Sometimes one record needs protecting even though everyone involved has every right to be working in that module: a sensitive donor, a personnel matter, a grant that is not public yet. Record-level permissions handle that single record without changing anybody's account.

Any record in Argenta can be locked or set to view only, and every record workspace has a Record Permissions page where you name the people the restriction should not apply to.

The two settings

• Set As View Only. People can open the record and read it, but cannot change it in any way.
• Lock This Record. People cannot view or update it at all.

Either way, three groups keep full access:

• The person who created the record.
• Master admins.
• Anyone given specific permission on that record's Record Permissions page.

Protect a record

1. Open the record and stay on its details page.
2. Near the top you will find Set As View Only and Lock This Record. They are switches, so one click is enough.
3. Save the record.

A locked record shows a lock icon beside it in lists, so your team can see at a glance that it is protected. Trying to delete a locked record straight from a list is refused, with a message telling you to open the record and delete it from inside the workspace instead.

Grant access to a locked record

1. Open the record and go to its Record Permissions page.
2. Find the Locked Record Access section on the right.
3. Start typing the user's name in the Add User box and choose them from the list.
4. Click Add. They appear in the list below and can now open the record.

Grant access to a view-only record

1. Open the record and go to its Record Permissions page.
2. Find the View Only Access section on the left.
3. Start typing the user's name in the Add User box and choose them from the list.
4. Click Add. That person can now modify the record.

Remove someone's access

In either section, click the remove icon next to the person's name in the list. That works the same way for locked records and view-only records.

When to use something else

Record-level permissions are for exceptions, one record at a time. If somebody should be restricted across the board, that belongs on their user record instead, where you can make them view-only everywhere or limit them to particular chapters, divisions, departments, or precincts. See What are User Roles and Permissions in Argenta?