Security Permissions Reference

Updated at Mar 31, 2025
By Kali Patrick

Table of Contents

Appointments Chat Chat History Credentials (Customer) Organizations Customer Purchase Parts Orders Pending Orders POS Purchase Orders Registers Stock Takes Documentation Google Cloud Printers Invoices Contracts Estimates Payments Recurring Invoices (Mailboxes & Mailings) Leads Marketr Snail Mail SNMP Products Line Item Logistics Warranties Vendors RMM Alerts Assets Network Discovery Patching Dashboard Policies Reports Scripts API Tokens Script Categories Tags Contact/End User Tags (Customer) Organization Tags Ticket Tags Tickets Automated Remediation Recurring Tickets Ticket Attachments Ticket Canned Responses Ticket Comments Ticket Custom Fields Ticket Parent-Child Ticket SLA Ticket Timers Ticket Views Ticket Workflows Ticket Worksheets Timelogs

Various areas of Syncro are controlled by what Syncro Users have permissions for; this includes what they can see and what actions they can perform. Permissions are defined for Syncro Users as part of their belonging to a Security Group.

Security Groups are available under Admin > Syncro Administration - Security Groups. Whenever you click +New Group or Edit on an existing group, Syncro presents you with a list of security permissions.

This document describes what each security permission does. (It assumes the Access Type is All Customers.)

Appointments

View All (See-Own Never Restricted): When checked, Syncro Users have access to all calendars. (If unchecked, they will only see their own calendar.)

Chat

Module Enabled: When checked, Syncro Users can see and access the Chats tab/module.
Pick Up Unassigned Chats: When checked, Syncro Users can select/work any unassigned chats.
Reassign: When checked, Syncro Users can reassign any chat that's already assigned to another Syncro User. (This may be a Tech that works dispatch, or an Admin, for example.)
Show All Chats: When checked, Syncro Users can view all chats in the Syncro account.
Start New: When checked, Syncro Users can start a chat with a Contact/End User.
Take Over Assigned Chats: When checked, Syncro Users can reassign a chat to themselves. (This can be useful if a Tech is out of the office or if an issue needs to be escalated.)

Chat History

Mine Only: When checked, Syncro Users can view chat history only for chats they were originally assigned.
View All: When checked, Syncro Users can view all chat history in the Syncro account.

Credentials

Delete: When checked, Syncro Users can delete credentials for (Customer) Organizations and Contacts/End Users.
Edit: When checked, Syncro Users can edit/update Organization/End User credentials.
New: When checked, Syncro Users can add Organization/End User credentials.
View: When checked, Syncro Users can see all Organization/End User credentials.

(Customer) Organizations

Archive: When checked, Syncro Users can archive a (Customer) Organization.
Create: When checked, Syncro Users can create a new Organization.
Delete: When checked, Syncro Users can delete a Organization.
Disable Scripting: When checked, Syncro Users can disable all scripting on Assets associated with the Organization.
Edit: When checked, Syncro Users can edit the Organization's profile details.
Edit Block Hours: When checked, Syncro Users can edit block/prepay hours.
List/Search: When checked, Syncro Users can see a list of all Organizations in the Syncro account.
Manually Run Scripts When Disabled: When checked, Syncro Users can override and run scripts against Organization assets when “Disable Scripting” is enabled.
Merge Customer: When checked, Syncro Users can merge Organizations.
Remote Access Enable: When checked, Syncro Users can turn on remote access for Organizations and End Users. (This comes with a charge.)
View Detail: When checked, Syncro Users can view the Organization's Details page.
View Total Invoiced: When checked, Syncro Users can view the total Invoice amounts due from Organizations.

Customer Purchase

Add Manual Product: When checked, Syncro Users can add a manually created inventory item to a purchase.
Create: When checked, Syncro Users can create a Customer Purchase order.
Override Retail: When checked, Syncro Users can override the default retail price of an serialized item received by a Customer Purchase.
Undo Payment: When checked, Syncro Users can undo payment on a Customer Purchase.

Parts Orders

List/Search: When checked, Syncro Users can access to the Parts module overview page, as well as view and search the list of part orders.
View: When checked, Syncro Users can view individual part orders.

