6 results found

1. timeout

   We opened the new portal to our Board for evaluation, and we received a complaint that there was no timeout for the portal. The user had left their PC after logging in and found it was still connected to the portal a couple hours later. A timeout is a standard feature for financial websites. We benchmark against Fidelity, for example, and they have this feature.

   This idea was submitted long ago and only got 4 votes, so it was closed by Holly. I'm proposing to re-open it and once again gauge its importance.

   8 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Permissions/Logs  ·  Delete…  ·  Admin →
   Implemented  ·  AdminSkye Weber (Admin, Foundant Technologies) responded

   3/12/2025:Login: We have implemented an update to the portal login process to enhance security and provide more controlled access based on profile designations. This change significantly improves security by limiting who can log in with an email and controlling which profiles are visible to the user. The enhanced login flow helps ensure that users only access profiles relevant to their designated roles. The email login method is now limited to profiles that have a designation enabled for portal access. If the email entered is not associated with any profile, no pin will be sent to the user. If the primary email on the profile does not have a designation enabled for the portal, they profile will be directed to the “Enter your PIN” page. The messaging will clarify that "If we have the email in our system, we will send you a pin." Logins will expire after 1 day following the same process as a logged in user. If a user has a username and password set up they will no longer be able to login with just the email, as long as there is a profile designation. If a profile has a user designation, email login will not send a pin.

   Users with a username and password can still log in normally. If the profile has no designations, the user will be directed to their own profile page and will not be able to see other profiles.

   Portal-Profile: The profiles shown on the profile selection page are now determined by the designation linked to the email used for login. If a user logs in with an email associated with a profile that has a designation (e.g., Fund Advisor), only profiles with the same primary email and corresponding enabled designations will be displayed.

   This change ensures that users can only view profiles with designations that are enabled on the portal.

   3/12/2025:Login: We have implemented an update to the portal login process to enhance security and provide more controlled access based on profile designations. This change significantly improves security by limiting who can log in with an email and controlling which profiles are visible to the user. The enhanced login flow helps ensure that users only access profiles relevant to their designated roles. The email login method is now limited to profiles that have a designation enabled for portal access. If the email entered is not associated with any profile, no pin will be sent to the user. If the primary email on the profile does not have a designation enabled for the portal, they profile will be directed to the “Enter your PIN” page. The messaging will clarify that "If we have the email in our system, we will send you a pin." Logins will expire after 1 day following the… more

2. New Portal: Separate "Manage Login Info" Permissions for internal and external users

   The new portal has merged security permissions for managing CSuite user account access and fund advisor login account. With the new portal there is only one permission setting in Profiles that is all or nothing for all users - both internal staff and external users with Portal access.

   We have separate team members who manage these two groups. We have our site administrators managing our employee / user accounts / permission groups and we have our fund administrators managing our fund advisor user accounts. In the previous set up, those permissions were separate.

   We need the option back to separate these permission levels.

   This is specifically referring to separating the ability to manage usernames and passwords for internal vs. external users.

   You are offering Login As separately. We need the ability to manage user logins to also be separate.

   The new portal has merged security permissions for managing CSuite user account access and fund advisor login account. With the new portal there is only one permission setting in Profiles that is all or nothing for all users - both internal staff and external users with Portal access.

   We have separate team members who manage these two groups. We have our site administrators managing our employee / user accounts / permission groups and we have our fund administrators managing our fund advisor user accounts. In the previous set up, those permissions were separate.

   We need the option back to separate… more

   3 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  Permissions/Logs  ·  Delete…  ·  Admin →
   Implemented  ·  Holly Spitz responded

   There are two separate permissions for Profiles. Here is a snippet from the release note: there is an update to Profile Permissions: Manage Login Info/Login As. This will be released for the Admin permission.

   Permission Changes: Manage Login Info/Login As and Login as User.

3. Permissions Audit Capability or Report? Permissions definitions?

   We have just gone into our second year using CSuite and are ready to take a hard look at Permissions. We are finding we would rather have 'departmental' user groups than just the default distinction between Accounting and Staff that was set up at implementation. We have just been granting specific permissions on the fly, as staff run into tasks they are unable to complete, and would like to re-establish a controlled structure.

   We are running into a few hurdles as we try to approach this project, specifically:

   1: there aren't any good definitions on WHAT each permission actually does ( for example, what is the difference between 'display' and 'list'?)

