Customers Permissions
The Customers category covers everything related to viewing and managing customer records. It is the largest permission category in SecurityTrax, spanning the customer record itself, financial screens, confidential data fields, central station provider access, and visibility restrictions that limit which customers a user can see.
How to read the tables. The Access Levels column lists the available grant types. VCMD means View, Create, Modify, and Delete are all available. Yes means the permission is a single toggle — the user either has it or does not.
Customer Record
Core permissions that control access to sections of the customer record. Confidential data fields are nested beneath the record section they belong to — for example, Social Security Number sits under Contact Information and Account Number under Sale Information. A confidential field is masked until the user holds its specific permission; grant these only to roles that need the underlying data (billing, management, compliance).
| Permission | Access Levels | Description |
|---|---|---|
| Customers | VCMD | The base permission required to view any customer data. Without at least View, the user cannot access customer records at all. |
| Billing Information | VCMD | Access to the billing information section of a customer record. |
| ↳ Bank Account Details | Yes | View bank account information (account number, routing number). |
| ↳ Credit Card Details | Yes | View credit card information (card number, expiration). |
| ↳ Duplicates Restriction - Can Override | Yes | Override the duplicate credit card restriction when the same card is used on multiple accounts. |
| Contact Information | VCMD | Access to the contact information section of a customer record. |
| ↳ Beacon Score | Yes | View the customer's beacon (credit) score. |
| ↳ Birthday | Yes | View the customer's date of birth. |
| ↳ Social Security Number | Yes | View the customer's social security number. |
| Installation & Equipment Information | VCMD | Access to the installation and equipment information section of a customer record. |
| ↳ Abort Code | Yes | View the customer's abort code. |
| ↳ Confirmation Number | Yes | View the customer's confirmation number. |
| ↳ Receiver Number | Yes | View the customer's receiver number. |
| Sale Information | VCMD | Access to the sale information section of a customer record. |
| ↳ Account Number | Yes | View the customer's account number. |
| ↳ Cancel Customer | Yes | Cancel a customer record. |
Notes, Tickets & Work Orders
Permissions for notes, tickets, work orders, and their associated tags.
| Permission | Access Levels | Description |
|---|---|---|
| Notes & Tickets | VCMD | Access to notes and tickets on a customer. |
| Tags (Notes) | VCMD | Manage tags on notes and tickets. |
| Work Orders | VCMD | Access to work orders on a customer. |
| Tags (Work Orders) | VCMD | Manage tags on work orders. |
Financial
Permissions for billing, payments, invoices, funding, and related financial features.
| Permission | Access Levels | Description |
|---|---|---|
| Consumer Financing | VCMD | Manage consumer-financing applications on a customer. |
| Credit Reports | VCMD | Run and view credit reports for a customer. |
| Funding Details | VCMD | Access the funding details page on a customer. |
| Invoices | VCMD | Manage invoices on a customer. |
| Payables (Includes Payroll) | VCMD | Access payables and payroll entries on a customer. |
| Payments | VCMD | Access the payments screen on a customer. |
| Payments Processing | VCMD | Manage and process payments (run transactions, void, refund). |
| Can Issue Credit | Yes | Issue credit to a customer's account. |
Central Station Providers
Each permission grants access to a specific central station provider's data on a customer record. All are Yes-only toggles. A permission is only relevant if your company uses that monitoring provider.
| Permission | Access Levels |
|---|---|
| AAA/A3 Smart Home | Yes |
| ADT | Yes |
| ADT Collections Info | Yes |
| ADT Funding Info | Yes |
| Affiliated Monitoring | Yes |
| Alarm Central | Yes |
| Alarm.com | Yes |
| Alert 360 | Yes |
| All American Monitoring | Yes |
| American Two-Way | Yes |
| a.p.i. Monitoring | Yes |
| AvantGuard | Yes |
| Brinks Home Security | Yes |
| CMS | Yes |
| COPS Monitoring | Yes |
| Dynamark Monitoring | Yes |
| ESC Central | Yes |
| Guardian Protection | Yes |
| Legacy Security Services | Yes |
| Protection One | Yes |
| Rapid Response | Yes |
| SecureNet | Yes |
| Security Partners | Yes |
| TELUS | Yes |
| United Central Control | Yes |
Other Features
Permissions for additional customer-level features and screens.
