Sage 100 Security Permissions

The information in this chapter provides the minimum Share and NT File System (NTFS) permission settings for servers and workstations to work properly with Sage 100. This chapter also provides procedures for setting permissions.

Setting NTFS and Share Permissions

There are two methods mentioned in this chapter for applying permission settings in an operating system: the Share (share point) method and the NTFS method. The following procedures describe how to set permissions using each method.

To set permissions using the Share method

1. In Windows Explorer, right-click the share point folder and select Properties. The Properties window opens.
2. Click the Sharing tab, and then select Share this folder.
3. Click Permissions. The Permissions window appears.
4. In the Group or user names section, select the group or user.
5. In the Permissions section, select the applicable permission (Full Control, Change, or Read).

To set permissions using the NTFS method

1. In Windows Explorer, right-click the folder and select Properties. The Properties window opens.
2. Click the Security tab.
3. In the Group or user names section, select the group or user.
4. In the Permissions section, select the applicable permission (Full Control, Change, or Read).

Sage 100 Server Minimum Permission Settings

The following information provides minimum permission settings for the local user account running on the Sage 100 server and for any network user account accessing the server from another computer.

Permissions for the Local User Running the Sage 100 Server

The following table provides the minimum permission settings for the local user account running the Sage 100 application either as a service or an application. The user account must be a member of the Administrators group (or equivalent). Do not use the system account to run the Sage 100 server application.

Set the share point and NTFS permissions in the table below for the local user account running on the server to perform the functions and tasks indicated.

Permissions for local user running the server

Task	Minimum Share Permission	Minimum NTFS Permission	Folder
Application Utilities	Change	Full Control	..\MAS90
Business Insights Explorer	Change	Full Control	..\MAS90
Business Insights Reporter	Change	Full Control	..\MAS90
Change Data Location	Change	Full Control (for the destination location)	..\MAS90
Custom Office	Change	Full Control	..\MAS90
Office Template Manager	Change	Full Control	..\MAS90
Modifying Forms and Reports from within Modules	Change	Full Control	..\MAS90
Library Master Utilities	Change (for the Sage 100 share point)	Full Control	..\MAS90
Printing Tasks	Change	Full Control	..\MAS90
Report Manager	Change	Full Control	..\MAS90
Update Tasks	Change	Full Control	..\MAS90

When updating user-defined fields (UDFs), if alternate directories exist, the account running on the Sage 100 server must have Change permissions set to all share point folders where company data exists to be able to update records.

Permissions for Other Users accessing the Sage 100 Server

The following information provides the minimum permission settings for user accounts performing Sage 100 tasks on the Sage 100 server from another computer.

Permissions for others accessing the server

Task	Minimum Share Setting	Minimum NTFS Setting	File or Folder
ACH Electronic Payments Folder	Change	Write	..\MASxxx\APxxx where xxx represents the company code (Default folder can be changed in Accounts Payable Options)
Application Utilities	No Permissions Required	No Permissions Required
Business Insights Explorer	Change	Write	..\MAS90\BIExplorer\views
Business Insights Reporter	Change	Write	Files: ..\MAS90\Providex.DDF ..\MAS90\PVXVIEW ..\MAS90\PVXVIEW.GPD ..\MAS90\PVXVIEW.ITM ..\MAS90\PVXVIEW.SRC ..\MAS90\PVXVIEW.VUE Folders: ..\MAS90\HOME\LIB ..\MAS90\MAS_SYSTEM ..\MAS90\Reports\BIReporter
Change Data Location	No Permissions Required	No Permissions Required
Custom Office	No Permissions Required	No Permissions Required
Office Template Manager	Change	No Permissions Required	..\MAS90\OfficeTemplates
Task	Minimum Share Setting	Minimum NTFS Setting	File or Folder
Modifying Forms and Reports from within Modules	Change	Write	..\MAS90\MAS_XXX\Reports ..\MAS90\Reports\###-### ..\MAS90\###-XXX ..\MAS90\MAS_System\Reports (where XXX is the company code)
Federal and State eFiling and Reporting	Change	Write	..\MAS90\MAS_XXX \APXXX\eFilingReporting ..\MAS90\MAS_XXX \PRXXX\eFilingReporting (where XXX is the company code)
Library Master Utilities	No Permissions Required	No Permissions Required
Paperless Office PDF Folder	Change	Write	Defined in Paperless Office maintenance tasks
Payroll Direct Deposit (ACH) File Folder	Change	Write	..\MASxxx\PRxxx where xxx represents the company code (Default folder can be changed in Payroll Options)
Printing Tasks	None/ Read/ Change/ Full	No Permissions Required
Report Manager (for modifying forms)	Change	Write	..\MAS90\MAS_XXX\Reports ..\MAS90\Reports\###-### ..\MAS90\###-XXX ..\MAS90\MAS_System\Reports
Update Tasks	No Permissions Required	No Permissions Required

Sage 100 Workstation Permission Settings

The following information provides minimum permission settings that must be set for Sage 100 workstations.

Installation Security for Workstations

Administrator rights must be set at the local workstation to install the workstation software and to run the Migrate Level 3 Data wizard and the Parallel Migration Wizard.

Report Security for Sage 100 Advanced Workstations

For Sage 100 Advanced, reports are cached in the following client workstation hidden folder:

C:\ProgramData\Sage Software\Cache\MAS 200\Reports

The permission setting for this folder is set by the operating system, and should not be changed.

NTFS Permissions for Sage 100 Advanced and Premium Workstations

The following NTFS permission settings must be set at the Sage 100 Advanced and Premium workstations.

NTFS permissions for Advanced and Premium workstations

Minimum NTFS Setting	Folder
Modify	..\Mas90\Launcher
Write	..\Mas90\Home
Write	..\Mas90\Soa