   2: there doesn't seem to be any efficient way to get an audit report to see what the current settings ARE for each group. As it stands you have to manually go into each 'Object' (such as Accounts, Bank Reconcile, Funds) and then click 'Show Advanced' to see the detailed settings. Then once you're able to SEE them, there is no good way to export that information so you can get it into a meaningful format.

   I was able to do a bulk granting of permissions to a test group, then used an Audit Log report to see what actions were taken by the system, and was able to extrapolate that there are over 600 specific permissions. I've attached the resulting spreadsheet here, perhaps it will save someone else the time.

   It really would be very helpful if the UI for managing permissions could be built out to help administrators review, audit and issue permissions more intentionally.

   We have just gone into our second year using CSuite and are ready to take a hard look at Permissions. We are finding we would rather have 'departmental' user groups than just the default distinction between Accounting and Staff that was set up at implementation. We have just been granting specific permissions on the fly, as staff run into tasks they are unable to complete, and would like to re-establish a controlled structure.

   We are running into a few hurdles as we try to approach this project, specifically:

   1: there aren't any good definitions on WHAT each permission actually does… more

   • 

   40 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   3 comments  ·  Permissions/Logs  ·  Delete…  ·  Admin →
   Implemented  ·  Holly Spitz responded

   Here is a link to a help article which lists the description of each permission:  

   https://support.foundant.com/hc/en-us/articles/4447782019351-Detailed-Permissions

   
   

   There are several custom reports that should help you review the permission settings in your site.  

   
   

   • Group - will give you a list of groups
   • Group Action - will give you a list groups along with the advanced action for each group.  The report can be grouped by the object, then sorted by the group name to review a site's permissions
   • User Action - will give you a list of Users and the permissions that they have access to.  The report can be grouped by employee then sorted by object.  
   • User Group - will give you a list of employees and the group they have been assigned to.  The report can be grouped by group name to easily review the users assigned to each group.

4. Release changes to permissions

   It would be extremely helpful if there could be a separate part of the release notes dedicated to the impact of the changes on permissions. As the admin for my org, when new releases come out it is frustrating to our staff that they can't see some of the new things because they don't have the permission for them. As it is right now, I can't know what new permissions are needed until they don't have access.

   An example of this is the new dashboards in the sandbox. This is a new permission that had to be given to everyone but was not indicated anywhere.

   It would be extremely helpful if there could be a separate part of the release notes dedicated to the impact of the changes on permissions. As the admin for my org, when new releases come out it is frustrating to our staff that they can't see some of the new things because they don't have the permission for them. As it is right now, I can't know what new permissions are needed until they don't have access.

   An example of this is the new dashboards in the sandbox. This is a new permission that had to be given to everyone… more

   5 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Permissions/Logs  ·  Delete…  ·  Admin →
   Implemented  ·  AdminSkye Weber (Admin, Foundant Technologies) responded

   We will be adding a separate section on the release notes.  

   
   

   Just FYI, anytime a permission is added it is just to Admin level. 

5. Notification of Permission Additions/Changes

   It would be helpful to know when new permissions have been added in the system, with a very brief description of what that permission is. Existing permissions don't change much but if they do that should be noted as well. An idea might be a special permissions log that shows any changes in the system to permissions, but any notification, such as in release notes, helps.

   4 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   Implemented  ·  1 comment  ·  Permissions/Logs  ·  Delete…  ·  Admin →

6. permissions in custom reports

   I have not found a custom report that will show me all the groups and their each group's permissions.

   It would be helpful if we could have such a report to see all the permissions in one place instead of having to go to each section.

   18 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   6 comments  ·  Permissions/Logs  ·  Delete…  ·  Admin →
   Implemented  ·  Holly Spitz responded

   Here is a link to a help article which lists the description of each permission:

   https://support.foundant.com/hc/en-us/articles/4447782019351-Detailed-Permissions

   There are several custom reports that should help you review the permission settings in your site.

   • Group - will give you a list of groups
   • Group Action - will give you a list groups along with the advanced action for each group.  The report can be grouped by the object, then sorted by the group name to review a site's permissions
   • User Action - will give you a list of Users and the permissions that they have access to.  The report can be grouped by employee then sorted by object.
   • User Group - will give you a list of employees and the group they have been assigned to.  The report can be grouped by group name to easily review the users assigned to each group.