Is there a way to allow only one Security Group to see/update the SSN field? 

I know I can HIDE the SSN field, but then no one can see it. 

I know I can mask all but the last 4 digits, but even that is too much for our HR department to accept.

Thanks...

Ron Hanna:

Is there a way to allow only one Security Group to see/update the SSN field? 

I know I can HIDE the SSN field, but then no one can see it. 

I know I can mask all but the last 4 digits, but even that is too much for our HR department to accept.

Thanks...

Ron,

For that security group, under Personal Information/Options check the "Personal Information View" box.  All the security groups you don't want access to that information, of course, should not have the box checked.

From Help:

Personal Information Fully Visible Rights

When this checkbox is marked, the user can view personal information on records and in batch, but cannot add, remove, change, or output the information.

Records

Users can:

Batch

Users can:

Configuration

Users can view bank account numbes on a financial institution in Configuration.

(the "numbes" typo is Blackbaud's not mine )

Thanks for the info.

 What I'm trying to do is to not display the SSN field at all for most Groups.  Even the XXX-XX-1234 mask is not acceptable for our HR department.  I can hide the SSN field (Config \ Fields), but then no one can see it.

I'd like a way to either "X" out the whole SSN, or not display the SSN field at all; but be able to allow a particular Group to see the SSN.

You did say that about your HR department and I missed it...sorry.  I hadn't tested it fully.  Even if they have no Personal Information rights at all it is still dimmed with the last four digits visible.  As Mr. Spock would say:  "Most illogical"

I have a request from my boss to accomplish the same thing.  To eliminate the SSN from everyone's screen.  I would like the SSN on a set of core users only.  I would be willing to have the SSN in a place other then the typical SSN field if it would help to hide it more, but then can I hide it from other users then. 

 Also is there a users group that are comprised of Database Managers somewhere to ask questions like this?  I just started in the position here at MSU, Mankato, MN.  I was in IT previous to this position at HTC, so I am well versed in computers, but I have a little way to go in how to manage Raiser's Edge. 

Go to Admin/ Security/ pull up the group you do not want to see the SSN

highlight records

click options

towards the bottom you'll see miscellaneous constituent options

(Target, Income, Activity, etc..) Make sure Social Security number is NOT checked. This means the users in that group will not be able to see the SSN.

I suggest you go through all of your securty settings and if you do not already have one create a security group (or a few if you need them) for those who are allowed to see SSN (and credit card#s, bank info, etc.) and then restrict all other groups from seeing thse types of fields.  It may mean yuou need to rethink how your security groups are configured which may take some time but for now I would shut it off for all groups and then add the new groups as needed. 

If you need to you can log in as supervisor to get a SSN (I do not suggest doing daily work in supervisor mode - give yourself a DBA security group)

Has anyone else noticed that you can hide the SSN field from the Bio 1 tab of the individual record, but that it is visible, in its entirety in the General 2 tab of the individual relationship from an organization record?  Maybe a better way to say this is that if you are in an organization record and you open an individual relationshi record, on the General 2 tab the SSN is listed.

 We have hidden the SSN field here, but it still shows on that General 2 tab.  Has anyone else been able to hide it fully?