execute them. | |
| create_project_cat | With write rights, you can create new folders for the project list. | |
| domain_redirection | With read rights, you can configure domain redirections. | With write rights, you can add further domains. |
| exchange_teams | With read rights, you can view the history of the exchange platform. | With write rights, you can create exchange teams |
| odg_template_configuration | With write rights, you can define ODG templates. | |
| platform_cockpit | With read rights, you can access the platform cockpit (menu Options → Platform cockpit). | |
| questiontype_editor | With write rights, you can access the “Question type editor”. | |
| receipt_admin | With read rights, you have access to the receipt admin. | |
| reportlist | With read rights, you can access the field overview in the Projects module.Furthermore, if you want to authorize users to access reports or automated exports via EFS SurveyStatus, these read rights are required as well, in addition to read rights for the respective report or export file. | |
| show_scala | With read rights, you can access the scale library. | |
| upload_media_file | With a disabled write right and high security mode on, you are not able to upload images into the media library anymore. | |
| webservice_conf | With write rights, you can activate and configure web services | |
| whois | With read rights, you can see the active users in the system. | With write rights, you can also see which parts of the software the users are currently working in. |
Rights Related to EFS Leadership Functions
| Right | Read | Write |
|---|---|---|
| access_restrictions | With write rights, you can access the Access restrictions tab. | |
| leadership_report_ manager_download | With read rights, you can download reports on the Report Manager tab. | |
| loft_detail_view | With read rights, you can access the statistics of current and completed feedback processes. It shows for each process how many respondents are involved | |
| loft_export_anonym | With read rights, you can export anonymous result data in multisource feedbacks. | |
| loft_export_combined | With read rights, you can export address and result data in multisource feedbacks. | |
| loft_fbcenter | With read rights, you can change the type of the external view. | With write rights, you can change the settings on the other tabs in the Process configuration menu and in the Feedback center menu. |
| loft_peergroups | With read rights, you can edit peergroups. | |
| loft_report_extern | With read rights, you can open the Report definition menu and edit external reports. | |
| loft_report_intern | With read rights, you can open the Report definition menu and edit system-generated reports. | |
| loftpartadm | With read rights, you can view the participant list in multi-source feedbacks. With write rights, you can edit the participant list in multi-source feedbacks. | |
| report_360_dl | With read rights, you can download reports in multi-source feedbacks. | |
| view_loft_passwd | With read rights, you can view the passwords in the participant administration of multi-source feedbacks. |
Rights Related to EFS Employee Functions
| Right | Read | Write |
|---|---|---|
| ac_variable_editor | With write rights, you can edit the Action Planner variables. | |
| ac_workflows | With write rights, you can edit the Action Planner workflows. | |
| employee_access_restrictions | With write rights, you can access the Access restrictions tab. | |
| employee_ehr_reporting | With read or write rights, you have access to the area HR reporting. | |
| employee_report_extern | With read rights, you can open the Report definition menu and edit external reports. | |
| employee_report_intern | With read rights, you can open the Report definition menu and edit system-generated reports. | |
| employee_report_manager_download | With read rights, you can download reports on the Report manager tab. | |
| employee_self_assignment | With write rights, you can access the Self-allocation menu. | |
| employee_user_impersonation | With read rights, you can use the impersonation buttons within the orgprocessor user management of employee surveys. | |
| es_org_manager | This right allows to control basic functionalities of the Org Processor. With read rights, you can configure the Org Processor in the “Org Processor”->”Options” menu. You can view and edit all units in the organizational structure. | |
| org_phase_admin | With write rights, you can change the project phases | |
| org_role_admin | With write rights, you can change the roles. |
Rights Related to EFS People Functions
| Right | Read | Write |
|---|---|---|
| create_reg_code_cat | With write rights, you can administrate categories for ways of entry in the panel. | |
| listnew | With read rights, you can access the Candidates menu and the duplicates check | |
| panel_add_account | With write rights, you can add individual panelists in the panelists administration. | |
| panel_config | With write rights, you can configure Panel tracking and Capacity filters in the People → Panel configurationmenu. Access to the other functions in this menu is controlled by dedicated rights. | |
| panel_dupcheck | With write rights, you can configure the duplicates check for the panel. | |