| Permission | Access Levels | Description |
|---|---|---|
| At Risk | VCMD | Manage the at-risk page on a customer. |
| Electronic Document Management | VCMD | Manage electronic documents and contracts on a customer. |
| Emergency Contacts | VCMD | Access emergency contacts on a customer. |
| Equipment | VCMD | Access the equipment page on a customer. This is separate from the admin-level equipment catalog. |
| Export | Yes | Export a customer record. |
| Files | VCMD | Access the files page on a customer. |
| History | Yes | Access the history tab on a customer. Warning: the history tab is not filtered by other permissions and may show sensitive information. Grant carefully. |
| Messages | VCMD | Send messages (email and SMS) from a customer record. |
| Partner Technician Scheduling | VCMD | Manage partner tech scheduling on a customer. |
| Property Analysis & Ownership Verification | Yes | Access property analysis and ownership verification tools on a customer. |
| Tags | VCMD | Access the tags page on a customer. |
| Customer Workflows | VCMD | View, enroll, progress, and unenroll customers in workflows. |
Actions
One-time actions that can be performed on a customer record. All are Yes-only toggles.
| Permission | Access Levels | Description |
|---|---|---|
| Duplicate | Yes | Duplicate an existing customer record. |
| Sell To Partner | Yes | Sell a customer to a partner company. |
Visibility Restrictions
Visibility restrictions limit which customers a user can see based on the user's relationship to the customer record. All are Yes-only toggles.
Unlike standard permissions that grant access, restrictions remove access. When a restriction is applied to a user, that user can only see customers that match the restriction's criteria — even if the user otherwise has full Customer View permission.
The All-Access group is automatically exempt from all visibility restrictions (all_access_permissions = 0). Users in the All-Access group are never affected by these restrictions.
| Restriction | Description |
|---|---|
| Only View If Marked As Lead Rep | The user can only view customers where they are assigned as the lead rep. |
| Only View If Lead Rep is Hierarchy Descendant | The user can only view customers where the assigned lead rep is below them in the organizational hierarchy. |
| Only View If Marked As Sales Rep/Trainee/Trainer | The user can only view customers where they are assigned as the sales rep, trainee, or trainer. |
| Only View If Sales Rep is Hierarchy Descendant | The user can only view customers where the assigned sales rep is below them in the organizational hierarchy. |
| Only View If The Tech of Initial Install | The user can only view customers where they were the technician on the initial installation. |
| Only View If Tech Performed Any Visit | The user can only view customers where they performed any technician visit. |
When multiple restrictions are applied to the same user, the user can see a customer if any of the applied restrictions match — the restrictions are combined with OR logic.
Tips
- The base "Customers" permission is the gateway. Without at least View on Customers, no other customer-category permission has any effect. Grant it first.
- Confidential fields should be tightly controlled. Only grant these to billing, management, or compliance roles that genuinely need to see sensitive data like SSNs, credit card numbers, or bank details.
- Central station provider permissions are only relevant for providers your company uses. If you do not use ADT, the ADT permission has no practical effect. Only grant what applies to your monitoring setup.
- Visibility restrictions are powerful — test before applying broadly. Apply a restriction to a single test user first to confirm the behavior matches your intent. A misconfigured restriction can lock users out of customers they need to work with.
- Restrictions are exempt for the All-Access group. If a user is in the All-Access group, visibility restrictions do not apply. Keep this in mind when auditing access for compliance purposes.
- History shows unfiltered data. The History tab permission does not respect other section-level permissions. A user with History access may see information about fields they cannot otherwise view. Consider this when granting History to roles with limited access.