AddModifyAccountExternalName

Permission to add and modify account names in the Account External Name window.

CreateAccount

Permission to create accounts, provided one of the following functions is also granted to create the corresponding type of account:

Example – To create an account of type CLOSING, you need CreateAccount and CreateAccountCLOSING.

CreateAccountCLOSING, CreateAccountLINK, CreateAccountNORMAL, CreateAccountSETTLE, CreateAccountSTOCK

Permission to create accounts of corresponding type (CLOSING, LINK, NORMAL, SETTLE, or STOCK), provided the CreateAccount function is also granted.

CreateAccountSETTLE does not allow creating call accounts, you need to have the function CreateCallAccount.

ModifyAccount

Permission to modify accounts, provided one of the following functions is also granted to modify the corresponding type of account:

Example – To modify an account of type CLOSING, you need ModifyAccount and ModifyAccountCLOSING.

ModifyAccountCLOSING, ModifyAccountLINK, ModifyAccountNORMAL, ModifyAccountSETTLE, ModifyAccountSTOCK

Permission to modify accounts of corresponding type (CLOSING, LINK, NORMAL, SETTLE, or STOCK), provided the ModifyAccount function is also granted.

ModifyAccountSETTLE does not allow modifying call accounts, you need to have the function ModifyCallAccount.

ModifyALLProcessingOrgStaticData

ModifyOnlyProcessingOrgStaticData

ProcessAccountInterest

Permission to compute account interest on-the-fly, Process Interest button in the Interest panel.

RemoveAccount

Permission to remove accounts, provided one of the following functions is also granted to remove the corresponding type of account:

Example – To remove an account of type CLOSING, you need RemoveAccount and RemoveAccountCLOSING.

RemoveAccountCLOSING, RemoveAccountLINK, RemoveAccountNORMAL, RemoveAccountSETTLE, RemoveAccountSTOCK

Permission to remove accounts of corresponding type (CLOSING, LINK, NORMAL, SETTLE, or STOCK), provided the RemoveAccount function is also granted.

RemoveAccountSETTLE does not allow removing call accounts – Call Accounts cannot be removed.

ReOpenAccountClosure

Permission to reopen a closed account.

UseProcessingOrgHierarchy

ViewOnlyProcessingOrgStaticData

Account Statement

AddModifyAccountStatement

Permission to add and modify account statements in the Statements panel.

RemoveAccountStatement

Permission to remove account statements from the Statements panel.

Dormant Process

DormantAccount

Permission to Accept Dormancy.

RejectDormantAccount

Permission to reject Dormancy.

ReactivateDormantAccount

Permission to re-activate a dormant account.

Call Accounts

BlockAccount

Permission to block an Active call account.

CreateCallAccount

Permission to create call accounts, provided the CreateAccount function is also granted.

ModifyCallAccount

Permission to modify call accounts, provided the ModifyAccount function is also granted.

ModifyAccountNotEditableFields

Permission to modify non editable fields entered in the domain “AccountProductTemplateNotEditable” when using call account product templates.

SuspendAccount

Allows the user to manually change the account status to Suspended (without ActiveTo date). Do not use this access perm unless you need to temporarily suspend an account.

CloseAccount

Allows the user to manually change the account status from Suspended to Closed.

PerformAccountClosure

Allows the user to run the Account Closure process.

PerformForceAccountClosure

Allows the user to force the Account Closure process even if there is no Interest Bearing trade and an error message appears upon account closure.

UnblockAccount

Permission to unblock a blocked call account.

UndoAccountClosure

Allows the user to undo the account closure.

UpdateAccountDormantDates

Allows the user to modify the dormant date.

CloseAccount and PerformAccountClosure functions must be combined with the appropriate Product Access permissions: Trade, product = CallAccount, Status = None, and Action = Modify.

AddModifyAccountInterest

Permission to create and modify account interests.

RemoveAccountInterest

Permission to remove account interests.

AddModifyIndividualAccountInterestRanges

Permission to modify quick entry configurations.

ModifyOnlyProcessingOrgStaticData

UseProcessingOrgHierarchy

ViewOnlyProcessingOrgStaticData

CreateAccountingBook

Permission to create accounting books.

RemoveAccountingBook

Permission to remove accounting books.

CreateAccountingEvent

Permission to create accounting events.

RemoveAccountingEvent

Permission to remove accounting events.

CreateAccountingRule

Permission to create accounting rules.

ModifyAccountingRule

Permission to modify accounting rules.

RemoveAccountingRule

Permission to remove accounting rules.

ModifyALLProcessingOrgStaticData

ModifyOnlyProcessingOrgStaticData

ViewOnlyProcessingOrgStaticData

AddModifyAccountMapping

Permission to create and modify account mapping configurations.

RemoveAccountMapping

Permission to remove account mapping configurations.

ModifyOnlyProcessingOrgStaticData

UseProcessingOrgHierarchy

AddModifyAccountSweeping

Permission to create and modify account sweeping configurations.

RemoveAccountSweeping

Permission to remove account sweeping configurations.

ViewOnlyProcessingOrgStaticData

CreateHedgeDefinition

Permission to create a hedge definition.

ModifyHedgeDefinition

Permission to modify a hedge definition.

RemoveHedgeDefinition

Permission to remove a hedge definition.

CreateHedgePricerMeasureMapping

Permission to create a hedge pricer measure mapping.

ModifyHedgePricerMeasureMapping

Permission to modify a hedge pricer measure mapping.

RemoveHedgePricerMeasureMapping

Permission to remove a hedge pricer measure mapping.

CreateHedgeRelationshipConfiguration

Permission to create a hedge relationship config.

ModifyHedgeRelationshipConfiguration

Permission to modify a hedge relationship config.

RemoveHedgeRelationshipConfiguration

Permission to delete a hedge relationship config.

In order to run the Calypso Navigator, the user must be granted the Connect function, and must be granted read-write access to the "Navigator" application under Access > Application Name.

You may need to add Navigator to the domain "applicationName".

Connect

Permission to run the Calypso Navigator.

ViewDataServerInfo

Permission to view Data Server information.

Access permissions for market data are multi-fold:

Note that the pricer configuration control can be removed by setting the environment property DISABLE_MDI_PC_PERMISSION_INHERITANCE to true.

Examples – To create an OPEN CurveZero, you need the functions CreateCurve and CreateMarketDataOPEN, and you need read-write access to the CurveZero curve type.

To modify an OPEN CurveZero that belongs to a pricer configuration, you need read‑write access to the pricer configuration, and you need the functions ModifyCurve and ModifyMarketDataOPEN.

To use a CurveZero in a pricing environment, you need read-only or read-write access to the CurveZero curve type, and read-only or read-write access to all the components of the pricing environment.

CreateCurve

Permission to create curves, provided one of the following functions is also granted:

CreateMarketData

Same as CreateCurve for volatility surfaces, and correlation and covariance data.

CreateMarketDataCLOSE, CreateMarketDataLAST, CreateMarketDataOPEN

Permission to create specified instances of curves (CLOSE, LAST, or OPEN), provided the CreateMarketData function is also granted.

Disallow Save Quotes From Curve Window

Restriction to disable the Save Quotes button in the Quotes panel of the Curve windows.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

ModifyCurve

Permission to modify curves, provided one of the following functions is also granted:

ModifyMarketData

Same as ModifyCurve for volatility surfaces, and correlation and covariance data.

ModifyMarketDataCLOSE, ModifyMarketDataLAST, ModifyMarketDataOPEN

Permission to modify specified instances of curves (CLOSE, LAST, or OPEN), provided the ModifyMarketData function is also granted.

RemoveCurve

Permission to remove curves, provided one of the following functions is also granted:

RemoveMarketData

Same as RemoveCurve for volatility surfaces, and correlation and covariance data.

RemoveMarketDataCLOSE, RemoveMarketDataLAST, RemoveMarketDataOPEN

Permission to remove specified instances of curves (CLOSE, LAST, or OPEN), provided the RemoveMarketData function is also granted.

ModifyMktDataQuotes

Permission to create and modify quotes in the Quotes panel, provided one of the following functions is also granted:

ModifyMktDataQuotesClose, ModifyMktDataQuotesLast, ModifyMktDataQuotesOpen

Permission to create and modify specified instances of quotes (CLOSE, LAST, or OPEN) in the Quotes panel, provided the ModifyMktDataQuotes function is also granted.

RemoveMktDataQuotes

Permission to remove quotes from the Quotes panel.

ViewQuoteTab

Permission to view the Quotes panel in the Zero Curve and Basis Curve windows.

Access permissions for credit ratings are twofold:

CreateLECreditRating

Permission to create credit ratings.

ModifyLECreditRating

Permission to modify credit ratings.

RemoveLECreditRating

Permission to remove credit ratings.

AuthorizeCreditRating

Permission to authorize credit rating modifications for a legal entity.

ViewBetaMatrix

Permission to display a beta matrix.

ModifyBetaMatrix

Permission to modify a beta matrix.

ViewDTSMapper

Permission to open the DTS Monitor.

AllowDTSMapperAmendments

Permission to make trade amendments in the DTS Monitor.

Note that you can add the trade workflow rule ClearDTSErrors to the workflow on a transition to be executed when a trade is amended. The DTS record is retrieved, and all messages are marked as fixed.

ViewFeedQuoteWindow

Permission to open the Feed Quotes window.

PublishFeedQuotes

Permission to publish quotes.

ModifyMktDataQuotes

Permission to create and modify quotes, provided one of the following functions is also granted:

ModifyMktDataQuotesClose, ModifyMktDataQuotesLast, ModifyMktDataQuotesOpen

Permission to create and modify specified instances of quotes (CLOSE, LAST, or OPEN), provided the ModifyMktDataQuotes function is also granted.

RemoveMktDataQuotes

Permission to remove quotes.

ModifyMktDataQuotes

Permission to create and modify quotes, provided one of the following functions is also granted:

ModifyMktDataQuotesClose, ModifyMktDataQuotesLast, ModifyMktDataQuotesOpen

Permission to create and modify specified instances of quotes (CLOSE, LAST, or OPEN), provided the ModifyMktDataQuotes function is also granted.

Note that ModifyMktDataQuotesLast also applies to BID and ASK quotes.

RemoveMktDataQuotes

Permission to remove quotes.

The Market Data Type for the Model Calibration window is "ModelCalibration".

CreateMarketData

Permission to create model calibrations.

ModifyMarketData

Permission to modify model calibrations provided the ModifyMarketDataCLOSE function is also granted.

ModifyMarketDataCLOSE

Permission to modify CLOSE instances of model calibrations provided the ModifyMarketData function is also granted.

RemoveCurve

Permission to remove model calibrations provided the following functions are also granted:

RemoveMarketData

Permission to remove model calibrations provided the RemoveCurve function is also granted.

RemoveMarketDataCLOSE

Permission to remove CLOSE instances of model provided the RemoveMarketData function is also granted.

ViewMarketData

Permission to open the Model Calibration in read-only mode.

CreateMulticurvePackage

Permission to create packages.

ModifyMulticurvePackage

Permission to modify packages.

RemoveMulticurvePackage

Permission to remove packages.

ModifyFeedConfig

Permission to create, modify and delete feed configurations, provided the RunConfigWindow function is also granted.

RunConfigWindow

Permission to run “Feed Configuration”.

Access permissions for feed address mapping configurations are twofold:

Examples – To modify the feed address mapping configuration called ReutersRFA, you need the function ModifyFeedAddress, and you need read-write access to ReutersRFA. To view ReutersRFA in the Feed Address window, you need read-only or read-write access to ReutersRFA.

CreateFeedAddress

Permission to create a feed address mapping configuration.

ModifyFeedAddress

Permission to modify a feed address mapping configuration.

RemoveFeedAddress

Permission to remove a feed address mapping configuration.

CreateCurveUnderlying

Permission to create curve underlying instruments.

ModifyCurveUnderlying

Permission to modify curve underlying instruments.

RemoveCurveUnderlying

Permission to remove curve underlying instruments.

