Create Fund Advisor Login (for Legacy Portal) from "Fund Advisor" record
Only staff members with full "Manage Login Info/Login As" permissions on the Profile can fully set up a new "Fund Advisor" record through to the "Send Login Email" step.
Having "Manage Login Info/Login As" means the employee can reset ANY staff member's password - which means they can take over any account in CSuite. This is essentially the MOST critical security authorization available.
We will not give our fundraising staff this level of access, but it means that all new Fund Advisor setups must run through one of our primary site administrators rather than be managed by our fundraisers.
There needs to be a separate permission level to create accounts for Non-Employee/Legacy Fund Portal members.

-
Tiffany Caron commented
Our concern with this has been resolved. We can now turn off the ability to login as Staff and still keep access to Login as Fund Advisors :-) Thank you.
-
Tiffany Caron commented
We are also worried about Staff being able to login as other staff with only one login as permission available. We have limited staff with full admin access and others who only require login as permissions to assist our Fund Advisors, Donors etc...We would like to see the login as permission for Staff Users and Funds advisors, Donors, Organizations etc.. separated. This will significantly minimize the risk that a disgruntled employee uses the login as permission to login as another employee to make changes/updates anywhere in the system.
-
spencer butler commented
It should NOT require two staff members to provide logon access to new fund advisors.