Who Sees What and Who Does What?
The INSIGHT User Security Model helps brokerages control who can access clients and what actions users can perform within the system. By combining Client Permission Groups (CPGs) and Processing Permission Groups (PPGs), organisations can tailor security settings to match their operational structure and business needs.
IMPORTANT: Only users with INSIGHT Administrator rights can create, modify, and manage these security settings.
The Two Pillars of Security
Steadfast Apps security is built around two key concepts:
Client Permission Groups (CPGs)
Client Permission Groups determine which clients a user can access.
Click Details to learn more!
Key points:
- Every client must belong to one Client Permission Group.
- Users can belong to multiple Client Permission Groups.
- Users can only access clients assigned to their CPG(s).
- CPGs should be designed around your business's client access requirements.
Processing Permission Groups (PPGs)
Processing Permission Groups determine what users can do with the clients they can access.
Click Details to learn more!
Key points:
- Standard users must belong to one Processing Permission Group.
- Users can only belong to one PPG.
- PPGs define access to system functions, screens, and actions.
- Permissions can be broad for smaller brokerages or highly specialised for larger teams.
Examples of common PPG roles:
- Account Executive / Account Manager
- Broker Assistant
- Office Manager
- Accounts Processor
- Claims Officer
PPGs can include additional restrictions to further control access.
For example:
- Limit users to specific branches.
- Restrict access to selected Authorised Representatives.
- Apply default selections when creating or updating records.
This allows organisations to provide role-based access while maintaining operational control.
Bringing It Together: User Permissions
When creating a user profile, Administrators must assign:
✅ One or more Client Permission Groups
✅ One Processing Permission Group
Together, these determine:
- Which clients the user can access
- Which actions they can perform
The "Everybody" Client Permission Group
Steadfast Apps optionally includes an Everybody Client Permission Group, which allows all users with ledger access to view assigned clients.
Click Details to learn more!
How it Works
- Enabled or disabled in Setup > Ledger > Processing.
- When enabled, all users automatically belong to the Everybody CPG.
- Clients assigned to Everybody are accessible to all users.
Important Considerations
- Every client must have a CPG.
- Each client can belong to only one CPG.
- The Everybody CPG cannot be disabled until all clients assigned to it have been moved to another CPG.
- Contact INSIGHT Support before disabling Everybody if assistance is required.
? Best Practice: Use the Everybody CPG for shared clients and create additional CPGs for restricted or confidential client groups.
Creating Permission Groups
Click Details to learn more!
Creating a Client Permission Group
- Navigate to Setup > Security.
- Select Add on the Client Permission Group page.
- Enter a group name and description.
- Add users to the group.
- Save the configuration.
- Assign clients to the CPG via the client record.
Creating a Processing Permission Group
- Navigate to Setup > Security.
- Select Add on the Processing Permission Group page.
- Enter a group name and description.
- Add users immediately or later.
- Complete the Processing Permission Group Wizard.
- Save the group.
Save Time by Copying Existing PPGs
Need a new role that is similar to an existing one? Administrators can copy an existing Processing Permission Group.
Click Details to learn more!
- Go to Setup > Security > Processing Permission Groups.
- Select Copy against the group.
- Enter a unique name.
- Review and update permissions as required.
- Save the new group.
This is a quick way to maintain consistent security settings across similar roles.
Reporting on Security Settings
Users and Processing Permissions Report
Administrators can generate the Users and Processing Permissions Report to review system security settings.
The report provides:
- All Processing Permission Groups and their permissions
- Users assigned to each PPG
- Permissions assigned to individual users
The report is available under Reports > Administration and exports to Excel with three tabs:
| Tab | Purpose |
|---|---|
| PPGs | Lists all Processing Permission Groups and permissions |
| User per PPG | Shows users assigned to each PPG |
| Users and Permissions | Displays permissions assigned to each user |
Additional References
Check out this article for more information on:
|
Something got you stumped?
Our team is here to help! We know change can be tricky, but we've got your back.
Contact our support team here and well get back to you shortly
Was this article helpful?
That’s Great!
Thank you for your feedback
Sorry! We couldn't be helpful
Thank you for your feedback
Feedback sent
We appreciate your effort and will try to fix the article