Access permissions for market data server configurations (host name and port number) are twofold:

CreateMktDataServerConfig

Permission to create new market data server configurations.

ModifyMktDataServerConfig

Permission to modify market data server configurations.

MktDataServerAllowForceGenerate

Permission to allow force generating market data items on the market data server. In the trade worksheet in the Market Data panel, click the down arrow, and choose "Force generate".

MktDataServerAllowMultiSelection

Permission to allow selecting multiple market data server configurations. In the trade worksheet in the Market Data panel, click the down arrow, and choose "Select Market Data Server" to subscribe to a Market Data Server configuration in the list.

RemoveMktDataServerConfig

Permission to delete market data server configurations.

CreateVolSurfaceUnderlying

Permission to create volatility surface underlying instruments.

ModifyVolSurfaceUnderlying

Permission to modify volatility surface underlying instruments.

RemoveVolSurfaceUnderlying

Permission to remove volatility surface underlying instruments.

CreateCorrSurfaceUnderlying

Permission to create correlation surface underlying instruments.

ModifyCorrSurfaceUnderlying

Permission to modify correlation surface underlying instruments.

RemoveCorrSurfaceUnderlying

Permission to remove correlation surface underlying instruments.

Access permissions for pricing environments are twofold:

CreateMarketDataConfig

Permission to create pricing environments.

ModifyMarketDataConfig

Permission to modify pricing environments.

RemoveMarketDataConfig

Permission to remove pricing environments.

Access permissions for pricer configurations are twofold:

CreateMarketDataConfig

Permission to create pricer configurations.

ModifyMarketDataConfig

Permission to modify pricer configurations.

RemoveMarketDataConfig

Permission to remove pricer configurations.

Access permissions for quote sets are twofold:

Examples – To create OPEN quotes in a quote set called MyQuoteSet, you need the functions ModifyMktDataQuotes and ModifyMktDataQuotesOpen, and you need read-write access to MyQuoteSet. To use MyQuoteSet in a pricing environment, you need read-only or read-write access to MyQuoteSet.

ModifyMktDataQuotes

Permission to create and modify quotes, provided one of the following functions is also granted:

ModifyMktDataQuotesClose, ModifyMktDataQuotesLast, ModifyMktDataQuotesOpen

Permission to create and modify specified instances of quotes (CLOSE, LAST, or OPEN), provided the ModifyMktDataQuotes function is also granted.

RemoveMktDataQuotes

Permission to remove quotes.

Access permissions for pricing parameter sets are twofold:

CreateMarketDataConfig

Permission to create pricing parameter sets.

ModifyMarketDataConfig

Permission to modify pricing parameter sets.

RemoveMarketDataConfig

Permission to remove pricing parameter sets.

CreateMasterConfirmation

Permission to create a master confirmation.

ModifyMasterConfirmation

Permission to modify a master confirmation.

RemoveMasterConfirmation

Permission to remove a master confirmation.

ModifyALLProcessingOrgStaticData

ModifyOnlyProcessingOrgStaticData

UseProcessingOrgHierarchy

ViewOnlyProcessingOrgStaticData

CreateLEMessageConfig

Permission to create message configurations.

ModifyLEMessageConfig

Permission to modify message configurations.

RemoveLEMessageConfig

Permission to remove message configurations.

ModifyALLProcessingOrgStaticData

ModifyOnlyProcessingOrgStaticData

UseProcessingOrgHierarchy

ViewOnlyProcessingOrgStaticData

ModifyMimeTypes

Permission to modify MIME types for message documents generation and export.

ModifyIncomingStatusConfig

Permission to modify incoming status configurations, provided the RunConfigWindow function is also granted.

RunConfigWindow

Permission to run “Incoming Status Configuration”.

ModifyIncomingMessageConfig

Permission to modify incoming message configurations, provided the RunConfigWindow function is also granted.

RunConfigWindow

Permission to run “Incoming Message Configuration”.

ModifyMessageSenderConfig

Permission to modify create, message and delete sender configurations, provided the RunConfigWindow function is also granted.

RunConfigWindow

Permission to run “Message Sender Configuration”.

ModifyOnlyProcessingOrgStaticData

UseProcessingOrgHierarchy

ModifyConfigData

Permission to modify message grouping configurations.

ModifyLegalData

Permission to modify message groups.

RemoveLegalData

Permission to remove message groups.

ModifyLegalData

Permission to modify message rules.

RemoveLegalData

Permission to remove message rules.

ModifyALLProcessingOrgStaticData

ModifyOnlyProcessingOrgStaticData

ViewOnlyProcessingOrgStaticData

AddModifyStatementConfig

Permission to add and modify security lending billing statement configurations.

RemoveStatementConfig

Permission to remove security lending billing statement configurations.

AddModifyChasingConfig

Permission to create and modify chasing configurations.

RemoveChasingConfig

Permission to delete chasing configurations.

CreateMessageEditing

Permission to create message editing configurations.

ModifyMessageEditing

Permission to modify message editing configurations.

RemoveMessageEditing

Permission to delete message editing configurations.

Menu action refdata.MXBOMessageGeneratorFormatWindow.

CreateReportQueryRequest

Permission to create create report requests.

AddModifySWIFTFieldsMapping

Permission to create and modify SWIFT message mapping configurations (currently only used for MT527).

RemoveSWIFTFieldsMapping

Permission to remove SWIFT message mapping configurations (currently only used for MT527).

AddModifySwiftLAU

Permission to create and modify Swift LAU configurations.

RemoveSwiftLAU

Permission to remove Swift LAU configurations.

ViewOnlyProcessingOrgStaticData

Menu action refdata.AttributeConfigurationWindow

CreateAttributeConfig

Permission to create or add new attribute.

ModifyAttributeConfig

Permission to modify the existing attribute.

RemoveAttributeConfig

Permission to remove the existing attribute.

In general, in order to apply any action, the products must specify what workflow actions the user is allowed to perform using the Workflow Access panel.

In the Workflow Access panel, you can also specify what task handling the user is allowed to do: process, complete, pass over, etc.

Access permissions for the new Task Station are two-fold.

You can set read-write access to Task Station tabs and enrichment filters, or read-only access to Task Station tabs and enrichment filters under Access Permissions > Group Access > Access: Task Station Tabs and Task Station Filters.

The following access permission functions can be defined:

AllowSplitWithoutSDI

Permission to perform a split even if the SDIs are not set.

AssignCtpyOnXfer

Controls the counterparty when applying the ASSIGN action.

Permission to change the counterparty.

AssignCptyOnXferApplyAll

Controls the Apply to All button when applying the ASSIGN action.

Permissions to Apply to All.

AuthorizeConfirmMessage

Permission to authorize a message confirmation.

This is used in the context of a custom implementation of the 4-eye principle in the message workflow.

AuthorizeSeeConnectedClients

Controls Utilities > Show Connected Users.

Permission to view connected users. The menu item “Show Connected Users” will not appear if the function is not granted.

AuthorizeTrade

Permission to manually authorize trade workflow transitions. Trade workflow manual authorization is described under the Help menu of the Workflow Configuration.

CheckPermForAuthTrade

Applies to manual trade authorization. If CheckPermForAuthTrade is set for a user, the system will check the workflow permission for the user who authorized the change, not the user who applied the change.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

CreateTaskStationViewFolder

Permission to create a folder in the report catalog.

CreateTaskStationViewReport

Permission to create a report in the report catalog.

DeleteTaskStationViewFolder

Permission to delete a folder from the report catalog.

DeleteTaskStationViewReport

Permission to delete a report from the report catalog.

DisallowTaskCommentUpdate

Prevents users from modifying task comments.

If set, the Task Comment will not override the existing Task Comments. If not set, the user can decide to apply a Task Comment or not.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

Execute<netting type>Netting

An Execute<netting type>Netting access permission is created for each netting type in the "nettingType" domain. For example, ExecuteCounterPartyNetting. Netting types are defined under Configuration > Settlements > Netting Configuration.

Permission to execute netted transfers by netting type.

[NOTE: If the user is not granted any of the Execute<netting type>Netting function then the user has permission to execute all types of netted transfers]

FreeTaskEvenNotOwner

Permission to free a task "UNDER_PROCESSING or PASS_OVER" even though the user is not the owner of the task.

ModifyAdviceDocument

Controls Investigate > Document Window.

Permission to generate documents and enable the Edit button. Note that the Edit action must also be configured in the workflow.

 Refer to the Calypso Messages User Guide for details.

ModifyOnlyKeywordsAdviceDocument

Controls Investigate > Document Window.

Permission to generate documents and enable the Edit Keywords button. Note that the Edit action must also be configured in the workflow.

 Refer to the Calypso Messages User Guide for details.

ModifyTaskStationViewFolder

Permission to modify a folder in the report catalog.

ModifyTaskStationViewReport

Permission to modify a report in the report catalog.

AddModifyTSFilter

Permission to define or update Task Enrichment filters.

AddModifyTSTab

Permission to define or update panel configurations.

AuthorizeTSDistribute

Controls Task Station > Distribute.

Permission to distribute Task Station configurations. It can be restricted using ViewOnlyGroupTaskStation to distribute Task Station configurations to users of the current user's group only.

ModifyTSCatalogOrdering

Permission to order the report catalog.

ModifyTSTabFiltering

Permission to view and modify search criteria in the report panels.

ModifyTSTabPlan

Permission to modify the report plans.

ModifyTaskStationGlobalFilter

Permission to set the global filter in the preferences.

RemoveTSTab

Permission to delete panel configurations.

RestrictTStabFilteringfilter

Restriction to prevent a user from selecting another filter than the default filter in the report panels.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

RetryPosting

Controls the RETRY action, and the SUSPENSE_POSTINGS scheduled task.

Permission to retry a posting.

It is only enabled if the environment property ACCENGINE_INVALID_LOGIC is true.

TASK_STATION_SHOW_FILTER

Permission to display the search criteria in the report panels.

ViewOnlyGroupTaskStation

Controls Configure > Set User and Task Station > Distribute.

Restriction to view only the tasks of the users in the same group, provided you have the permission ViewOtherTaskStation.

Restriction to distribute Task Station configurations to users of the current user's group only, provided you have the permission AuthorizeTSDistribute.

ViewOtherTaskStation

Controls Configure > Set User.

Permission to view the tasks of another user. It can be restricted using ViewOnlyGroupTaskStation to view only the tasks of the users within the same group.

Netting Manager

NettingManagerApply

Permission to apply a change to a netted transfer, Apply button.

NettingManagerApplyToTrade

Permission to apply a change to a netted transfer for a given trade, Apply to Trade button.

DoNotAllowBeneficiaryChange

Provided you have permission NettingManagerApplyToTrade or DoNotAllowBeneficiaryChange, you can change a netted transfer but you cannot change the beneficiary.

This is a restriction.

DoNotAllowNettingGroupChange

Provided you have permission NettingManagerApplyToTrade or DoNotAllowBeneficiaryChange, you can change a netted transfer but you cannot change the netting group.

This is a restriction.

DoNotAllowNettingMethodChange

Provided you have permission NettingManagerApplyToTrade or DoNotAllowBeneficiaryChange, you can change a netted transfer but you cannot change the netting method.

This is a restriction.

DoNotAllowSDIChange

Provided you have permission NettingManagerApplyToTrade or DoNotAllowBeneficiaryChange, you can change a netted transfer but you cannot change the SDIs.

This is a restriction.

Hedge Liquidation

HedgeTermLiqActionTerminate

Permission to perform action Terminate Hedge.

HedgeTermLiqActionTestDeactivate

Permission to perform action Test and De-activate Hedge.

HedgeTermLiqActionTestUpdate

Permission to perform action Test and Update Status.

HedgeTermLiqActionUpdateOnly

Permission to perform action Update Trades Only.

HedgeTermLiqApply

HedgeTermLiqTaskAction

OperationsProcessing

Permission to process trades, provided the RunProcessTrades function is also granted.

This permission allows performing operations in all panels.

OperationsProcessingProcessTrade

Permission to process trades, provided the RunProcessTrades function is also granted.

