Appendix 5. Access rights description

In this appendix, you can read about access rights that can be managed when editing roles in 1C:Enterprise. Access rights supported in mobile platform are marked with "*" symbol.

Access right	Description
Automation	Use the automation server.
Administration	Execute administrative actions with the entire infobase and edit the user list (configuration right). DataAdministration right is required. Set up connection parameters (for external data source). Display the list of licenses used when operating with the configuration and infobase in the About window. Remove data areas (including removing all areas at once). Execute background update of the database configuration on the client side. Specify security profile name in extension management dialog boxes. Receive more detailed information when viewing the event log. Manage database copies, database copy content, and update database copies.
DataAdministration	This right manages administrative actions with data. These operations include: View the following events from the event log: Authentication, Authentication error, (the Session group), Access, Access denied (the Access group), Confirmed, and Rejected (the OpenID provider group). Get event filter values without restrictions. To view the event log, the EventLog right is required. Set a time zone for an infobase (data area) by calling the SetInfoBaseTimeZone() method. Create initial image for a subordinate node of a distributed infobase by calling the CreateInitialImage() method. Update objects numbering by calling the RefreshObjectsNumbering() method. Execute methods of the StandardSettingsStorageManager object if non-current user settings are processed. Execute the GetInfoBaseRegistrationData/SetInfoBaseRegistrationData() methods. Manage error processing parameter settings for a non-current user.
ConfigurationExtensionsAdministration	Manage access to the extension administration interface (both interactive and programmatical) in 1C:Enterprise mode. Extension administration cannot be performed in safe mode.
ActiveUsers	View the list of active users.
InputByString*	Use input by string mode.
WebClient	Start the web client.
ExternalConnection	Open external connection.
Output*	Print, record, and copy to clipboard.
Execute	Execute a task.
Insert	Add an object (main).
EventLog	View the event log. The event log display completeness is controlled by the Administration and DataAdministration rights.
ExclusiveModeTerminationAtSessionStart	Close a session that sets the exclusive mode if this mode allows this action.
Update	Save an updated object (main).
SessionOSAuthenticationChange	Change OS authentication parameters for an external data source in user settings and session parameters.
UpdateDataHistory	Update data history (create a new version or delete the existing version).
UpdateDataHistoryOfMissingData	Update data history (create a new version or delete the existing version) for missing data. Missing data is removed data or data that is unavailable due to data access restrictions.
UpdateDataHistoryVersionComment	Update a comment to data version.
UpdateDataHistorySettings	Update data history settings.
StandardAuthenticationChange	Change saved standard authentication parameters (the Standard authentication, Username, and Password properties) of an external data source.
SessionStandardAuthenticationChange	Change standard authentication parameters (the Standard authentication, Username, and Password properties) of an external data source for the current session.
InteractiveActivate	Activate interactively.
InteractiveUndoPosting*	Cancel posting interactively.
InteractiveSetDeletionMark*	Mark for deletion interactively.
InteractiveSetDeletionMarkPredefinedData*	Mark predefined data for deletion interactively.
InteractiveExecute	Execute a task interactively.
InteractiveInsert*	Insert interactively.
InteractiveChangePosted*	Change a posted document interactively. If the right is not set, the user cannot remove, mark for deletion, repost, or unpost a posted document. The form of such document is opened in view mode.
InteractiveOpenExtDataProcessors	Open external data processors interactively.
InteractiveOpenExtDataReports	Open external reports interactively.
InteractivePosting*	Post documents interactively.
InteractivePostingRegular	Perform backdated posting of a document interactively (using standard form commands).
InteractiveClearDeletionMark*	Clear the deletion mark interactively.
InteractiveClearDeletionMarkPredefinedData*	Clear the deletion mark from predefined data interactively.
InteractiveDelete	Delete objects interactively.
InteractiveDeleteMarked	Delete marked objects interactively.
InteractiveDeleteMarkedPredefinedData*	Delete marked predefined data interactively.
InteractiveDeletePredefinedData	Delete predefined data interactively.
InteractiveStart	Start a business process interactively.
Use	Use a configuration object. Use an external data source function from 1C:Enterprise language and the query language.
AnalyticsSystemClient	Start 1C:Analytics client application from 1C:Enterprise client application interface.
ExclusiveMode	Use exclusive mode.
UpdateDataBaseConfiguration	Update a database configuration. To perform configuration update or background configuration update on the server, only this right is required, the Administration right is not required.
UndoPosting	Cancel document posting.
SwitchToDataHistoryVersion	Restore the state of versioned object attributes at the time that corresponds to the selected version. If this right is missing, the Switch to version command is unavailable in object changes history form.
Get	Get a value that is not stored in the database.
Posting	Post documents.
View*	View. In the Select type dialog box, types for which this right is not granted to the current user are unavailable. Use an external data source function in the list of data composition system fields.
ViewDataHistory	View data history interactively. If this right is missing, the Change history command of an object form and a list form is unavailable.
CollaborationSystemInfoBaseRegistration	Register an infobase in 1C:Dialog.
Edit*	Edit.
EditDataHistoryVersionComment	Change a data version comment interactively. If this right is missing, the user cannot edit a version comment in the data history version list.
MainWindowModeEmbeddedWorkplace	Start the main window of the client application in embedded workplace mode.
MainWindowModeKiosk	Start the main window of the client application in kiosk mode.
MainWindowModeNormal	Start the main window of the client application in normal mode.
MainWindowModeFullscreenWorkplace	Start the main window of the client application in full-screen workplace mode.
MainWindowModeWorkplace	Start the main window of the client application in workplace mode.
TechnicalSpecialistMode*	Control availability of the Functions for technician command and respective client application setting in the Service and settings menu (main menu).
SaveUserData	Enable/disable saving of user settings. If this right is disabled, then: The History button is unavailable. An attempt to access the history from 1C:Enterprise language throws an exception. Interactive recording operations are not recorded in the history. In 1C:Enterprise command bar, the command that calls the favorites list is unavailable. In the Get link and Go to link forms, the Add to favorites button is unavailable. If the user attempts to access the favorites, an exception is thrown from 1C:Enterprise language. Form setup is unavailable (the Change form command is missing). Commands to set up the sections panel, navigation panel, and home page are unavailable. In reports, commands to save user settings and report options are unavailable. A prompt to save the changes performed by a user in the current report option is not shown. Changes are not saved. The command for selecting report settings is available only if the report user settings storage is set for the report or configuration. Calling the SetCurrentUserSettings()method results in an exception. Commands to save and restore form data are unavailable (the Save parameters and Restore parameters commands). These forms are not saved automatically. Window settings (size and position) are saved only for the duration of the session. Settings of the main window panel size are saved only for the duration of the session. When the settings are saved programmatically, an exception is thrown. Client application settings are saved only for the duration of the session. The Allow debug mode on startup check box is not shown (for thin client and thick client). The Enable slow connection mode on startup check box is not displayed (for the web client). Period settings in the list are not saved. The Use this period setting upon opening check box is unavailable in the period settings dialog box.
Start	Start a business process.
ThickClient	Start the thick client.
ThinClient	Start the thin client.
Delete	Delete an object (main).
TotalsControl	Manage accounting register totals and accumulation register totals (set a period until which totals are calculated and recalculate totals).
Set	Set a value that is not saved to the database.
Read	Read object data from the infobase (main).
ReadDataHistory	Read data history records.
ReadDataHistoryOfMissingData	Read data history records for missing data. Missing data is removed data or data that is unavailable due to data access restrictions.