I believe that I read somewhere that you can have a constituents SSN viewable for only certain user's.  I have tried to uncheck the box under the "Field" for the SSN number but that seems to take it off of the Bio 1 tab for all users.  We are in a position that this needs to happen now that we have this information for some our constituents.  I would greatly appreciate if anyone can help me.

Thanks,

Staci

Hey Staci,

You can restrict users ability to see SSN by editing their personal information security rights.

To assign personal information security rights:

1. In Administration, click Security
2. Open the appropriate security group
3. In the Group Privileges frame, mark Personal Information Security
4. Click Options
5. On the Security Options screen, mark the appropriate checkboxes:
   • Personal Information Data Entry: A user can add, delete, or change personal information but can only view the last four digits.
   • Personal Information Output: A user can output personal information but cannot add, remove, change, or view it on records or in Batch
   • Personal Information View: A user can view personal information on records and in Batch but cannot add, remove, change, or output the information
   • Credit Card Report: This option allows credit card numbers to be printed on the report. If the option is not marked, the credit card numbers are masked.
6. Click OK
7. Save and close the security group

I found these steps in the KB solution BB307010. Hope this helps!

Douglas,

Your solution protects SS#s from appearing on individual stations, but how safe is the personal information on the servers?  If someone breached our server security, could they see the SS#s and other personal information?

Doug Zack

Director of Advancement

Hey Doug,

The user security settings are the same on the server as they are on a workstation.  A user with a user name that does not have rights to view credit card or social security information will not be able to view that information no matter which machine they are logging in to.  On the backend of the database, this information is encrypted to further protect the data.