This permission only allows performing operations in the Process Trade panel.

OperationsProcessingRegenerateEvent

Permission to process trades, provided the RunProcessTrades function is also granted.

This permission only allows performing operations in the Generate Trade Event panel.

OperationsProcessingMergeCounterparties

Permission to process trades, provided the RunProcessTrades function is also granted.

This permission only allows performing operations in the Merge Counterparties panel.

RunProcessTrades

Permission to run “Process Trades”.

ViewOnlyMergeCounterParties

Restriction to only merge counterparties, provided the RunProcessTrades function is also granted.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

ProcessStatus.<account process><action>

Permission to apply the corresponding Action:

ModifyAccount

Permission to modify accounts, provided one of the following functions is also granted:

ModifyAccountCLOSING, ModifyAccountLINK, ModifyAccountNORMAL, ModifyAccountSETTLE, ModifyAccountSTOCK

Permission to modify accounts of specified type (CLOSING, LINK, NORMAL, SETTLE, or STOCK), provided the ModifyAccount function is also granted.

ModifyBook

Permission to modify books. You also need read-write access to individual books and book bundles.

ModifyLEContact

Permission to modify LE contacts.

ModifyLegalEntity

Permission to modify legal entities of any status.

ModifyLegalEntityRegistration

Permission to modify LE registrations.

ModifyLESDI

Permission to modify SDIs.

ModifyUsedSDI

Allows overriding the behavior when the environment property USE_OLD_SDI_VALIDATION is false. In this case, the user will be able to update the existing SDI, rather than creating two SDIs with effective to and from dates.

ModifyUserDefaults

Permission to modify user defaults.

ModifyStaticDataMaintenance

Permission to run “Static Data Maintenance”.

Accepting and rejecting pending modifications must be performed by a user different from the user who modified or created data, unless:

ApplyIndividualAuth

Permission to authorize individual changes to a given entity version when multiple changes have occurred, as opposed to authorizing all the changes at once.

Make sure to select Detail next to the Refresh button in the Data Authorization window, in order to see individual changes.

[NOTE: You should also have the permission to authorize the selected entity]

AuthorizeAccount

Permission to authorize new and modified accounts specified using Configuration > Accounting > Accounts.

AuthorizeAccountingEventConfig

Permission to authorize new and modified accounting events specified using Configuration > Accounting > Accounting Events.

AuthorizeAccountingRule

Permission to authorize new and modified accounting rules specified using Configuration > Accounting > Accounting Rules.

AuthorizeAccountingRuleAccountConfig

Permission to authorize new and modified accounting rule configurations specified using Configuration > Accounting > Accounting Rules > Config panel.

AuthorizeAdviceConfig

Permission to authorize new and modified message configurations specified using Configuration > Messages & Matching > Message Configuration Set-up.

AuthorizeBenchmark

Permission to authorize new and modified benchmarks specified using Configuration > Asset Management > Benchmark.

AuthorizeBond, AuthorizeBond<type>

Permission to authorize new and modified bonds specified using Configuration > Fixed Income > Bond Product Definition.

AuthorizeBook

Permission to authorize new and modified books specified using Configuration > Books & Bundles > Trading Book. Note that you also need read-write access to individual books and book bundles.

AuthorizeCallAccount

Permission to authorize new and modified call accounts specified using Configuration > Accounting > Accounts.

AuthorizeCDSIndexDefinition

Permission to authorize new and modified CDS index definitions specified using Configuration > Credit Derivatives > CDS Index Definition.

AuthorizeCFDCountryGrid

Permission to authorize new and modified CFD country grids specified using Configuration > Equity > CFD Country Grid.

AuthorizeCFDCustom

Permission to authorize new and modified custom CFD products specified using Trade > Equity > Contract for Difference.

AuthorizeCountry

Permission to authorize new and modified countries specified using Configuration > Definitions > Countries.

AuthorizeCurrencyDefault

Permission to authorize new and modified currency defaults specified using Configuration > Definitions > Currency Definitions > Currency Default panel.

AuthorizeCurrencyPair

Permission to authorize new and modified currency pairs specified using Configuration > Definitions > Currency Definitions > Currency Pair panel.

AuthorizeFXReset

Permission to authorize new and modified FX resets specified using Trade Lifecycle > Reset > FX Rate Reset.

AuthorizeHoliday

Permission to authorize new and modified holiday calendars specified using Configuration > Definitions > Calendar Definitions.

AuthorizeKickOffCutOffConfig

Permission to authorize new and modified KickOffCutOff configurations specified using Configuration > Workflow > Kick-Off/Cut-Off.

AuthorizeLEAttribute

Permission to authorize new and modified LE attributes specified using Configuration > Legal Data > Attributes.

AuthorizeLegalAgreement

Permission to authorize new and modified legal agreements specified using Configuration > Legal Data > Legal Agreements.

AuthorizeLegalContact

Permission to authorize new and modified LE contacts specified using Configuration > Legal Data > Contact Personnel.

AuthorizeLegalEntity

Permission to authorize new and modified legal entities specified using Configuration > Legal Data > Legal Entities.

To restrict the authorization of legal entities by status, use the AuthorizeLegalEntityDisabled, AuthorizeLegalEntityEnabled and AuthorizeLegalEntityPending functions instead.

Example – If you want to allow users to authorize legal entities in status Pending only, do not assign the function AuthorizeLegalEntity but assign the function AuthorizeLegalEntityPending instead.

AuthorizeLegalEntityDisabled, AuthorizeLegalEntityEnabled, AuthorizeLegalEntityPending

Permission to authorize legal entities based on the corresponding status only: disabled, pending, or enabled.

To authorize legal entities of any status, use the AuthorizeLegalEntity function instead.

AuthorizeLegalEntityRelation

Permission to authorize new and modified LE relations specified using Configuration > Legal Data > Legal Entity Relation.

AuthorizeLERegistration

Permission to authorize new and modified LE registrations specified using Configuration > Legal Data > Registration Details.

AuthorizeMarginCallConfig

Permission to authorize new and modified margin call configurations specified using Configuration > Fees, Haircuts, & Margin Calls > Margin Call.

AuthorizeMasterConfirmation

Permission to authorize new and modified master confirmations specified using Configuration > Messages & Matching > Master Confirmations.

AuthorizeNettingMethod

Permission to authorize new and modified netting methods specified using Configuration > Settlements > Netting Method.

AuthorizePLMark

Permission to authorize new and modified P&L marks.

AuthorizePricerConfig

You need to add PricerConfig to the "classAuthMode" domain using Configuration > System > Domain Values if not present.

Permission to authorize new and modified pricer configurations using to Market Data > Pricing Environment > Pricer Configuration.

AuthorizeQuoteValue, AuthorizeQuoteValueLAST, AuthorizeQuoteValueOPEN, AuthorizeQuoteValueCLOSE

You need to add QuoteValue to the "classAuthMode" domain using Configuration > System > Domain Values if not present.

Permission to authorize all types of quotes, LAST quotes only, OPEN quotes only, CLOSE quotes only.

Note that AuthorizeQuoteValueLAST also applies to BID and ASK quotes.

AuthorizeRefEntityBasket

Permission to authorize reference entity baskets specified using Configuration > Credit Derivatives > Reference Entity Basket.

AuthorizeRefEntityTranche

Permission to authorize reference entity tranches specified using Configuration > Credit Derivatives > Reference Entity Basket.

AuthorizeRateIndexDefaults

Permission to authorize new and modified rate index definitions specified using Configuration > Interest Rates > Rate Index Definitions.

AuthorizeSDI

Permission to authorize new and modified SDIs specified using Configuration > Settlements > Settlement Instructions.

AuthorizeSDIRelationShip

Permission to authorize new and modified SDI relationships specified using Configuration > Settlements > Settlement Instructions, R-Ship button.

AuthorizeStaticDataFilter

Permission to authorize new and modified static data filters specified using Configuration > Filters > Static Data Filter. Note that you also need read-write access to individual static data filters.

CheckPermForSDFilter

Applies to static data filter authorization. When set, the user can only authorize a change to a static data filter if the user has write access to the static data filter.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

AuthorizeUserAccessPermission

Permission to authorize new and modified access permissions specified using Configuration > User Access Control > Access Permissions.

AuthorizeWorkflowConfig

Permission to authorize new and modified workflow configurations specified using Configuration > Workflow > Workflow Configuration.

ModifyOnlyProcessingOrgStaticData

When a user has the restriction ModifyOnlyProcessingOrgStaticData, the user can only authorize modifications made to static data related to the user’s processing organizations.

SameUserAuthorization

Permission for a user to accept self-modifications.

SameUserRejection

Permission for a user to reject self-modifications.

ValidateModifiedAdviceDocument

Permission to authorize documents modifications (Investigate > Document Window from the Task Station).

ViewAllUsers

Permission to see all users.

ViewAllGroups

Permission to see all groups.

ViewPendingModifications

Permission to view pending modifications.

CreateManualPosting

Permission to create manual postings.

ONLY_TWOSIDEDPOSTINGS

Permission to only enter postings with a debit account AND a credit account.

ModifyManualPosting

Permission to modify manual postings.

See also “All trade windows” for information about all access permissions required for viewing and entering trades.

ViewCustXferPoSettlementPanel

View menu - Permission to view the PO Settlement panel.

ViewCustXferXCCYPanel

View menu - Permission to view the Xccy panel.

ViewCustXferAdditionalPanel

View menu - Permission to view the Additional panel.

 Please refer to Calypso Collateral Management documentation for details.

AllowBlockBONYMessages

Permission to set the Kick Off and Cut Off times for the Security and Cash Interfaces as well as the Reversal (Tools > KickOff CutOff Config).

ModifyALLProcessingOrgStaticData

ModifyOnlyProcessingOrgStaticData

ViewOnlyProcessingOrgStaticData

ConfigPairingMatching

Controls the Config button.

Permission to configure matching criteria.

CreateDocument

Controls Utilities > Create New Message.

Permission to create a message.

PairingMatchingContractIdTradeId

Permission to specify a contract id and a trade id.

ConfigPairingMatching

Controls the Config button.

Permission to configure matching criteria.

ModifyALLProcessingOrgStaticData

ModifyOnlyProcessingOrgStaticData

ViewOnlyProcessingOrgStaticData

Manual Match

Permission to use the Manual Match button. It allows matching transfers even if the automatic matching criteria are not satisfied.

Data Mapping window (menu action "mapping.CalypsoMappingWindow").

ViewCalypsoMapping

Permission to view the Data Mapping window.

ModifyCalypsoMapping

Permission to modify data mappings.

Access permissions for products are twofold:

Examples – To create a bond product, you need the function CreateProduct, and you need read-write access to a static data filter that includes this bond (for example ISIN like US%). To view the bond details, you need read-only or read-write access to a static data filter that includes this bond.

CreateProduct

Permission to create products.

ModifyDefaultQuoteType

Permission to create and modify default quote types.

ModifyProduct

Permission to modify products.

RemoveDefaultQuoteType

Permission to remove default quote types.

RemoveProduct

Permission to remove products.

AddProductCreditRating

Applies to Bonds, Structured Flows, Loans.

Permission to add product credit ratings using the Product Credit Rating report.

DeleteProductCreditRating

Applies to Bonds, Structured Flows, Loans.

Permission to delete product credit ratings using the Product Credit Rating report.

CreateBenchmark

Permission to create benchmarks and benchmark records.

ModifyBenchmark

Permission to modify benchmarks and benchmark records.

RemoveBenchmark

Permission to remove benchmarks and benchmark records.

ViewBenchmark

Permission to view benchmarks and benchmark records.

CreateCarveOut

Permission to create carve outs.

ModifyCarveOut

Permission to modify carve outs.

RemoveCarveOut

Permission to remove carve outs.

CreateFund

Permission to create funds and mandates.

ModifyFund

Permission to modify funds and mandates.

RemoveFund

Permission to remove funds and mandates.

CreateStrategy

Permission to create strategies.

ModifyStrategy

Permission to modify strategies.

RemoveStrategy

Permission to remove strategies.