| panel_external_surveys | With write rights, you can administer external studies and participations. | |
| panel_log | With write rights, you can export the log file of those panelists who have left the panel but still have bonus points. | |
| panel_quotas | With read rights, you can view panel quota cell values. | With write rights, you can edit panel quotas. |
| panel_recodes | With write rights, you can create, edit or delete recoding variables. | |
| panel_send_private_message | With write rights, you can post private messages to the inbox of panelist groups via the menu People →Contacts → Messages | |
| panel_status | With read rights for “panel_status” and additional read rights for “panel status”, you can access the menu People → Statistics → Way of entry statistics. | With write rights, you can manage the panel statuses in the People configuration → Panel status menu. |
| panel_update_rule | With read rights, you can access and manage the update rules of the panel.A necessary requirement is read rights for panelgrp_admin, i.e. access to the panel’s group management. | |
| panel_view_private_message | With write rights, you can view the panelists’ private messages. | |
| panelbonus | With read rights for this ACL right, you can access the Bonus systemmenu. | With write rights, you can grant bonus points to individual panelists or panelist groups.Depending on the menu in which you want to grant the bonus points, you might need additional rights, e.g. access rights for the Panelistsadministration or for the Groupsmenu. |
| panelemail | With write rights, you can send mails and you have access to the panel’s contact request list (People→ Contacts). | |
| panelexport | With read rights, you can export panelists. | |
| panelgrat | With read rights, you can access the prize draw system and create prize draws. | |
| panelgrp_admin | With read rights, you can access the group administration of the panel (Menu People → Groups). | |
| panelimport | With write rights, you can import panelists. | |
| panelmasterdata | With write rights, you can access thePeople → Master data menu. | |
| panelprom | With read rights, you can run tella-friend campaigns. | |
| panelstats | With read rights, you have access to the statistics of the master data. | |
| panelstatus | With read rights, you can view panel information after logging in. Without these rights, only information on active projects will be displayed.To gain access to the menus Website log and Session statistics, you have to combine read rights for “panelstatus” with read rights for “panelstats”. To access the Way of entry statistics, please combine read rights for “panelstatus” with read rights for “panel_status”. | |
| pci_admin | With write rights, you can administer the conditions and codes for the PCI calculation in the Panel configuration → PCI configurationmenu. | |
| reg_code | With read rights, you can access the menu People → Panel configuration → Ways of entry. | |
| sample_access | With read rights, you can access and edit existing samples in panel survey. | With write rights, you can create additional samples. |
| search_panel | With read rights, you can access the panelists administration. | With write rights, you can annotate panelists. |
Rights Related to People CMS Functions
| Right | Read | Write |
|---|---|---|
| add_website | With read rights, you can create new languages in the panel CMS. | With write rights, you can also create add new websites. |
| board_admin | With read rights, you can administer forums in the Website module. | With write rights, you can export the posts of a forum. Furthermore, you can see and create forum discussions in the Projects module. |
| mod_panelsite | With write rights, you can enter the module Website, which contains the Panel CMS. | |
| news_admin | With read rights you can edit the panel news. | |
| panel_blog_admin | With read rights, you can administer panelist blogs. | With write rights, you can export the posts of a blog. |
| panel_chats | With read rights, you can administer chats. | With write rights, you can export the posts of a chat. |
| panel_cms | You need both read and write rights to access the panel CMS. | You need both read and write rights to access the panel CMS. |
| panel_cms_publish | With read rights, you can publish pages and set pages offline in the panel CMS. | With write rights, you can activate and deactivate websites and language versions. |
| panel_cms_tests | With read rights, you can check websites and language versions for common issues in the panel CMS. | |
| panel_content_export | With read rights, you can export the content of panel websites in Excel files. | With write rights, you can import modified content back into the Panel CMS. |
| panel_custom_item | With write rights, you can manage the tasks displayed in the panelists’ todo lists. | |
| panel_download | With write rights, you can administer download lists. | |
| panel_facebook _config_global | With write rights, you can edit the global Facebook configuration. | |
| panel_facebook _config_local | With write rights, you can edit the local Facebook configuration. | |
| panel_img | With write rights, you can access the media library of the panel to view existing media or upload new media. | |
| panel_incentive | With write rights, you can manage bonuses, bonus categories and voucher code lists in the module “Website”. | |