Pending Orders

View All: When checked, Syncro Users can access to the pending orders page in the Products and Services module.

POS

Allow Usage:: When checked, Syncro Users can access to the POS Module.

Purchase Orders

Delete: When checked, Syncro Users can delete a Purchase Order.
Edit: When checked, Syncro Users can edit an existing Purchase Order.
List/Search: When checked, Syncro Users can access the Purchase Order overview page in the Products and Services module, as well as view and search the list of Purchase Orders.
View Details: When checked, Syncro Users can access individual purchase order details.

Registers

Delete Adjustments: When checked, Syncro Users can delete adjustments.
List Adjustments: When checked, Syncro Users can view the registers list of drawer adjustments.
New Adjustment: When checked, Syncro Users can create a new drawer adjustment for a Register.
Open/Close: When checked, Syncro Users can open and close the register.

Stock Takes

Access: When checked, Syncro Users can access the Stock Take feature for inventory tracking and reconciliation.
Allow Manual Entry: When checked, Syncro Users can manually adjust stock quantities during stock take.
Lists: When checked, Syncro Users can view a list of stock takes.
Reconcile: When checked, Syncro Users can reconcile discrepancies identified during stock takes.

Documentation

Allow Usage: When checked, Syncro Users can view and use existing documentation.
Create: When checked, Syncro Users can add new documentation.
Delete: When checked, Syncro Users can delete documentation.
Edit: When checked, Syncro Users can edit existing documentation.

Google Cloud Printers

Edit: When checked, Syncro Users can configure or manage Google Cloud Printer settings.

Invoices

Change Assignee: When checked, Syncro Users can change the assigned Contact/End User for the invoice.
Create: When checked, Syncro Users can create new invoices.
Delete: When checked, Syncro Users can delete invoices.
Edit: When checked, Syncro Users can modify existing invoices.
List/Search: When checked, Syncro Users can search and view the list of invoices.
Refund: When checked, Syncro Users can process refunds linked to invoices.
View Details: When checked, Syncro Users can view invoice details.

Contracts

Delete: When checked, Syncro Users can delete contracts.
Edit: When checked, Syncro Users can modify existing contracts.
List/Search: When checked, Syncro Users can search and view the list of contracts.

Estimates

Create: When checked, Syncro Users can create new estimates.
Delete: When checked, Syncro Users can delete estimates.
Edit: When checked, Syncro Users can edit existing estimates.
List/Search: When checked, Syncro Users can search and view the list of estimates.
View Details: When checked, Syncro Users can view estimate details.

Payments

Clear (Un-Apply): When checked, Syncro Users can to remove payments from invoices.
Create: When checked, Syncro Users can create new payments.
Delete: When checked, Syncro Users can delete payment records.
Edit: When checked, Syncro Users can modify existing payment records.
Refund: When checked, Syncro Users can process refunds.
Verify: When checked, Syncro Users can verify payments.
View List: When checked, Syncro Users can view the list of payments.
Void: When checked, Syncro Users can void payments.

Recurring Invoices

Delete: When checked, Syncro Users can delete recurring invoices.
Edit: When checked, Syncro Users can edit recurring invoice templates.
List: When checked, Syncro Users can view the list of recurring invoices.
New: When checked, Syncro Users can create new recurring invoices.

(Mailboxes & Mailings)

Leads

Delete: When checked, allows deletion of leads.
List/Search: When checked, permits viewing and searching for leads.

Marketr

Edit Campaigns: When checked, Syncro Users can edit campaigns in the Mailer module.
View Campaigns: When checked, Syncro Users can view campaigns in the Mailer module.

Snail Mail

Send ($): When checked, Syncro Users can send snail mail (with associated costs).

SNMP

Generate OID Recipe Links: When checked, Syncro Users can generate Public OID recipe links.
Import Public OID Recipe Links: When checked, Syncro Users can import OID Recipes using a public link.