AMGrouping

Permission to view strategies, grouping (portfolio) hierarchies, and investment rules.

AMModifyGrouping

Permission to modify strategies, grouping (portfolio) hierarchies, and investment rules. This is required in addition to the permissions above.

Please refer to Calypso Portfolio Workstation documentation for details.

See “All product windows”.

CreateCommodityUnitconversion

Permission to create a commodity conversion unit.

ModifyCommodityUnitconversion

Permission to modify a commodity conversion unit.

RemoveCommodityUnitconversion

Permission to remove a commodity conversion unit.

CreateReferenceData

Permission to create commodity resets.

ModifyReferenceData

Permission to modify commodity resets.

RemoveReferenceData

Permission to remove commodity resets.

See “All product windows”.

CreatePeriodDistribution

Permission to create period distributions.

RemovePeriodDistribution

Permission to remove period distributions.

CreateIntradayConfiguration

Permission to create intraday configurations.

RemoveIntradayConfiguration

Permission to remove intraday configurations.

CreateReferenceEntityBasket

Permission to create a reference entity basket.

ModifyReferenceEntityBasket

Permission to modify a reference entity basket.

RemoveReferenceEntityBasket

Permission to remove a reference entity basket.

CreateReferenceEntityTranche

Permission to create a reference entity tranche.

ModifyReferenceEntityTranche

Permission to modify a reference entity tranche.

RemoveReferenceEntityTranche

Permission to remove a reference entity tranche.

See “All product windows”.

CreateCDSIndexDefinition

Permission to create a CDS index definition, provided the function CreateProduct is also granted.

ModifyCDSIndexDefinition

Permission to modify a CDS index definition, provided the function ModifyProduct is also granted.

RemoveCDSIndexDefinition

Permission to remove a CDS index definition, provided the function RemoveProduct is also granted.

See “All product windows”.

See “All product windows”.

AddModifyCDSSettlementMatrix

Permission to create and modify CDS settlement details.

RemoveCDSSettlementMatrix

Permission to remove CDS settlement details.

See “All product windows”.

ShowDividend

Restriction which, when added, displays the Dividend panel. Note however that the Dividend panel is not supported, and that dividends should be defined in the Corporate Actions window.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

AddEquityReset

Permission to add and modify equity resets.

RemoveEquityReset

Permission to remove equity resets.

See “All product windows”.

AddEquityReset

Permission to add and modify equity resets.

RemoveEquityReset

Permission to remove equity resets.

ModifyCFDContractGrid

Permission to create and modify CFD contracts.

RemoveCFDContractGrid

Permission to remove CFD contracts.

ViewCFDContractGrid

Permission to view CFD contracts.

CreateCFDCountryGrid

Permission to create CFD country grids.

ModifyCFDCountryGrid

Permission to modify CFD country grids.

RemoveCFDCountryGrid

Permission to remove CFD country grids.

See “All product windows”.

See “All product windows”.

ModifyPortfolioSwapContract

Permission to modify portfolio swap contracts.

ViewPortfolioSwapContract

Permission to view portfolio swap contracts.

CreateReferenceData

Permission to create bond defaults.

RemoveReferenceData

Permission to remove bond defaults.

See “All product windows”.

AllowExoticTrade

Permission to select the Exotic type.

AllowReadOnlyStructuredWindow

Restriction to bring up the Structure window in read-only mode.

DoNotCheckCorporateActions

By default, any change to bond static data will trigger the message “Do you want to review corporate actions?”. If you do not want to trigger this message by default, you need to grant the access permission restriction “DoNotCheckCorporateActions” to your user group.

ModifyDefaultQuoteType

Permission to create and modify default quote types.

RemoveDefaultQuoteType

Permission to remove default quote types.

CreateReferenceData

Permission to create FX rate definitions.

ModifyReferenceData

Permission to modify FX rate definitions.

RemoveReferenceData

Permission to remove FX rate definitions.

CreateTriangulationCcyRule

Permission to create a triangulation currency rule.

RemoveTriangulationCcyRule

Permission to remove a triangulation currency rule.

AddCashSettleDefault

Permission to add cash settle defaults.

AmendCashSettleDefault

Permission to amend cash settle defaults.

RemoveCashSettleDefault

Permission to remove cash settle defaults.

ModifyReferenceData

Permission to modify reference index definitions.

RemoveReferenceData

Permission to remove reference index definitions.

CreateQuoteValueAdjustment

Permission to create rebase adjustments for inflation indices.

ModifyCreateQuoteValueAdjustment

Permission to modify rebase adjustments for inflation indices.

RemoveCreateQuoteValueAdjustment

Permission to modify rebase adjustments for inflation indices.

AddModifyXSPVariable

Permission to create and modify variables for exotic structured products.

RemoveXSPVariable

Permission to remove variables for exotic structured products.

CreateReferenceData

Permission to create ETO contracts.

ModifyReferenceData

Permission to modify ETO contracts.

RemoveReferenceData

Permission to remove ETO contracts.

CreateReferenceData

Permission to create Future contracts.

ModifyReferenceData

Permission to modify Future contracts.

RemoveReferenceData

Permission to remove Future contracts.

CreateReferenceData

Permission to create Future Option contracts.

ModifyReferenceData

Permission to modify Future Option contracts.

RemoveReferenceData

Permission to remove Future Option contracts.

See “All product windows”.

See “All product windows”.

See “All product windows”.

CreateExoticType

Permission to create exotic types.

ModifyExoticType

Permission to modify exotic types.

RemoveExoticType

Permission to remove exotic types.

CreateDomains

Permission to create product code names.

CreateReferenceData

Permission to create product codes.

ModifyDomains

Permission to modify product code names.

RemoveReferenceData

Permission to remove product codes.

ModifyPositionKeepingConfig

Permission to modify Position Keeping Configuration

CreatePairAllocationConfig

Permission to create Pair Allocation configurations.

ModifyPairAllocationConfig

Permission to modify Pair Allocation configurations.

RemovePairAllocationConfig

Permission to remove Pair Allocation configurations.

ModifyFTPRule

Permission to modify FTP Rules

ViewFTPRule

Permission to view FTP Rules

CreateModifySalesB2BRoutingRule

Permission to create / modify B2B configurations.

RemoveSalesB2BRoutingRule

Permission to remove B2B configurations.

AddBookSubstitutionRequest

Permission to create a book substitution request.

ModifyBookSubstitutionRequest

Permission to modify a book substitution request.

RemoveBookSubstitutionRequest

Permission to remove a book substitution request.

CreateModifyXccySplitRoutingRule

Permission to create / modify Ccy Split configurations.

RemoveXccySplitRoutingRule

Permission to remove Ccy Split configurations.

CreateModifyFwdRiskTransferRoutingRule

Permission to create / modify Forward Risk Transfer configurations.

RemoveFwdRiskTransferRoutingRule

Permission to remove Forward Risk Transfer configurations.

CreateModifyPositionRolloverRule

Permission to create and modify position rollover rules.

RemovePositionRolloverRule

Permission to remove position rollover rules.

CreateModifySpotRiskTransferRoutingRule

Permission to create / modify Spot Risk Transfer configurations.

RemoveSpotRiskTransferRoutingRule

Permission to remove Spot Risk Transfer configurations.

Access permissions for books are multi-fold:

Examples – To modify the attribute values of a book called MyBook, you need the functions ModifyBook and ModifyDomains, and you need read-write access to MyBook.

To enter a USD bond trade on MyBook, you need read-write access to MyBook, and MyBook needs permission to trade the USD currency and the Bond product. (Note that you also need read-write access to the Bond product type under Access > Product Types).

To view MyBook in a report, you need read-only or read-write access to MyBook.

CreateBook

Permission to create books.

CreateDomains

Permission to create book attributes.

ModifyBook

Permission to modify books.

ModifyDomains

Permission to modify book attributes.

RemoveBook

Permission to remove books.

RemoveDomains

Permission to remove book attributes.

ModifyALLProcessingOrgStaticData

ModifyOnlyProcessingOrgStaticData

UseProcessingOrgHierarchy

ViewOnlyProcessingOrgStaticData

Access permissions for book hierarchies are multi-fold:

Examples – To modify the book hierarchy called MyBookHchy, you need the function ModifyBookHierarchy, and you need read-write access to MyBookHchy. To view MyBookHchy in a report, you need read-only or read-write access to MyBookHchy.

CreateBookHierarchy

Permission to create book hierarchies.

ModifyBookHierarchy

Permission to modify book hierarchies.

RemoveBookHierarchy

Permission to remove book hierarchies.

ModifyBookValCcy

Permission to create, modify, and delete book valuation currencies, provided the RunConfigWindow function is also granted.

RunConfigWindow

Permission to run “Book Valuation Currency”.

Menu action refdata.inventory.InventoryCheckConfigWindow.

AddModifyInventoryCheckConfig

Permission to create and modify Inventory Check configurations.

RemoveInventoryCheckConfig

Permission to remove Inventory Check configurations.

You can only view liquidation configurations for books that belong to the user Processing Org (if any).

AddModifyLiquidationInfo

Permission to create and modify liquidation configurations.

RemoveLiquidationInfo

Permission to remove liquidation configurations.

CreateTradeBundle

Permission to create trade bundles.

ModifyTradeBundle

Permission to modify trade bundles.

RemoveTradeBundle

Permission to remove trade bundles.

CreateCountry

Permission to create countries.

ModifyCountry

Permission to modify countries.

RemoveCountry

Permission to remove countries.

AddModifyHoliday

Permission to create and modify holiday calendars.

RemoveHoliday

Permission to remove holiday calendars.

CreateDateRule

Permission to create date rules.

ModifyDateRule

Permission to modify date rules.

RemoveDateRule

Permission to remove date rules.

ViewCustomDateRuleTenors

Provides permission to open/view the Custom Date Rule Tenor Shortcuts window.

RemoveCustomDateRuleTenors

Provides permission to delete existing custom tenor configurations.

AddModifyCustomDateRuleTenors

Provides permission to create new or modify existing custom tenor configurations.

CreateCurrencyDefaults

Controls the Currency Default panel.

Permission to create currency defaults.

CreateCurrencyPair

Controls the Currency Pair panel.

Permission to create currency pairs.

ModifyCurrencyDefaults

Controls the Currency Default panel.

Permission to modify currency defaults.

ModifyCurrencyPair

Controls the Currency Pair panel.

Permission to modify currency pairs.

RemoveCurrencyDefaults

Controls the Currency Default panel.

Permission to remove currency defaults.

RemoveCurrencyPair

Controls the Currency Pair panel.

Permission to modify currency pairs.

 Ⓘ   [NOTE: When creating and modifying currency pairs, you also need the access permissions CreateProduct and ModifyProduct to create and modify the corresponding FX products]

RemoveReferenceData

Permission to remove funding rate definitions.

CreateMarginCallConfig

Permission to create margin call configurations.

ModifyMarginCallConfig

Permission to modify margin call configurations.

RemoveMarginCallConfig

Permission to remove margin call configurations.

ModifyALLProcessingOrgStaticData

ModifyOnlyProcessingOrgStaticData

UseProcessingOrgHierarchy

ViewOnlyProcessingOrgStaticData

ModifyFeeDefinition

Permission to create, modify and delete fee definitions, provided the RunConfigWindow function is also granted.

RunConfigWindow

Permission to run “Fee Definition”.

ModifyLegalData

Permission to add and modify fee billing rules.

RemoveLegalData

Permission to remove fee billing rules.

ModifyALLProcessingOrgStaticData

ModifyOnlyProcessingOrgStaticData

UseProcessingOrgHierarchy

ViewOnlyProcessingOrgStaticData

CreateFeeGrid

Permission to create fee grids.

ModifyFeeGrid

Permission to modify fee grids.

RemoveFeeGrid

Permission to remove fee grids.

ModifyOnlyProcessingOrgStaticData

UseProcessingOrgHierarchy

AddModifyFeeConfig

Permission to create and modify fee configurations.

RemoveFeeConfig

Permission to delete fee configurations.