| panel_messages | With read rights, you can administer discussions. | With write rights, you can export the posts of a discussion. |
| panel_online_editing | With write rights, you can edit the panel website directly in the preview. | |
| panel_quickpolls | With read rights, you can administer quick polls. | With write rights, you can export quick polls. |
| panel_subscription_admin | Write read rights, you can administer external feed subscriptions. | |
| panel_taxonomy | With read rights you can manage the taxonomy. | |
| panel_trigger | With read rights you can manage panel triggers. | |
| panel_website_forms | With read rights, you can access the website forms. | |
| panel_website_messages | With read rights, you can access the website messages. | |
| panel_website_placeholders | With read rights, you can access the website wildcards |
Rights Related to Panel Data Protection
| Right | Read | Write |
|---|---|---|
| export_panelists | With write rights, you can export address data of panelists in the export menu. | |
| export_ppasswd | With read rights, you can export the passwords of the panelists. | |
| panel_email_bonus | With read rights, you can view the e-mail addresses of the panelists in the bonus system.Please note that this right does not affect the e-mail addresses contained in the bonus points log: if you do not want users to access them, rights for “panel_log” should be revoked. | |
| panel_email_contacts | With read rights, you can view the e-mail addresses of the panelists in the contacts management system. | |
| panel_email_export | With read rights, you can export the e-mail addresses of panelists with the panel data export. | |
| panel_email_gratification | With read rights, you can view email addresses of panelists in the edit dialog of prize draws. | |
| panel_privacy_groups | With read rights, you can view the e-mail addresses of panelists in the edit dialog of panel groups. | |
| panel_email_promotion | With read rights, you can view the e-mail addresses of panelists in the edit dialog for campaigns. | |
| panel_privacy_sample | With read rights, you can view the e-mail addresses of panelists in samples of panel and master data surveys. | |
| panel_email_search | With read rights, you can view the e-mail addresses of panelists in the panelists administration. | |
| panel_email_statistics | With read rights, you can view the e-mail addresses of panelists in a panel or master data survey’s detail view statistics. | |
| panel_email_survey | With read rights, you can export the e-mail addresses of panelists with the survey results export. | |
| panel_email_website | With read rights, you can view the e-mail addresses of panelists in the community content menus of the panel website. | |
| show_ppasswd | With read rights, you can see the passwords of panelists. Furthermore, you can access panelist codes and login links and generate new panelist codes. | With write rights, you can change them as well. |
Right for Portals and Portal Functionality
| Right | Read | Write |
|---|---|---|
| portal_access | With write rights, you can access the module portals. |
Access Rights to Areas
| Right | Read | Write |
|---|---|---|
| Only in installations with EFS Secure Exchange: area_fm | With write rights, you can access the area “EFS Secure Exchange”. | |
| Only in installations with EFS Mobile Access: area_mobile_gui | With write rights, you can use EFS Mobile Access. It allows to check the status of your project or panel via iPhone or other mobile devices. The manual is available from Support | |
| Only in installations with EFS Survey Status: area_report | With write rights, you can access the area “EFS Survey Status”. | |
| Only in installations with EFS Translator Interface: area_translations | With write rights, you can access the area “EFS Translator Interface”. | |
| area_www | With write rights, you can access the EFS admin area. |
Rights for MySight Functions
| Right | Read | Write |
|---|---|---|
| mysight_self_siteadmin | With “write” permissions you gain access to the Tableau User-Account Administration (new User-Accounts will be created with the role “Site-Administrator”). | |
| mysight_self_sitepublisher | With “write” permissions you gain access to the Tableau User-Account Administration (new User-Accounts will be created with the role “Publisher”). | |
| mysight_text_dimension | With write rights, you can specify text variables which can be used as dimension in Mysight. |
Privacy Assistant
| Right | Read | Write |
|---|---|---|
| gdpr_activities | With “read” rights you can access and see all GDPR activities areas: GDPR settings (Personal Data Flagging, Data retention period, Consent form), Flagging user, c_ and p_ , Org_variables, master data and questions as personal data, Panel configuration (consent form configuration). | With “write” permissions you can execute all GDPR activities. |
| gdpr_activities_log | With “read” rights you can access the GDPR activities log area for projects, master data and consent templates. | |
| gdpr_global_lookup | With write right, you can use the Global respondent lookup. | |
| gdpr_purpose_templates | With “read” rights you can access the Consent form templates and export them. | With “write” permissions you can create, edit, copy, delete, import and export templates. |