Sage 100 Security Permissions

The information in this appendix provides the minimum Share and NT File System (NTFS) permission settings for servers and workstations to work properly with Sage 100. This appendix also provides procedures for setting permissions.

Setting NTFS and Share Permissions

There are two methods mentioned in this appendix for applying permission settings in an operating system: the Share (share point) method and the NTFS method. The following procedures describe how to set permissions using each method.

To set permissions using the Share method

  1. In Windows Explorer, right-click the share point folder and select Properties. The Properties window opens.
  2. Click the Sharing tab, and then select Share this folder.
  3. Click Permissions. The Permissions window appears.
  4. In the Group or user names section, select the group or user.
  5. In the Permissions section, select the applicable permission (Full Control, Change, or Read).

To set permissions using the NTFS method

  1. In Windows Explorer, right-click the folder and select Properties. The Properties window opens.
  2. Click the Security tab.
  3. In the Group or user names section, select the group or user.
  4. In the Permissions section, select the applicable permission (Full Control, Change, or Read).

Sage 100 Server Minimum Permission Settings

The following information provides minimum permission settings for the local user account running on the Sage 100 server and for any network user account accessing the server from another computer.

Permissions for the Local User Running the Sage 100 Server

The following table provides the minimum permission settings for the local user account running the Sage 100 application either as a service or an application. The user account must be a member of the Administrators group (or equivalent). Do not use the system account to run the Sage 100 server application.

Set the share point and NTFS permissions in the table below for the local user account running on the server to perform the functions and tasks indicated.

Permissions for local user running the server

Task

Minimum Share Permission

Minimum NTFS Permission

Folder

Application Utilities

Change

Full Control

..\MAS90

Business Insights Explorer

Change

Full Control

..\MAS90

Business Insights Reporter

Change

Full Control

..\MAS90

Change Data Location

Change

Full Control (for the destination location)

..\MAS90

Custom Office

Change

Full Control

..\MAS90

Office Template Manager

Change

Full Control

..\MAS90

Modifying Forms and Reports from within Modules

Change

Full Control

..\MAS90

Library Master Utilities

Change
(for the Sage 100 share point)

Full Control

..\MAS90

Printing Tasks

Change

Full Control

..\MAS90

Report Manager

Change

Full Control

..\MAS90

Update Tasks

Change

Full Control

..\MAS90

When updating user-defined fields (UDFs), if alternate directories exist, the account running on the Sage 100 server must have Change permissions set to all share point folders where company data exists to be able to update records.

Permissions for Other Users accessing the Sage 100 Server

The following information provides the minimum permission settings for user accounts performing Sage 100 tasks on the Sage 100 server from another computer.

Note: For printing tasks, a Read, Change, or Full permission is required to print to local and network rinters. If no share permission is defined, printing is restricted to deferred reports. Access to the Deferred Printing task is based on security settings in Role Maintenance.

Permissions for others accessing the server

Task

Minimum Share Setting

Minimum NTFS Setting

File or Folder

ACH Electronic Payments Folder

Change

Write

..\MASxxx\APxxx
where xxx represents the company code
(Default folder can be changed in Accounts Payable Options)

Application Utilities

No Permissions Required

No Permissions Required

 

Business Insights Explorer

Change

Write

..\MAS90\BIExplorer\views

Business Insights Reporter

Change

Write

Files:
..\MAS90\Providex.DDF
..\MAS90\PVXVIEW
..\MAS90\PVXVIEW.GPD
..\MAS90\PVXVIEW.ITM
..\MAS90\PVXVIEW.SRC
..\MAS90\PVXVIEW.VUE

Folders:
..\MAS90\HOME\LIB
..\MAS90\MAS_SYSTEM
..\MAS90\Reports\BIReporter

Change Data Location

No Permissions Required

No Permissions Required

 

Custom Office

No Permissions Required

No Permissions Required

 

Office Template Manager

Change

No Permissions Required

..\MAS90\OfficeTemplates

Task

Minimum Share Setting

Minimum NTFS Setting

File or Folder

Modifying Forms and Reports from within Modules

Change

Write

..\MAS90\MAS_XXX\Reports
..\MAS90\Reports\###-###
..\MAS90\###-XXX
..\MAS90\MAS_System\Reports

(where XXX is the company code)

Federal and State eFiling and Reporting

Change

Write

..\MAS90\MAS_XXX
\APXXX\eFilingReporting

..\MAS90\MAS_XXX
\PRXXX\eFilingReporting

(where XXX is the company code)

Library Master Utilities

No Permissions Required

No Permissions Required

 

Paperless Office PDF Folder

Change

Write

Defined in Paperless Office maintenance tasks

Payroll Direct Deposit (ACH) File Folder

Change

Write

..\MASxxx\PRxxx
where xxx represents the company code
(Default folder can be changed in Payroll Options)

Printing Tasks

None/
Read/
Change/
Full

No Permissions Required

 

Report Manager (for modifying forms)

Change

Write

..\MAS90\MAS_XXX\Reports
..\MAS90\Reports\###-###
..\MAS90\###-XXX
..\MAS90\MAS_System\Reports

Update Tasks

No Permissions Required

No Permissions Required

 

Sage 100 Workstation Permission Settings

The following information provides minimum permission settings that must be set for Sage 100 workstations.

Installation Security for Workstations

Administrator rights must be set at the local workstation to install the workstation software and to run the Migrate Level 3 Data wizard and the Parallel Migration Wizard.

Report Security for Sage 100 Advanced Workstations

For Sage 100 Advanced, reports are cached in the following client workstation hidden folder:

C:\ProgramData\Sage Software\Cache\MAS 200\Reports

The permission setting for this folder is set by the operating system, and should not be changed.

NTFS Permissions for Sage 100 Advanced and Premium Workstations

The following NTFS permission settings must be set at the Sage 100 Advanced and Premium workstations.

NTFS permissions for Advanced and Premium workstations

Minimum NTFS Setting

Folder

Modify

..\Mas90\Launcher

Write

..\Mas90\Home

Write

..\Mas90\Soa