ModifyOnlyProcessingOrgStaticData

UseProcessingOrgHierarchy

CreateHaircutRule

Permission to create haircut rules.

ModifyHaircutRule

Permission to modify haircut rules.

RemoveHaircutRule

Permission to remove haircut rules.

CreateWrongWayRiskGroup

Permission to create wrong way risk groups.

ModifyWrongWayRiskGroup

Permission to modify wrong way risk groups.

RemoveWrongWayRiskGroup

Permission to delete wrong way risk groups.

AddModifyWHTAttribute

Permission to add and modify withholding tax attributes.

RemoveWHTAttribute

Permission to remove withholding tax attributes.

ViewAllWHTAttributes

You can define hidden withholding tax attributes in the domain "WHTHiddenAttribute". The value of these attributes will be hidden upon display.

The attributes can be defined as "WHTLEAttribute.<attribute name>", "WHTBookAttribute.<attribute name>", or ""WHTAccountAttribute.<attribute name>".

The function ViewAllWHTAttributes allows viewing all withholding tax attributes, including hidden attributes.

ModifyOnlyProcessingOrgStaticData

UseProcessingOrgHierarchy

AddModifyWithholdingTaxConfig

Permission to add and modify withholding tax configurations.

RemoveWithholdingTaxConfig

Permission to remove withholding tax configurations.

Access permissions for trade filters are twofold:

Examples – To modify the trade filter called MyTradeFilter, you need the function ModifyTradeFilter, and you need read-write access to MyTradeFilter. To use MyTradeFilter for loading trades, you need read-only or read-write access to MyTradeFilter.

CreateSQLTradeFilter

Permission to create SQL Trade Filter. CreateTradeFilter + CreateSQLTradeFilter are required to create SQL Trade Filters.

CreateTradeFilter

Permission to create trade filters.

ModifyGroupTradeFilter

Permission to modify trade filters created by any user in the group, provided the ModifyTradeFilter function is also granted.

To restrict a user to only modify the trade filters that the user has created, use the ModifyUserTradeFilter function instead.

ModifySQLTradeFilter

Permission to modify SQL Trade Filter. ModifyTradeFilter + ModifySQLTradeFilter are required to create SQL Trade Filters.

ModifyTradeFilter

Permission to modify trade filters.

ModifyUserTradeFilter

Permission to modify trade filters created by the user currently connected, provided the ModifyTradeFilter function is also granted.

To allow a user to modify trade filters created by any user in the group, use the ModifyGroupTradeFilter function instead.

RemoveSQLTradeFilter

Permission to delete SQL Trade Filter. RemoveTradeFilter + RemoveSQLTradeFilter are required to create SQL Trade Filters.

RemoveTradeFilter

Permission to remove trade filters.

Access permissions for static data filters are twofold:

Examples – To remove the static data filter called MyStaticDF, you need the function RemoveStaticDataFilter, and you need read-write access to MyStaticDF. To use MyStaticDF for loading data, you need read-only or read-write access to MyStaticDF.

CreateStaticDataFilter

Permission to create static data filters.

ModifyStaticDataFilter

Permission to modify static data filters.

RemoveStaticDataFilter

Permission to remove static data filters.

Access permissions for filter sets are twofold:

Examples – To modify the filter set called MyFilterSet, you need the function ModifyFilterSet, and you need read-write access to MyFilterSet. To use MyFilterSet for loading trades, you need read-only or read-write access to MyFilterSet.

CreateFilterSet

Permission to create filter sets.

CreateTradeSelectorTemplate

Permission to create filter set templates.

ModifyFilterSet

Permission to modify filter sets.

RemoveFilterSet

Permission to remove filter sets.

CreateAuditFilter

Permission to create audit filters.

ModifyAuditFilter

Permission to modify audit filters.

DeleteAuditFilter

Permission to remove audit filters.

CreateLegalEntity

Permission to create legal entities of any status.

To restrict the creation of legal entities by status, use the CreateLegalEntityDisabled, CreateLegalEntityEnabled and CreateLegalEntityPending functions instead.

Example – If you want to allow users to create legal entities in status Pending only, do not assign the function CreateLegalEntity but assign the function CreateLegalEntityPending instead.

CreateLegalEntityDisabled, CreateLegalEntityEnabled, CreateLegalEntityPending

Permission to create legal entities based on the corresponding status only: disabled, pending, or enabled.

To create legal entities of any status, use the CreateLegalEntity function instead.

HideLegalEntityAgreementButton

To hide the Legal Entity button from the Legal Entity window.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

HideLegalEntitySDIsButton

To hide the SDI button from the Legal Entity window.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

DisableCheckLERelation

Permission to disable the check for legal entity relations when loading legal entities in the Legal Entity Chooser.

EnableCheckLERelationWhenSegregation

Permission to enable the check for legal entity relations when an environment property LEGAL_ENTITY_SEGREGATION is set to True while loading legal entities in the Legal Entity Chooser.

ModifyLegalEntity

Permission to modify legal entities of any status.

To restrict the modification of legal entities by status, use the ModifyLegalEntityDisabled, ModifyLegalEntityEnabled and ModifyLegalEntityPending functions instead.

Example – If you want to allow users to modify legal entities in status Pending only, do not assign the function ModifyLegalEntity but assign the function ModifyLegalEntityPending instead.

ModifyLegalEntityDisabled, ModifyLegalEntityEnabled, ModifyLegalEntityPending

Permission to modify legal entities based on the corresponding status: disabled, pending, or enabled.

To create legal entities of any status, use the ModifyLegalEntity function instead.

RemoveLegalEntity

Permission to remove legal entities.

AddModifyLECommonRole, RemoveLECommonRole, AddModifyLEDedicatedRole, RemoveLEDedicatedRole

Only applies if the environment property LEGAL_ENTITY_SEGREGATION=true is set, which allows segregating legal entity roles by processing organizations.

 Refer to Calypso Getting Started documentation for details.

ModifyALLProcessingOrgStaticData

ModifyOnlyProcessingOrgStaticData

UseProcessingOrgHierarchy

ViewOnlyProcessingOrgStaticData

AddModifyLEAttribute

Permission to create and modify legal entity attributes.

RemoveLEAttribute

Permission to remove legal entity attributes.

ModifyALLProcessingOrgStaticData

ModifyOnlyProcessingOrgStaticData

UseProcessingOrgHierarchy

ViewOnlyProcessingOrgStaticData

Access Permissions per Attributes - AddModifyLEAttribute#<attribute>, RemoveLEAttribute#<attribute>

To set access permissions per legal entity attribute, set the comment of the attribute to allowAccessPermission in the "leAttributeType" domain.

Example:

It creates the access functions AddModifyLEAttribute#ACCOUNTING and RemoveLEAttribute#ACCOUNTING.

CreateReferenceData

Permission to create LE attribute codes.

RemoveLegalData

Permission to remove LE attribute codes.

AddModifyLERelation

Permission to create and modify EOD data for legal entities.

RemoveLERelation

Permission to remove EOD data for legal entities.

ModifyOnlyProcessingOrgStaticData

UseProcessingOrgHierarchy

CreateLegalAgreement

Permission to create legal agreements.

ModifyLegalAgreement

Permission to modify legal agreements.

RemoveLegalAgreement

Permission to remove legal agreements.

ModifyALLProcessingOrgStaticData

ModifyOnlyProcessingOrgStaticData

UseProcessingOrgHierarchy

ViewOnlyProcessingOrgStaticData

CreateLEContact

Permission to create LE contacts.

ModifyLEContact

Permission to modify LE contacts.

RemoveLEContact

Permission to remove LE contacts.

ModifyALLProcessingOrgStaticData

ModifyOnlyProcessingOrgStaticData

UseProcessingOrgHierarchy

ViewOnlyProcessingOrgStaticData

CreateLegalEntityRegistration

Permission to create LE registrations.

ModifyLegalEntityRegistration

Permission to modify LE registrations.

RemoveLegalEntityRegistration

Permission to remove LE registrations.

AddModifyLERelation

Permission to create and modify LE relations.

RemoveLERelation

Permission to remove LE relations

ModifyALLProcessingOrgStaticData

ModifyOnlyProcessingOrgStaticData

UseProcessingOrgHierarchy

ViewOnlyProcessingOrgStaticData

ViewOnlyProcessingOrgStaticData

CreateModifyIndustryHierarchy

Permission to create or modify an industry hierarchy.

RemoveIndustryHierarchy

Permission to delete an industry hierarchy.

ViewIndustryHierarchy

Permission to open the Industry Hierarchy window.

ModifyCWSReportCollection

Permission to create, copy, paste, rename, delete reports from the Report Collection in the Calypso Workstation.

RiskPresenterDefaultViewConfig

Permission to set a default report plan.

DistributeCWSNodes

Permission to distribute report nodes.

DistributeCWSReportPlans

Permission to distribute report plans.

DistributeCWSDrillDowns

Permission to distribute drill-down report plans.

DistributeCWSSpeedButtons

Permission to distribute CWS speed buttons.

DistributeCWSWindowPlans

Permission to distribute window plans (layout).

DistributeCWSConfigWithGroup

This is a restriction so that the user can only distribute CWS items to other users within the same group.

OnDemandMktDataRefresh

Permission to refresh market data on-the-fly for a given report.

The On Demand Analysis window can be accessed from the Trade Blotter, the Pricing Sheet, the Calypso Workstation, and the Trade Windows.

ConfigureODAServers

Permission to modify the selection of default calculation server, presentation server, market data server, dispatcher.

ConfigureODAShortcuts

Permission to configure input shortcuts and analysis shortcuts.

DistributeODAShortcuts

Permission to distribute input shortcuts and analysis shortcuts to other users.

DistributeODASpeedButtons

Permission to distribute speed buttons to other users.

If the speed button contains a CWS report view, the view must be distributed from the Calypso Workstation.

ODAAdhocAnalysis

Permission to run Ad Hoc analyses.

ODAAdhocTradeFilter

Permission to select a trade filter in the Ad Hoc and On Demand panels.

Access permissions for risk analysis configurations are twofold:

Examples – To remove the risk analysis configuration called MyRiskConfig, you need the function RemoveRiskAnalysisConfig, and you need read-write access to MyRiskConfig. To use MyRiskConfig for running risk analyses, you need read-only or read-write access to MyRiskConfig.

 Ⓘ   [NOTE: Functions like checking market data and previewing risk results can only be performed by an Admin user (a user from a "Is Admin" group)]

CreateRiskAnalysisConfig

Permission to create risk analysis configurations.

ModifyRiskAnalysisConfig

Permission to modify risk analysis configurations.

RemoveRiskAnalysisConfig

Permission to remove risk analysis configurations.

Access permissions for parameter viewers are twofold:

Examples – To modify the analysis parameter set called SecurityAccrual#default, you need the function ModifyAnalysisParam, and you need read-write access to SecurityAccrual#default. To use SecurityAccrual#default in a risk analysis configuration, you need read-only or read-write access to SecurityAccrual#default.

CreateAnalysisParam

Permission to create analysis parameter sets.

ModifyAnalysisParam

Permission to modify analysis parameter sets.

RemoveAnalysisParam

Permission to remove analysis parameter sets.

ViewRiskReport

Permission to run “Display Risk Report”.

CreateSystemPLMark

Permission to adjust System P&L Marks.

ModifyPLMark

Permission to adjust P&L Marks.

RemovePLMark

Permission to delete P&L Marks.

UnlockMarks

Permission to unlock marks. When you right-click a mark, the menu items "Unlock Book" and "Unlock Marks for Selected Trade" will be available, if marks have been locked.

Bulk Import of OfficialPL Marks

Permission to use Official P&L Import Marks window.

Bulk Import of OfficialPL Marks Override

Permission to override P&L measures that are otherwise computed.

Access permissions for Official P&L Mark report are two-fold:

CreateSystemPLMark

Permission to adjust P&L Marks.

ModifyPLMark

Permission to adjust P&L Marks.

RemovePLMark

Permission to delete P&L Marks.

UnlockMarks

Permission to unlock marks. When you right-click a mark, the menu items "Unlock Book" and "Unlock Marks for Selected Trade" will be available, if marks have been locked.

