You will need the Permissions Limited permission to set a user's restrictions. You need it at one or more of that person's campuses.
Permissions decide what a user can do. Restrictions narrow that further, to certain types of records. For example, a user may be able to read person notes, but with a note type restriction they only see notes of the types you allow.
The restrictions
There are eleven restrictions:
Restriction | What it narrows |
Note types | Person notes |
File categories | Files |
Group types | Groups |
Group categories | Groups, but only when a group type restriction is also switched on |
Connection types | Connections |
Form categories | Forms and their entries. A form with no category always passes. |
Safeguard types | Safeguards |
Service types | Service plans |
Calendars | Events |
Merchant accounts | The merchant accounts the user can work with |
Giving portals | The giving portals the user can work with |
Setting a restriction
Open the user's permissions (see How do I set permissions on a user?). Each restriction sits under the permission it narrows. For example, Allowed note types sits under the notes permissions.
Leave it on No Restriction to allow every type.
Or select the types the user may work with. Once a restriction is switched on, it needs at least one value.
Different restrictions at different campuses
Restrictions can be set on Default and on each campus override, so the same user can have different allowed values at different campuses. An override's restrictions apply only at its own campus. What is a campus override? explains overrides in full.
An example. Default limits calendars to Sunday Services. An override at Lakeside has no calendar restriction. The user can use every calendar for events at Lakeside, only Sunday Services for events at North Hills, and every calendar for events available to All.
Viewing and editing a record
When a record sits at several campuses you can reach, a restriction applies only if it is switched on at every one of those campuses where you hold the matching read permission. When it is, the types allowed at each campus add up.
Deleting a record
Deleting is stricter. The record has to pass the restriction at each of its campuses on its own. Editing uses the combined list instead. Who can create, edit and delete a record? covers the other rules for deleting.
Users with several roles
Roles combine the same way. A restriction applies only if every role holding its read permission switches it on, and the allowed types add up.