Security Groups in CRM

Modified on: Wed, 19 Nov, 2025 at 5:42 PM

Question(s)

How can I change security access in CRM (fka Luxor)?
What does each security group control?
How can I give a user access to the Auditing or Deduplication tools?
How can I get access to the Email Templates tool for Mail Merges (mass emails)?
Unable to access the Marketing Module.
“You do not have permission to view this content” message when viewing an Invoice, Expense, Payment on a job.

Overview

Restoration CRM™ (fka Luxor CRM) uses security groups to control access to specific system features, such as Auditing, Deduplication, and Email Templates. Administrators manage these permissions by assigning users to the appropriate security groups.

Assigning Security Groups

There are two ways that you can assign a Security Group to a user in your CRM environment:

Profile level (single user)
1. Navigate to Admin > User Management.
2. Select the specific user profile.
3. Scroll to the Security Group section.
4. Select the desired group(s) in the Available Security Groups column.
5. Move the selection to the User's Security Groups column.
6. Select Save.
Security Group manager (updating for multiple users at once)
1. Navigate to Admin > Security Group Management.
2. Select a specific Security Group from the list.
3. Review the list of assigned users.
4. Add or remove users to grant or revoke access to the features controlled by that group.

Security Group definitions

Accounting Manager: Allows users to view Invoice, Expense, and Payment records associated with a job. See Payroll Manager security for access to Employee Cost records.
Admin: Grants the highest level of system permission, providing access to all features. In cases where access is restricted, an Admin can use the Security Group Manager to grant themselves or others the required permissions.
Audit Manager: Grants users access to the specialized audit views within each module, labeled (Admin) To Be Audited (Priority). Note: This group does not automatically grant permission to modify the Audit field used to mark a record as audited. To allow users to mark records as audited, ensure that the security group selection for each module’s Admin tab includes Audit Manager.
Custom Security Groups: Controls access to tabs in each of the various CRM modules. This allows clients to create tabs that hold key sets of information and restrict visibility of and access to these tabs.
Deduplication Manager: Grants access to the Tools menu's Deduplicate Contacts and Deduplicate Organizations features, allowing users to merge contacts. This permission is typically assigned to auditors.
Email Template Editor: Grants users the feature (within Settings) that allows them to create email templates to be used in mail merges. (legacy - outdated)
Expense Manager: Grants users the ability to mark which expenses on Expense reports have been paid.
File Manager: Turned off at present
Followups Manager: This security group historically indicated which users received Followup notification emails. Note: This notification system is currently deactivated for Restoration clients, who now use the Contact Association Alerts Restoration Alert instead, as it provides superior functionality.
Incentive Manager: Turned off at present
Luxor Support Manager: Turned off at present
Marketing Full: Grants users the ability to send emails, create marketing campaigns, and automations.
Marketing Creator: Grants users access to create email templates.
Marketing Partial: Grants users access to send emails.
Salesperson: Designates which users are included in the business development section of the automated weekly Management Report.
Organization Type Manager: Turned off at present
Payroll Manager: Allows users to view Employee Cost records associated with a job. This group also grants access to the Admin area for viewing and accessing the QuickBooks-only integration function.
Print Template Manager: Turned off at present.
Report Manager: Grants ability to share reports with other CRM users. Additionally, this security allows users to delete views shared with them by others.
Sales Manager: Allows users to be selected as recipients for the automated Management Report within the Management Report Settings. Users without this security group will not appear in the "Employees who will receive the email" section.
System Manager: Provides access similar to an Admin, with the following key restrictions: Users cannot adjust security groups for themselves or other users. Users do not have access to the specific features and information controlled by the Accounting Manager or Payroll Manager security groups.
Time Tracker: Turned off at present.
Tracking Group Alteration: Grants users the ability to change the tracking group of a job after it has been created and saved.
Tracking Group Alteration To Support: Turned off at present for restoration clients.
User: Turned off at present.
User Creator: Grants access to the Admin > User Management section, where they can see and access the User Management functions only. Note: This group does not allow the user to assign Security Groups. Note: company utilizes the DASH™ integration/Employee Sync, this security group is not required, as users are created in DASH and synced to CRM.
Views Manager: Grants users' permission to share the views that they build with other users. Also allows users to delete views shared with them by others.

Questions? Contact Us

This article is meant to serve as a reference only and is not a substitute for training. If you are interested, feel free to check out our weekly Q&A sessions hosted by our CRM experts.