Generate Conversion Factors

Permission to use the Generate Conversion Factor window.

Private report templates can be used only by the user who creates them, and public report templates can be used by any user, provided the proper permissions are granted.

Private report templates

CreatePrivateReportTemplates

Permission to create private report templates.

ModifyPrivateReportTemplates

Permission to modify private report templates. Only the user who created a private report template can modify it.

Permission to modify report plans in the Calypso Workstation.

RemovePrivateReportTemplates

Permission to modify private report templates. Only the user who created a private report template can remove it.

Public report templates

Access permissions for using public report templates are twofold:

Example – To remove the public report template called MyReportTmpl, you need the function RemovePublicReportTemplates, and you need read-write access to MyReportTmpl. To use MyReportTmpl in a report, you need read-only or read-write access to MyReportTmpl.

CreatePublicReportTemplates

Permission to create public report templates.

ModifyPublicReportTemplates

Permission to modify public report templates.

RemovePublicReportTemplates

Permission to remove public report templates.

Loading report template

AddStandardReportTemplates

Permission to load report templates that are available under resources/com/calypso/tk/report/templates in Configuration > Reporting & Risk > Report Templates and the corresponding report window.

AdmPurgeReportTemplates

Permission to purge report templates.

See also “All trade windows” for information about all access permissions required for viewing and entering trades.

ModifyOnlyProcessingOrgTrade

Restriction to only modify the trades associated with the processing orgs of the user currently connected. User processing orgs are specified using Configuration > User Access Control > Access Permissions > Users panel.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

SaveManualCre

Controls Process > Edit.

Permission to save manual CREs, provided the ModifyBOPosting function is also granted.

ViewOnlyProcessingOrgTrade

Restriction to only view the trades associated with the processing orgs of the user currently connected. User processing orgs are specified using Configuration > User Access Control > Access Permissions > Users panel.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

See also “All trade windows” for information about all access permissions required for viewing and entering trades.

SaveManualCre

Controls Process > Edit.

Permission to save manual CREs, provided the ModifyBOPosting function is also granted.

ModifyBOPosting

Controls Edit > Edit.

Permission to modify posting details.

ViewAuditReport

A new access permission (“ViewAuditReport” ) is added to ensure that AuditReport should be loaded for those users who have view access permission. If the user doesn't have the permission, then it should throw an error.

ViewOnlySameGroupAuditEntry

Restriction to only see audit entries if the user that is stored on the entry belongs to the same group as the user running the report.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

ViewOnlyRestrictedAuditData

Permission to view audit data for objects not related to Processing Orgs.

It also requires having read-write or read-only access to the object or parent object (this currently applies to audit data of Quote Set for Quote Value, Rating Agency for Credit Rating and ProductCreditRating, Report Template, Risk Config, Pricing Env, Pricing Parameters, Pricer Config), or access to the window of the object (this currently applies to audit data of User Access Permission).

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

ViewOnlyProcessingOrgStaticData

Permission to view audit data for objects related to Processing Orgs.

[NOTE: This currently applies to audit data of PL Marks]

See also “All trade windows” for information about all access permissions required for viewing and entering trades.

ModifyOnlyProcessingOrgTrade

Restriction to only modify the trades associated with the processing orgs of the user currently connected. User processing orgs are specified using Configuration > User Access Control > Access Permissions > Users panel.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

ViewOnlyProcessingOrgTrade

Restriction to only view the trades associated with the processing orgs of the user currently connected. User processing orgs are specified using Configuration > User Access Control > Access Permissions > Users panel.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

UseProcessingOrgHierarchy

ViewOnlyProcessingOrgStaticData

See also “All trade windows” for information about all access permissions required for viewing and entering trades.

ModifyOnlyProcessingOrgTrade

Restriction to only modify the trades associated with the processing orgs of the user currently connected. User processing orgs are specified using Configuration > User Access Control > Access Permissions > Users panel.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

ViewOnlyProcessingOrgTrade

Restriction to only view the trades associated with the processing orgs of the user currently connected. User processing orgs are specified using Configuration > User Access Control > Access Permissions > Users panel.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

ModifyALLProcessingOrgStaticData

ModifyOnlyProcessingOrgStaticData

ViewOnlyProcessingOrgStaticData

ViewOnlyProcessingOrgStaticData

ModifyALLProcessingOrgStaticData

ModifyOnlyProcessingOrgStaticData

ViewOnlyProcessingOrgStaticData

EditAccountSweepingDetail

Permission to edit the sweeping details when you bring up the Pool Consolidation window.

AccountSweeping

Permission to perform Pool Consolidation.

ViewOnlyProcessingOrgStaticData

Controls the Report Browser configurations.

CreateReportBrowserConfig

Permission to create configurations.

ModifyReportBrowserConfig

Permission to modify configurations.

RemoveReportBrowserConfig

Permission to remove configurations.

ModifyALLProcessingOrgStaticData

ModifyOnlyProcessingOrgStaticData

UseProcessingOrgHierarchy

ViewOnlyProcessingOrgStaticData

Controls permissions in Trade Price report (menu action reporting.ReportWindow$PricerFromDB).

DeletePriceFromTradePriceReport

Permission to delete pricer measure values.

ReadPriceFromTradePriceReport

Permission to import pricer measure values.

SavePriceFromTradePriceReport

Permission to save pricer measure values.

See "All reports with templates".

Access permissions for the calculation servers setup (which reports run on a calculation server) are twofold:

ModifyRiskOnDemandConfig

Permission to modify calculation servers setup.

RiskOnDemandConfigAccess

Permission to stop a calculation server.

Access permissions for the presentation server setup (which reports run on a presentation server) are twofold:

ModifyRiskPresenterConfig

Permission to modify presentation servers setup.

RiskPresenterConfigAccess

Permission to stop a presentation server.

CreateModifyOfficialPLConfig

Permission to modify PL Config configurations.

CreateModifyPLMethodologyConfig

Permission to modify PL Methodology configurations.

ViewOfficialPLConfig

Permission to view PL Config configurations.

ViewPLMethodologyConfig

Permission to view PL Methodology configurations.

Access permissions for scheduled tasks are twofold:

Examples – To modify a configuration for the BALANCE scheduled task, you need the function ModifyScheduledTask, and you need read-write access to the BALANCE scheduled task. To run the BALANCE scheduled task, you need read-only or read-write access to the BALANCE scheduled task.

ModifyScheduledTask

Permission to modify scheduled task configurations.

[NOTE: To modify the Archive scheduled task, the ModifyScheduledTask_ARCHIVE function also has to be granted]

ModifyScheduledTask_ARCHIVE

Permission to modify the Archive scheduled task configurations, provided the ModifyScheduledTask permission is also granted.

ModifyScheduledTask_DELETE_PRODUCTS

Permission to modify the DELETE_PRODUCTS scheduled task configurations, provided the ModifyScheduledTask permission is also granted.

ModifyScheduledTask_DELETE_TRADES

Permission to modify the DELETE_TRADES scheduled task configurations, provided the ModifyScheduledTask permission is also granted.

ExecuteManualScheduledTask

Permission to manually execute a scheduled task.

ModifyALLProcessingOrgStaticData

ModifyOnlyProcessingOrgStaticData

UseProcessingOrgHierarchy

ViewOnlyProcessingOrgStaticData

SchedulerRESTAPI

User other than admin who has access to this function will be able to invoke Scheduler REST endpoint.

Scheduled task GENERATE_COMM_FUTURES

Scheduled task LOAD_MARKIT_RED_DATA

Scheduled task LOAD_MARKIT_CDS_SPREAD_DATA

Scheduled task LOAD_MARKIT_CDS_INDEX_DATA

Scheduled task LOAD_MARKIT_TRANCHE_QUOTES_DATA

Scheduled task OFFICIALPLPERMANENTADJUSTMENTS

Scheduled task PROCESS_EXPIRY

Scheduled task PROCESS_TRADE

ModifyLEManualSDIDefaultedValues

Permission to modify default values.

AllowUpdateTagsWithManualSdi

Permission to save a manual SDI without Additional TAGS, and to apply action UPDATE_TAGS on manual SDIs.

ModifyALLProcessingOrgStaticData

ModifyOnlyProcessingOrgStaticData

ViewOnlyProcessingOrgStaticData

CreateLEProcessingOrgSDI

Permission to create SDIs for processing orgs, provided the CreateLESDI function is also granted.

CreateLESDI

Permission to create SDIs for all roles, except for processing organizations.

To create SDIs for processing organizations, the CreateLEProcessingOrgSDI function is also needed.

ModifyLegalData

Controls the R-Ship button.

Permission to create and modify SDI relationships.

ModifyAccountHolderSDI

Permission to modify SDIs for which the role is defined in the domain "AccountHolderRole". You also need the permission ModifyLESDI.

ModifyLEProcessingOrgSDI

Permission to modify SDIs for processing orgs, provided the ModifyLESDI function is also granted.

ModifyLESDI

Permission to modify SDIs for all roles, except for processing organizations.

To create SDIs for processing organizations, the ModifyLEProcessingOrgSDI function is also needed.

ModifyUsedSDI

Allows overriding the behavior when the environment property USE_OLD_SDI_VALIDATION is false. In this case, the user will be able to update the existing SDI, rather than creating two SDIs with effective to and from dates.

RemoveLegalData

Controls the R-Ship button.

Permission to remove SDI relationships.

RemoveLEProcessingOrgSDI

Permission to remove SDIs for processing orgs, provided the RemoveLESDI function is also granted.

RemoveLESDI

Permission to remove SDIs for all roles, except for processing organizations.

To remove SDIs for processing organizations, the RemoveLEProcessingOrgSDI function is also needed.

ModifyALLProcessingOrgStaticData

ModifyOnlyProcessingOrgStaticData

UseProcessingOrgHierarchy

ViewOnlyProcessingOrgStaticData

AddModifyLEManualSDI

Permission to create and modify manual SDIs. You can also split into CreateLEManualSDI and ModifyLEManualSDI. AddModifyLEManualSDI takes precedence over CreateLEManualSDI and ModifyLEManualSDI.

CreateLEManualSDI

Permission to create manual SDIs. Only applies if AddModifyLEManualSDI is not granted.

ModifyLEManualSDI

Permission to modify manual SDIs. Only applies if AddModifyLEManualSDI is not granted.

RemoveLEManualSDI

Permission to remove manual SDIs.

ModifyLegalData

Permission to modify settlement methods.

RemoveLegalData

Permission to remove settlement methods.

ModifyALLProcessingOrgStaticData

ModifyOnlyProcessingOrgStaticData

UseProcessingOrgHierarchy

ViewOnlyProcessingOrgStaticData

ModifyLegalData

Permission to modify settlement message configurations.

RemoveLegalData

Permission to remove settlement message configurations.

ModifyALLProcessingOrgStaticData

ModifyOnlyProcessingOrgStaticData

ViewOnlyProcessingOrgStaticData

ModifyNettingConfig

Permission to create, modify and delete netting configurations, provided the RunConfigWindow function is also granted.

RunConfigWindow

Permission to run “Netting Configuration”.

ModifyLegalData

Permission to modify netting methods.

RemoveLegalData

Permission to remove netting methods.

ModifyALLProcessingOrgStaticData

ModifyOnlyProcessingOrgStaticData

UseProcessingOrgHierarchy

ViewOnlyProcessingOrgStaticData

ModifyTargetDirectory

Permission to add / modify / delete an entry within the Target Directory window.

In order to run an engine, the user must be granted read-write access to the corresponding application under Access > Application Name.

 Ⓘ   [NOTE: Application names are defined in the domain "applicationName"]

Message Engine

Access permissions for messages are multi-fold:

CreateModifyMessage

Permission to create or modify messages.

RemoveMessage

Permission to remove messages.

Transfer Engine

Access permissions for transfers are multi-fold:

CreateModifyTransfer

Permission to create or modify transfers.

RemoveTransfer

Permission to remove transfers.

