In Version 8, every permission is either campus-scoped or account-wide. This article lists which is which, so you know before you start whether a campus override can change a given permission.
The rule is short: a campus override can change a campus-scoped permission only. Account-wide permissions apply everywhere, and an override cannot take them away.
Warning: This matters most for texting and email. Full SMS, Limited SMS, Full Email and Limited Email are account-wide. If someone can send email or text messages, they can send to anyone they can see, and a campus override will not stop them.
You will see this difference in the product. Open a user or role at Settings & Tools (Cog icon in the tool-bar) > Your Organization > Security, then open Permissions For. Account-wide permissions appear only on Default. When you add a campus override, they are hidden, and saving the override will not grant them at that campus.
To learn how campuses, organizations and overrides fit together, see Campuses and organizations in Version 8.
Campus-scoped permissions (56)
These 56 permissions can be different at one campus through a campus override.
People - Create People, Limited Read People, Limited Write People, Full Write People, Profile Deactivate, Profile Activate, Full Read Connections, Full Write Connections, Read Safeguards, Write Safeguards, Read Background Checks, Write Background Checks, Read Files, Write Files, Read Notes, Write Notes, People Mass Change, Permissions Limited
Groups - Create Groups, Full Read Groups, Limited Write Groups, Full Write Groups, Full Read Discussions, Full Write Discussions
Events - Full Read Events, Full Write Events, Check-In, Full Read Facilities, Full Write Facilities
Communication - Full Read Chat, Full Write Chat
Automation - Full Read Workflows, Full Write Workflows, Full Write Promotions
Forms - Full Read Forms, Limited Write Forms, Full Write Forms
Sermons - Full Write Sermons
Service Planning - Full Read Service Plans, Full Write Service Plans
Financial - Limited Read Contributions, Full Read Contributions, Limited Write Contributions, Full Write Contributions, Charge Payment Methods, Remote Deposit, Can Refund, Permissions Full, Unrestricted Batches, Full Read Pledges, Full Write Pledges, Full Read Accounting, Full Write Accounting
Reporting - Full Read Metrics, Limited Write Metrics, Full Write Metrics
Account-wide permissions (43)
These 43 permissions apply at every campus. They cannot be overridden by campus, and they show only on Default.
Account Settings - Limited Account, Full Account, Locations, Change Logs, Schedule Trainings
People - People Settings, Connections Settings
Groups - Group Settings
Events - Facilities Settings
Communication - Chat Safety Reviewer, Limited Email, Full Email, Full Read Email Logs, Push Notifications, Limited SMS, Full SMS, Full Read SMS Logs
Forms - Form Settings, Accept Payment
Sermons - Sermons Settings
Service Planning - Full Read Songs, Full Write Songs
Financial - Contributions Settings, Link Bank Accounts, Accounting Settings, Bank Reconciliations, Close Accounting Periods
Reporting - Create Dashboards, Share Dashboards, Full Write Dashboards, Assign To-Do Items, Metrics Settings, Reporting, Read AI Assistant, Write AI Assistant, Limited Report Scheduler, Full Report Scheduler
Other - Read Document Library, Write Document Library, API, Integrations, Import, Full Write App
Two permissions that also need accounting at every campus
Bank Reconciliations and Close Accounting Periods are account-wide, but holding the permission is not quite enough on its own. Both also need accounting access at every active campus, or at every campus of that organization when your books are split by organization.
If multi-campus is off and the person has no organization limit, the permission plus accounting access is all they need.
Both are new in Version 8
Neither permission existed before Version 8. When your account upgraded, they were granted once:
Bank Reconciliations went to everyone who held Full Read Accounting or Full Write Accounting.
Close Accounting Periods went to everyone who held Full Write Accounting.
That grant runs only once. If you take either permission away from someone afterward, it stays away.
No permission was renamed, removed or split
Version 8 added the two accounting permissions above and nothing else changed. Every other permission kept its name and its meaning, so a role you built before the upgrade still does what it did. What is new is where a permission applies, not what it is called.