Products

Create: When checked, Syncro Users can create new Products and Services.
Edit: When checked, Syncro Users can modify existing Products and Services.
Edit Quantities: When checked, Syncro Users can adjust product inventory quantities (Non-Serial Only).
List/Search: When checked, Syncro Users can view and search in the Products and Services module.
Manage Upsell Opportunity Items: When checked, Syncro Users can manage upsell-related items.
View Cost: When checked, Syncro Users can view cost details of products.

Line Item

Add Manual Item for Invoices/Estimates: When checked, Syncro Users can add manual line items to invoices or estimates.
Apply Discount: When checked, Syncro Users can apply discounts to line items.
Edit Prices: When checked, Syncro Users can make price adjustments on line items.
View Cost: When checked, Syncro Users can view the cost details of line items.

Logistics

Delete (Big Chains): When checked, Syncro Users can delete logistics records for large chains.
List/Search (Big Chains): When checked, Syncro Users can search and view the list of logistics records for big chains.
View/Modify (Big Chains): When checked, Syncro Users can view and modify logistics details for big chains.

Warranties

List: When checked, Syncro Users can view a list of warranties.
View Details: When checked, Syncro Users can view detailed warranty information.

Vendors

Delete: When checked, Syncro Users can delete vendors.
Edit: When checked, Syncro Users can modify existing vendor information.
List: When checked, Syncro Users can view the list of vendors in the Products and Services module.
New: When checked, Syncro Users can create a new vendor.
View Details: When checked, Syncro Users can view detailed vendor information.

RMM

Alerts

Clear/Manage: When checked, Syncro Users can manage and clear alerts. (Clearing alerts allows the alert to fire again as necessary; Syncro will retain the original record for historical tracking.)
Create: When checked, Syncro Users can generate RMM alerts that were specified from a script executed from in the script library.
Delete: When checked, Syncro Users can delete RMM alert records. (Deleting alerts allows the alert to fire again as necessary; the alert will generate as a new record and will no longer be associated with the original record.)
List: When checked, Syncro Users can view the entire open and muted alerts list in the Assets & RMM module.

Assets

Allow Backgrounding Tools: When checked, Syncro Users can use utilize the background feature across assets. This feature provides remote-in and silent functionality across all endpoints.
Allow Installation of Rejected Patches: When checked, Syncro Users can manually install rejected patches in the Windows Patches subtab on the Asset's Details page. These rejects are specified in the windows update policies that are assigned to the endpoint. This requires the permission “Install Windows Patches Manually” to work properly.
Allow Remote Access: When checked, Syncro Users can click the Remote Access button on assets to initiate a remote session with Syncro's built-in Splashtop feature. However, the steamer will only initiate properly if enabled at the assets assigned policy.
Assets Pending Approval: When checked, Syncro Users can approve assets during their first check-in, after the installation of Syncro's monitoring agent. For Global Admins the Asset Approval setting for the account is managed in Admin > RMM Settings - Preferences.
Broadcast Message: When checked, Syncro Users can make a pop-up message appear directly on End Users' devices. This function is performed from the Asset's Details Page, or bulk queued across a number of endpoints from the Actions button menu in the Assets & RMM module.
Bulk Script Execute: When checked, Syncro Users can bulk action execute scripts across the assets specified in a Saved Asset Search or from the Assets & RMM module. This requires the permissions “Assets - List/Search" and "Scripts - Execute” to work properly.
Create: When checked, Syncro Users can create manual assets.
Delete: When checked, Syncro Users can delete manually created assets as well as Syncro-managed endpoints.
Edit: When checked, Syncro Users can edit asset details, which include the assigned (Customer) Organization, friendly name, custom fields, etc.
Edit Policy ($): When checked, Syncro Users can edit the policy tree at the (Customer) Organization level. For the full list of policy permissions, see also Policies further down on the Security Group page.
Install Windows Patches Manually: When checked, Syncro Users can manually queue and execute updates from an Asset's Windows Patches subtab. (If this security group provides permissions for the “Vulnerable Systems” and “Missing Patches by KB” reports, they will also be able to bulk queue installs from those tables.)
List/Search: When checked, Syncro Users can search and view the list of Assets.
Reboot: When checked, Syncro Users can queue a forceful reboot on Syncro-managed endpoints.
View Details: When checked, Syncro Users can view each Asset's Details page.
View Thumbnail: When checked, Syncro Users can see a snapshot image of the desktop from that Asset's Details page. This image updates every 1-5 minutes. (For this to work properly, a Global Admin must ensure the Thumbnail image setting is not disabled in Admin > RMM Settings - Preferences.
Wake On Lan: When checked, Syncro Users can wake up assets that are asleep or powered off entirely through Wake On Lan from the Asset's Details Page.