By default, access permissions are checked on the server side for the objects listed here:

Server Side Access Permissions

SkipServerAPIAccessPermCheck

Bypasses server side access permissions.

Access permissions for dispatcher configurations are twofold:

Examples – To modify a dispatcher configuration called MyDispatchConfig, you need the function ModifyDispatcherConfig, and you need read-write access to MyDispatchConfig. To use MyDispatchConfig for running a dispatcher, you need read-only or read-write access to MyDispatchConfig.

CreateDispatcherConfig

Permission to create dispatcher configurations, provided the RunConfigWindow function is also granted.

ModifyDispatcherConfig

Permission to modify dispatcher configurations, provided the RunConfigWindow function is also granted.

RemoveDispatcherConfig

Permission to remove dispatcher configurations, provided the RunConfigWindow function is also granted.

RunConfigWindow

Permission to run “Dispatcher Configuration”.

Access permissions for calculation server configurations (defining a calculation server) is twofold:

CreateCalculationServerConfig

Permission to create new calculation server configurations.

ModifyCalculationServerConfig

Permission to modify calculation server configurations.

RemoveCalculationServerConfig

Permission to delete calculation server configurations.

CreateTradeKeywordConfig

Permission to create trade keywords in the Trade Keyword Configuration window.

ModifyTradeKeywordConfig

Permission to modify trade keywords in the Trade Keyword Configuration window.

RemoveTradeKeywordConfig

Permission to remove trade keywords in the Trade Keyword Configuration window.

GenerateTradeKeywordEnrichment

Permission to generate SQL scripts for trade keyword data.

MigrateTradeKeyword

Permission to migrate existing trade keywords.

When environment property DISABLE_TRADE_KEYWORDS_CONFIG_CHANGE = true (default is false), the access permissions functions CreateTradeKeywordConfig, ModifyTradeKeywordConfig, RemoveTradeKeywordConfig are disabled for non-Admin users.

CreateDomainConstraints

Permission to create domain constraints (ranges of values for domain data).

CreateDomains

Permission to create domains and domain values.

[NOTE: Domain values can be added to domains in most windows through the Add Domain window, and this permission will be required]

ModifyDomains

Permission to modify domains and domain values.

[NOTE: Domain values can be modified in most windows through the Add Domain window, and this permission will be required]

RemoveDomains

Permission to remove domains and domain values.

[NOTE: Domain values can be removed from domains in most windows through the Add Domain window, and this permission will be required]

RemoveDomains

Permission to remove rating values.

ModifyTKConfigData

Permission to register custom pricers.

RemoveTKConfigData

Permission to remove custom pricers.

ModifyDomains

Permission to register custom pricer measures.

ModifyTKConfigData

Permission to register custom pricing parameters.

RemoveTKConfigData

Permission to remove custom pricing parameters.

ModifyTKConfigData

Permission to register custom analysis viewers.

ModifyTKConfigData

Permission to register custom cashflow generators.

RemoveTKConfigData

Permission to remove custom cashflow generators.

Access permissions for trades are multi-fold:

Examples – To enter a USD bond trade on MyBook, you need the SaveTrade function, you need read-write access to MyBook, you need read-write access to the Bond product type, you need read-write access to a static data filter that contains the USD bond, MyBook needs permission to trade the USD currency and the Bond product, and you need permission to apply the NEW action on the Bond product.

To view a trade, you need read-only or read-write access to MyBook, read-only or read-write access to the trade’s product type, and read-only or read-write access to the static data filter that contains the USD bond.

AllowExoticTrade

Permission to select the Exotic leg type.

AllowReadOnlyStructuredWindow

Restriction to bring up the Structure window in read-only mode.

AssignOverrideKeys

Permission to define market data / pricer override keys.

CreatePrivateProductTemplates

Permission to create private product templates.

CreatePublicProductTemplates

Permission to create public product templates.

CustomizeCashflows

Controls the Cashflow panel.

Permission to customize cashflows.

ModifyB2BLinkedTrade

Permission to modify individual mirror trades. Otherwise, only the main trade can be modified, provided the user has permission to amend trades.

ModifyOverrideKeys

Permission to modify market data / pricer override keys.

ModifyTrade

Permission to modify a trade.

ModifyTradeCurrentDateTimeCheck

Controls the Details panel.

Permission to modify the “Current Trade Date Time” checkbox.

ModifyTradeDateTime

Restriction to prevent the user from modifying the trade date.

This only applies when ModifyTradeCurrentDateTimeCheck is not set.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

SaveAsNewTrade

Permission to save a trade as a new trade.

SaveTrade

Permission to create a trade.

ViewArchivedTradeOnline

Permission to load an individual archived trade using the Trade Id field.

ViewPendingProcessing

Controls Trade > Trade Pending Processing.

Permission to view events that are pending processing. The menu items will not appear if the function is not granted.

Access permissions for generic comments are twofold:

AllowOptionalWorkflowActionComment

Applies to tasks that require comments (Comment checkbox checked). Permission to close the Add Generic Comment window even if no comment is entered.

InvalidateGenericComment

Permission to invalidate a comment.

SaveGenericComment

Permission to save a comment.

SkipCustodyAllocationValidation

To skip the ClientAccount validation in the case of custody allocation. The ClientAccount must belong to the selected LegalEntity otherwise.

See also “All trade windows” for information about all access permissions required for viewing and entering trades.

AllowInsertRemoveTransferRules

Controls Back Office > BO Browser > SDI panel.

Permission to insert or remove transfer rules.

ModifyLayout

Permission to modify the frames and layout. Without this permission, the layouts are locked and cannot be modified.

ModifyBOTrade

Permission to modify BO details.

ViewBOTrade

Permission to view BO details.

ViewOnlyProcessingOrgTrade

Restriction to only view the back office details of the processing orgs of the user currently connected. User processing orgs are specified using Configuration > User Access Control > Access Permissions > Users panel.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

CreateMutation

Permission to create mutations for vanilla OTC Equity options.

ModifyMutation

Permission to modify mutations for vanilla OTC Equity options.

For trade windows with event type actions only.

The user must be granted read-only or read-write access to individual event type actions under Access > Action Event Type as applicable.

ModifyTradeSystemKeyword

Permission for modify the value of trade keywords that have been set by the system. The list of system trade keywords is specified in the "systemKeyword" domain.

ModifyTradeKeywordFavorite

Permission to define favorite trade keywords.

CreateSpecificResets

Permission to create specific resets, provided the ViewSpecificResets function is also granted.

RemoveSpecificResets

Permission to remove specific resets, provided the ViewSpecificResets function is also granted.

ViewSpecificResets

Permission to run “Specific Resets”.

ModifyTerminationDates

Permission to modify termination dates.

EditExternalTradeContext

Permission to use the Edit button that brings up the Context window in the External Trade window.

Access permissions for the trade panels and components in the FX trade windows.

The environment property FXTRADE_PERMISSIONING=true must be set to enable the permissions in the FX trade windows.

FXTradingSalesMargin

Permission to show the Sales Margin panel for sales users.

FXTradingBroker

Permission to show the Broker field for trader users.

FXTradingInternal

Permission to show the Internal Counterparty toggle for trader users.

In addition to the access permissions required for "All trade windows", the following function can also be granted.

DealCaptureLayoutCustomization

Permission to customize the layout.

CreatePricingScript

Permission to create pricing scripts.

ModifyPricingScript

Permission to modify pricing scripts.

RemovePricingScript

Permission to remove pricing scripts.

In addition to the access permissions required for "All trade windows", the following permissions and restrictions can also be set.

AuthorizeHolidaySecFinanceCleanup

Permission to perform interest cleanup on non-business days for repo trades and security lending "Sec Vs Cash" trades.

AllowRepoWithoutCashPrincipal

Permission to save a repo trade without a cash principal amount.

In addition to the access permissions required for "All trade windows", the following permissions and restrictions can also be set.

AllowSecLendingWithoutCashPrincipal

Permission to save a security lending trade without a cash principal amount.

MarkingIfStartLegSettled

Fee marking in the Actions Input panel (Reprice) is only allowed if the start leg is settled.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

In addition to the access permissions required for "All trade windows", the following functions can also be granted.

AddReconvention

Permission to add a reconvention.

RemoveReconvention

Permission to remove a reconvention.

CRMAccessConfig

Permission to use the Relationship and User tabs in the Calypso Activity Browser.

CRMConfigAdmin

Permission to configure the Calypso Activity Browser.

See also “All trade windows” for information about all access permissions required for viewing and entering trades.

ModifyOnlyProcessingOrgTrade

Restriction to only modify the trades associated with the processing orgs of the user currently connected. User processing orgs are specified using Configuration > User Access Control > Access Permissions > Users panel.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

ViewOnlyProcessingOrgTrade

Restriction to only view the trades associated with the processing orgs of the user currently connected. User processing orgs are specified using Configuration > User Access Control > Access Permissions > Users panel.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

UseProcessingOrgHierarchy

See also “All trade windows” for information about all access permissions required for viewing and entering trades.

ControlPricingSheetMarketData

Permission to:

PricingSheetAccessBackOffice

Permission to access Audit and BO Browser.

PricingSheetProfilePropertiesConfigAccess

Permission to access the Profile Configuration window > Properties, Menu, Layout panels.

PricingSheetProfileUsersConfigAccess

Permission to access the Profile Configuration window > Users panel.

PricingSheetProfileAdminAccess

Permission to access the Profile Administration window.

PricingSheetStrategyBuilderAccess

Permission to access the Strategy Builder.

PricingSheetLegDetailsEditable

Permission to modify the actual property values in the Leg Details window.

PricingSheetSettingAccess

Permission to access Global Preferences.

PricingSheetUserPreferencesAccess

Permission to access User Preferences.

See also “All trade windows” for information about all access permissions required for viewing and entering trades.

ModifyOnlyProcessingOrgTrade

Restriction to only modify the trades associated with the processing orgs of the user currently connected. User processing orgs are specified using Configuration > User Access Control > Access Permissions > Users panel.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

ViewOnlyProcessingOrgTrade

Restriction to only view the trades associated with the processing orgs of the user currently connected. User processing orgs are specified using Configuration > User Access Control > Access Permissions > Users panel.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

See also “All trade windows” for information about all access permissions required for viewing and entering trades.

ModifyOnlyProcessingOrgTrade

Restriction to only modify the trades associated with the processing orgs of the user currently connected. User processing orgs are specified using Configuration > User Access Control > Access Permissions > Users panel.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

ViewOnlyProcessingOrgTrade

Restriction to only view the trades associated with the processing orgs of the user currently connected. User processing orgs are specified using Access Permissions > Users panel.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

CreatePricingSheet

Permission to create pricing grids, provided the ViewPricingSheet function is also granted.

ModifyPricingSheet

Permission to modify pricing grids, provided the ViewPricingSheet function is also granted.

RemovePricingSheet

Permission to remove pricing grids, provided the ViewPricingSheet function is also granted.

ViewPricingSheet

Permission to run “Pricing Grid”.

AddRemoveCAOption

Permission to add / remove outcomes to / from a corporate action.

AddRemoveCAToProduct

Permission to add / remove "To Products" to / from a corporate action.

ApplyCA

Permission to apply a corporate action and generate CA trades.

CAEdition

Only applies if CreateModifyCA or ModifyCA are granted.

This is a restriction to allow a user group to modify only the fields specified in domain "CAEdition.<user group>".

To allow a group of users to modify all the fields, do not grant them the CAEdition function, or grant them the CAEdition function, and create the domain "CAEdition.<user group>" that contains the value ANY.

Example – The users in user group "calypso_group" can only modify the Payment Date - You need to create the domain "CAEdition.calypso_group" that contains the value "Payment Date".

CreateModifyCA

New / Save / Save as New buttons.

Permission to create and modify corporate actions.

DesactivateCA

Deactivate button.

Permission to deactivate corporate actions.

ModifyCA

Save button.

Permission to modify corporate actions.

ReactivateCA

Reactivate button.

Permission to reactivate corporate actions.

RemoveCA

Controls the Create panel, Delete button.

Permission to delete corporate actions.