Network Discovery

View: When checked, Syncro Users can view network discovery profiles. If not enabled, the Syncro User cannot use the Network Discovery feature. Syncro Users with this permission can also view the devices discovered with those profiles.
Create: When checked, Syncro Users can create network discovery profiles (i.e. it enables the +New Profile button).
Edit: When checked, Syncro Users can modify existing network discovery profiles. If not enabled, the Syncro User will not see edit options.
Delete: When checked, Syncro Users can delete existing network discovery profiles. If not enabled, the Syncro User will not see deletion options.
Run: Syncro Users with the “Create” permission are automatically allowed to run a discovery. Syncro Users with Run (but not Create) permission can run discoveries for existing profiles but can't create new ones. If the Syncro user has neither Run nor Create permissions, the “Run” and "Save and Run" buttons are disabled.

Patching Dashboard

Note: The Windows Patching Dashboard also requires that a Syncro User has the “Assets: List/Search” permission. To be able to take actions on rows in the Patch Instances table, the following permissions may also be required:

Assets: Allow Installation of Rejected Patches
Assets: Reboot
Assets: Install Windows Patches Manually

View: When checked, Syncro Users can access the Windows Patching Dashboard by URL and via the tab in the primary navigation bar.

Policies

Delete: When checked, Syncro Users can delete policies. (The “List” permission must also be enabled for this to work properly.)
Edit ($): When checked, Syncro Users can modify policies from the Policies Module.
Edit Attended/Unattended: When checked, Syncro Users can edit the Syncro Remote Access setting called “Require Client Permission For Remote Access” in Policies. (If this Syncro User is assigned to only “Edit ($),” this is the only setting they are unable to make changes to unless “Edit Attended/Unattended” is also enabled.)
List: When checked, Syncro Users can view the entire policy list in the Policies module.
New: When checked, Syncro Users can create and configure new policies.

Reports

View: When checked, Syncro Users can view Reports.
(Toggle Granular Reports List): Click this link to open the list of available reports. Then check each box next to the report you want the Syncro User to have access to. (Global Admins must also ensure that the Reports module is enabled in the Tabs Customization so that non-Global Admin can navigate to the Reports module.)

Scripts

Delete: When checked, Syncro Users can delete a script record. (The “List” permission also needs to be enabled for this to work properly.)
Edit: When checked, Syncro Users can modify existing scripts.
Execute: When checked, Syncro Users can execute scripts from the library across your asset fleet.
Favorite: When checked, Syncro Users can mark commonly-used scripts as favorites. This sorts the scripts at the top of searches for quick selection.
List: When checked, Syncro Users can access to the Scripts module, where they can view all the available scripts in your library.
New: When checked, Syncro Users can create and add new scripts to your library.

API Tokens

Manage: When checked, Syncro Users can generate API tokens that can be used for third party apps, or to GET/PUT information through the API. (We recommend only enabling for power users, since nearly all available permissions are enabled.)

Script Categories

Delete: When checked, Syncro Users can delete existing script categories from the library in the Scripts module.
Edit: When checked, Syncro Users can modify existing script categories.
List: When checked, Syncro Users can view the entire list of categories that is used for quick searches and easy sorting.
New: When checked, Syncro Users can add new script categories in the Scripts module.