RevertCA

Revert button.

Permission to undo corporate actions.

AddModifyAutoCompensationConfig

Permission to create and modify Auto Compensation configurations.

RemoveAutoCompensationConfig

Permission to remove Auto Compensation configurations.

AddModifyPrincipalAgentConfig

Permission to create and modify Principal Agent configurations.

RemovePrincipalAgentConfig

Permission to remove Principal Agent configurations.

CreateCreditEvents

Permission to create credit events.

ModifyCreditEvents

Permission to modify credit events.

RemoveCreditEvents

Permission to remove credit events.

UndoSettledCreditEvents

Permission to undo settled credit events.

ApplySuccessionEvents

Permission to apply succession events > Apply Events panel.

CreateSuccessionEvents

Permission to create succession events > Manage Events panel.

ModifySuccessionEvents

Permission to modify succession events > Manage Events panel.

RemoveSuccessionEvents

Permission to remove succession events > Manage Events panel.

ModifyCARules

Permission to modify CA rules.

ViewCARules

Permission to view CA rules.

ModifySettlementTypeInOptExWin

Permission to modify the settlement type in the Option Exercise window.

ViewOnlyProcessingOrgStaticData

ViewOnlyProcessingOrgTrade

Restriction to only view the trades associated with the processing orgs of the user currently connected. User processing orgs are specified using Access Permissions > Users panel.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

Access permissions for Hedge Relationships are twofold:

In the Hedge Inception window, click Create New Strategy to open the Hedge Strategy window.

CancelHedgeRelationshipDefinition

Permission to cancel a hedge relationship definition.

CreateHedgeRelationship

Permission to create a new hedge relationship.

CreateHedgeRelationshipDefinition

Permission to create a new hedge relationship definition.

CreateHedgeStrategy

Permission to create a new hedge strategy.

HedgeTrades

Permission to hedge trades.

ModifyHedgeStrategy

Permission to modify a hedge strategy.

ModifyHedgeRelationship

Permission to modify a hedge relationship.

ModifyHedgeRelationshipDefinition

Permission to modify a hedge relationship definition.

RemoveHedgeRelationship

Permission to remove a hedge relationship.

RemoveHedgeRelationshipDefinition

Permission to remove a hedge relationship definition.

RemoveHedgeStrategy

Permission to remove a hedge strategy.

SimulateHedgeEffectivenessTest

Permission to use the menu item Hedge > Hedge Effectiveness Test Event Simulator in the Hedge Relationship window.

TerminateHedgeRelationship

Permission to use the Terminate button in the Hedge Relationship window.

TransferPosition

Permission to run “Position Transfer”.

RunTradeTransfer

Permission to run “Trade Transfer”.

You can only view positions for books that belong to the user Processing Org (if any).

PublishPortfolioManager

Controls Utilities > all publish functions.

Permission to publish the results of Portfolio Manager, provided the RunPortfolioManager function is also granted.

RunPortfolioManager

Permission to run “Portfolio Manager”.

CreateFXRateDef

Permission to create reset information for FX rates.

ModifyFXRateDef

Permission to modify reset information for FX rates.

RemoveFXRateDef

Permission to remove reset information for FX rates.

ModifyPriceFixings

Permission to create and modify price fixings.

PriceFixingAnyTrade

Controls the Add Trades button.

Permission to add individual trades for price fixing.

PublishPriceFixings

Permission to publish price fixings.

RemovePriceFixings

Permission to remove price fixings.

CreateRateResets

Permission to create reset information for interest rates.

ModifyRateResets

Permission to modify reset information for interest rates.

PublishRateResets

Controls the Trade Flows panel, Publish button.

Permission to publish reset information for interest rates.

RateResetAnyTrade

Controls the Add Trades button.

Permission to add individual trades for reset.

RemoveRateResets

Permission to remove reset information for interest rates.

See also “All trade windows” for information about all access permissions required for viewing and entering trades.

ModifyOnlyProcessingOrgTrade

Restriction to only modify the trades associated with the processing orgs of the user currently connected. User processing orgs are specified using Configuration > User Access Control > Access Permissions > Users panel.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

ViewOnlyProcessingOrgTrade

Restriction to only view the trades associated with the processing orgs of the user currently connected. User processing orgs are specified using Configuration > User Access Control > Access Permissions > Users panel.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

CashSettleReview

Permission to check / clear the Reviewed / Satisfied checkbox.

CreateCashSettleInfo

Permission to create cash settlement information.

ModifyCashSettleInfo

Permission to modify cash settlement information.

RemoveCashSettleInfo

Permission to remove cash settlement information.

AccessPerm

Permission to configure access permissions, provided one of the following functions is also granted:

CreateMarketDataGroup

Controls the Market Data Groups button.

Permission to create market data groups.

ModifyMarketDataGroup

Controls the Market Data Groups button.

Permission to modify market data groups.

RemoveMarketDataGroup

Controls the Market Data Groups button.

Permission to remove market data groups.

CreateUsers

Controls the Users panel.

Permission to create users, provided the AccessPerm function is also granted.

ModifyUsers

Controls the Users panel.

Permission to modify users, provided the AccessPerm function is also granted.

RemoveUsers

Controls the Users panel.

Permission to remove users, provided the AccessPerm function is also granted.

ModifyAccessPermAutoLogout

Permission to modify the auto logout period, provided the AccessPerm function is also granted.

ModifyAccessPermBookAccess

Controls the Book Access panel.

Permission to modify book permissions, provided the AccessPerm function is also granted.

ModifyAccessPermGroupAccess

Controls the Group Access panel.

Permission to modify the group permissions provided, the AccessPerm function is also granted.

ModifyAccessPermGroups

Controls the Groups panel.

Permission to modify groups, provided the AccessPerm function is also granted.

ModifyAccessPermProductAccess

Controls the Workflow Access panel.

Permission to modify the product permissions, provided the AccessPerm function is also granted.

ModifyAccessPermUsers

Controls the Users panel.

Permission to modify users, provided the AccessPerm function is also granted.

For backward compatibility, users with this permission also have the CreateUsers, ModifyUsers, and RemoveUsers permissions.

ModifyAdminUsers

Permission to modify admin users’ passwords.

ModifyAccessPermLEAccess

Permission to perform Bulk Creation in Data Segregation, provided the AccessPerm function is also granted.

ViewAccessPerm

Permission to view access permissions.

ModifyConfigData

Permission to modify task access configurations, provided the RunConfigWindow function is also granted.

ModifyUserTaskConfig

Permission to create, modify and delete task access configurations, provided the RunConfigWindow function is also granted.

RunConfigWindow

Permission to run “Task Access Configuration”.

[NOTE: To modify data, you also need the function ModifyConfigData]

ModifyMyUserDefaultsOnly

Permission to modify only a user’s own user defaults.

ModifyUserDefaults

Permission to modify user defaults.

ModifyUserDefaultsRateDecimals

Permission to modify the Rate Decimals field in the User Defaults profile. The ModifyUserDefaults permission in also required.

ModifyConfigData

Permission to configure defaults for the Task Station, provided the RunConfigWindow function is also granted.

RunConfigWindow

Permission to run “Task Station Defaults”.

[NOTE: To modify data, you also need the function ModifyConfigData]

CreateTradeWinClassConfig

Permission to create trade window configurations.

ModifyTradeWinClassConfig

Permission to modify trade window configurations.

RemoveTradeWinClassConfig

Permission to remove trade window configurations.

CreateAuthConfig

Permission to create authorization configurations.

ModifyAuthConfig

Permission to modify authorization configurations.

RemoveAuthConfig

Permission to remove authorization configurations.

ModifyConfigData

Permission to modify the Calypso Navigator configuration of any user, provided the function ModifyMainEntry is also granted.

ModifyMainEntry

Permission to modify the Calypso Navigator configuration of the user currently connected.

To modify the Calypso Navigator configuration of any user, the ModifyConfigData function also has to be granted.

FullUtilitiesMenu

Permission to run all utilities.

AdmServer

Permission to perform the tasks of the Monitoring menu. This is required in addition to the permissions below for each individual task.

AdmShowProfiler

Permission to run the profiler.

AdmSubscribeUnSubEvent

Controls the Subscribe and UnSubscribe buttons.

Permission to subscribe and unsubscribe to events for monitoring.

AdmArchiveCompletedTask

Permission to archive completed tasks.

AdmPurgeConsumedEvent

Permission to purge consumed events.

AdmArchivingArchive

Permission to archive data.

AdmArchivingRestore

Permission to restore archived data.

AdmArchivingDeletePermanently

Permission to delete data.

AdmArchivingDeleteFromArchive

Permission to delete archived data.

AdmCleanupDatabase

Permission to run “Clean-up Database”.

AdmPurgeProductTemplates

Permission to delete product templates. Note that you also need read-write access to individual product templates.

Archive Purge of OfficialPL Marks

Permission to archive / purge Official P&L Marks.

DBCleanup

Permission to:

AdmPurgeUnConsumedEvent

Permission to purge unconsumed events.

ViewUnconsumedEvent

Permission to display unconsumed events.

AdmCheckKickoff

Permission to check kickoff tasks.

AdmCheckTradeOpenQty

Permission to check the trade open quantity.

FullUtilitiesMenu

Permission to run all utilities.

HideUtilitiesMenu

Restriction to hide the Utilities menu.

[NOTE: This function is actually a restriction and not a permission. However, if a group is granted all functions, this restriction will not apply. It has to be specifically added]

By default, only Admin users can access and use Web Admin.

These functions apply to Admin users:

AdmLoginAttempts

Permission to delete / archive login audit trail.

AdmServer

Permission to perform various tasks in Web Admin.

ModifyEngineConfig

Permission to create, modify and delete engine configurations using the WebAdmin Engine Manager.

Non-Admin users can access Web Admin in read-only mode using the following function:

WebAdminAccess

Permission to access Web Admin in read-only mode for non-Admin users.

Please refer to Calypso Web Admin documentation for complete details.

Workflow Configuration

CreateTaskWorkflowConfig

Permission to create workflow configurations, provided the RunConfigWindow function is also granted.

ImportWorkFlow

Permission to import workflow configurations, provided the RunConfigWindow function is also granted.

ModifyDomains

Controls Domains > all menu items.

Permission to add and modify status codes, actions and rules.

ModifyTaskWorkflowConfig

Permission to modify workflow configurations, provided the RunConfigWindow function is also granted.

ModifyWorkflowConfig

Permission to modify workflow configurations, provided the RunConfigWindow function is also granted.

RemoveTaskWorkflowConfig

Permission to remove workflow configurations, provided the RunConfigWindow function is also granted.

RunConfigWindow

Permission to run “Workflow Configuration”.

ModifyALLProcessingOrgStaticData

ModifyOnlyProcessingOrgStaticData

UseProcessingOrgHierarchy

ViewOnlyProcessingOrgStaticData

Custom Rule Editor

The Custom Rule Editor window appears when you select "Custom Rule Definition" in the Workflow Configuration window or in the Workflow Configuration window.

AddCustomEditorWorkflowRule

Permission to save new custom workflow rules.

ModifyCustomEditorWorkflowRule

Permission to modify custom workflow rules.

RemoveCustomEditorWorkflowRule

Permission to remove custom workflow rules.

Kick-Off/Cut-Off

CreateKickOffCutOffConfig

Permission to create KickOff CutOff configurations.

ModifyKickOffCutOffConfig

Permission to modify KickOff CutOff configurations.

RemoveKickOffCutOffConfig

Permission to remove KickOff CutOff configurations.

ModifyOnlyProcessingOrgStaticData

UseProcessingOrgHierarchy

AddModifyTaskInternalReference

Permission to create and modify task internal reference configurations.

AddModifyTaskPriorityConfig

Permission to create and modify task priority configurations.

CreatePaymentSetup

Permission to create valid payment configurations.

RemovePaymentSetup

Permission to delete valid payment configurations.

ModifyPaymentSetup

Permission to modify valid payment configurations.

AuthorizePaymentSetup

Permission to authorize modifications to valid payment configurations.