Tickets

Create: When checked, Syncro Users can create new tickets.
Delete: When checked, Syncro Users can delete existing tickets.
Edit: When checked, Syncro Users can edit existing ticket content, change ticket status, assign users, split tickets, add line items, and perform other ticket modifications.
List/Search: When checked, Syncro Users can view the tickets page and look for tickets in the search bar
Merge: When checked, Syncro Users can merge two tickets into one.
Use Ticket Charges: When checked, Syncro Users can view and add new ticket charges.
View ‘Their Ticket’ Details (Assigned to Them): When checked, Syncro Users can only view the content of tickets assigned to them.
View Details: When checked, Syncro Users can view the content of any ticket, including status, assignee, comments, and other information contained in the ticket.

Automated Remediation

Create: When checked, Syncro Users can create new automated remediation rules.
Delete: When checked, Syncro Users can delete existing automated remediation rules.
Edit: When checked, Syncro Users can modify existing automated remediations.
List: When checked, Syncro Users can view and search the list of automated remediations.

Recurring Tickets

Create: When checked, Syncro Users can create new recurring ticket schedules.
Delete: When checked, Syncro Users can delete recurring ticket schedules.
Edit: When checked, Syncro Users can modify existing recurring ticket schedules.
List: When checked, Syncro Users can view and search the list of recurring tickets.

Ticket Attachments

View: When checked, Syncro Users can view files and attachments associated with tickets.

Ticket Canned Responses

Manage: Check this box to display the “Modify” button for techs in the Insert Canned Response pop-up window. This allows them to view and modify your list of Canned Responses.

Ticket Comments

Note: Ticket comments are also referred to as Ticket Communications.

Delete: When checked, Syncro Users can delete any comment on a ticket.
Delete ‘Their Comments’ (They Created): When checked, Syncro Users can delete any comments they created on a ticket.
New: When checked, Syncro Users can write comments and edit their comments on a ticket.

Ticket Custom Fields

Manage: When checked, Syncro Users can create, modify, and delete custom fields on tickets.

Ticket Parent-Child

Edit: When checked, Syncro Users can create parent-child associations between tickets and unlink existing associations.

Ticket SLA

Edit: When checked, Syncro Users can change the Ticket's associated SLA.

Ticket Timers

Add For Another Technician: When checked, Syncro Users can input a ticket timer entry on behalf of another technician.
Overview: When checked, Syncro Users can view ticket timers and start, update, delete, and charge for a ticket timer entry.
Toggle Time Entry Billable State: When checked, Syncro Users can charge (Customer) Organizations for ticket timer entries.

Ticket Views

With the appropriate security permissions, you can control which Ticket Views are displayed (and specify the order they're shown) in the Tickets Views dropdown menu, and even restrict your team's ability to create new Ticket Views.

Create: When checked, Syncro Users can create new Ticket Views.
Edit: When checked, Syncro Users can edit existing “Public” Ticket Views and their own “Private” Ticket Views.
Delete: When checked, Syncro Users can delete existing “Public” Ticket Views and their own “Private” Ticket Views.
Manage Team Views: (Available on the Syncro Team Plan only.)

Allows a Syncro User to manage the “Ticket Views” of other Users in the account, including for those who don't have Create permissions. For example, a best practice for MSPs who have technicians who work on specific types of Tickets is to not give those technicians Create, Edit, or Delete Ticket View permissions, then set up a Ticket View to isolate the tickets they should work on, make that view the default, and possibly make it the only view available.

Syncro Users with this permission setting can also control Pinned Views and the Sort Order.

My Sort: When checked, Syncro Users can change the sort order of their “Ticket Views” dropdown menu.
Pin: When checked, Syncro Users can choose if a Ticket View is displayed in their "Ticket Views" dropdown menu.

Ticket Workflows

Manage: When checked, Syncro Users can create, modify, and delete ticket workflows.

Ticket Worksheets

Add: When checked, Syncro Users can add new worksheets to tickets.
Add Ad-Hoc: When checked, Syncro Users can create and attach ad-hoc worksheets directly to tickets.
Delete: When checked, Syncro Users can delete worksheets from tickets.
Edit Ad-Hoc: When checked, Syncro Users can modify ad-hoc worksheets attached to tickets.
Manage: When checked, Syncro Users can manage all aspects of ticket worksheets, including configuration and assignment.

Timelogs

Manage: When checked, Syncro Users can create, modify, and delete Timelogs.