ACCESS PERMISSIONS

V ER SI ON 1 4 .0 S P 2
January 2014 - Third Edition

1. A CCE S S P E RM I S S I ONS

This page describes access permission requirements by application. Each application may require access permission
functions as well as access to individual data.
Functions are specified in the Group Access panel under Access > Functions.
Access to individual data is specified in the Group Access panel under Access > data type. For certain data
types, additional settings are required in the Book Access panel, and Product Access panel.

For details on enabling and setting access permissions, see the Calypso Security User Guide.

For details on enabling and setting access permissions , refer to the Calypso Security User Guide.

[NOTE: Access permission functions are defined in the "function" domain, and restrictions are defined in the
"restriction" domain]

Revision Date Comment

July 2013 First edition for version 14.0.
December 2013 Second edition - Updates for version 14.0 SP2.
January 2014 Third edition - Added missing access permissions.

Contents
- Accounting
- Calypso Navigator
- Market Data
- Messages & Matching
- Processing
- Products
- Reference Data
- Reporting & Risk
- Scheduled Tasks
- Settlements
- System
- Trading
- Trade Lifecycle
- User Access Control
- Utilities
- Web Admin
- Workflow
- Deprecated Access Permissions

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Calypso is a registered trademark of Calypso Technology, Inc. The Calypso logo is a trademark of Calypso Technology, Inc. All other
trademarks and servicemarks are the property of their respective holders.
2 Access Permissions

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 3

2. A CCE S S P E RM I S S I ONS

The applications are identified based on their menu access from the Calypso Navigator.
2.1 A CCOUNTING
Configuration > Accounting
Applications Functions
Accounts AddModifyAccountExternalName
Permission to add and modify account names in the Account External Name
Window.

AddModifyAccountStatement
Permission to add and modify account statements in the Statements panel.

CreateAccount
Permission to create accounts, provided one of the following functions is
also granted to create the corresponding type of account:
- CreateAccountCLOSING
- CreateAccountLINK
- CreateAccountNORMAL
- CreateAccountSETTLE
- CreateAccountSTOCK
- CreateCallAccount
Example - To create an account of type CLOSING, you need CreateAccount and
CreateAccountCLOSING.

CreateAccountCLOSING, CreateAccountLINK,
CreateAccountNORMAL, CreateAccountSETTLE,
CreateAccountSTOCK
Permission to create accounts of corresponding type (CLOSING, LINK,
NORMAL, SETTLE, or STOCK) provided the CreateAccount function is also
granted.
CreateAccountSETTLE does not allow creating call accounts, you need to
have the function CreateCallAccount.

ModifyAccount
Permission to modify accounts provided one of the following functions is
also granted to modify the corresponding type of account:
- ModifyAccountCLOSING
- ModifyAccountLINK
- ModifyAccountNORMAL
- ModifyAccountSETTLE
- ModifyAccountSTOCK
- ModifyCallAccount
Example - To modify an account of type CLOSING, you need ModifyAccount and
ModifyAccountCLOSING.

ModifyAccountCLOSING, ModifyAccountLINK,
ModifyAccountNORMAL, ModifyAccountSETTLE,
ModifyAccountSTOCK
Permission to modify accounts of corresponding type (CLOSING, LINK,
4 Access Permissions

Applications Functions
NORMAL, SETTLE, or STOCK) provided the ModifyAccount function is also
granted.
ModifyAccountSETTLE does not allow modifying call accounts, you need to
have the function ModifyCallAccount.

ModifyALLProcessingOrgStaticData
Permission to modify accounts associated with the ALL processing org.
Without this permission, a user who has the function
ModifyOnlyProcessingOrgStaticData will not be able to modify static data
associated with the processing org ALL.

ModifyOnlyProcessingOrgStaticData
Restriction to only modify the accounts associated with the processing orgs
of the user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ProcessAccountInterest
Permission to compute account interest on-the-fly, Process Interest button
in the Interest panel.

RemoveAccount
Permission to remove accounts, provided one of the following functions is
also granted to remove the corresponding type of account:
- RemoveAccountCLOSING
- RemoveAccountLINK
- RemoveAccountNORMAL
- RemoveAccountSETTLE
- RemoveAccountSTOCK
Example - To remove an account of type CLOSING, you need RemoveAccount and
RemoveAccountCLOSING.

RemoveAccountCLOSING, RemoveAccountLINK,
RemoveAccountNORMAL, RemoveAccountSETTLE,
RemoveAccountSTOCK
Permission to remove accounts of corresponding type (CLOSING, LINK,
NORMAL, SETTLE, or STOCK) provided the RemoveAccount function is also
granted.
RemoveAccountSETTLE does not allow removing call accounts Call
Accounts cannot be removed.

RemoveAccountStatement
Permission to remove account statements from the Statements panel.

ViewOnlyProcessingOrgStaticData
Restriction to only view the accounts associated with the processing orgs of
the user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 5

Applications Functions
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
C A L L A C C OU N T S
CreateCallAccount
Permission to create call accounts provided the CreateAccount function is
also granted.

ModifyCallAccount
Permission to modify call accounts provided the ModifyAccount function is
also granted.

ModifyAccountNotEditableFields
Permission to modify non editable fields entered in the domain
AccountProductTemplateNotEditable when using call account product
templates.

SuspendAccount
Allows the user to manually change the account status to Suspended
(without ActiveTo date). Do not use this access perm unless you need to
temporarily suspend an account.

CloseAccount
Allows the user to manually change the account status from Suspended to
Closed.

PerformAccountClosure
Allows the user to run the Account Closure process.

UndoAccountClosure
Allows the user to undo the account closure.

UpdateAccountDormantDates
Allows the user to modify the dormant date.
CloseAccount and PerformAccountClosure functions must be combined with the
appropriate Product Access permissions: Trade, product = CallAccount, Status =
None, and Action = Modify.
Accounting Interests AddModifyAccountInterest
Permission to create and modify account interests.

RemoveAccountInterest
Permission to remove account interests.

AddModifyIndividualAccountInterestRanges
Permission to modify quick entry configurations.
Accounting Books CreateAccountingBook
Permission to create accounting books.

RemoveAccountingBook
Permission to remove accounting books.
Accounting Events CreateAccountingEvent
Permission to create accounting events.

RemoveAccountingEvent
6 Access Permissions

Applications Functions
Permission to remove accounting events.
Accounting Rules CreateAccountingRule
Permission to create accounting rules.

ModifyAccountingRule
Permission to modify accounting rules.

ModifyALLProcessingOrgStaticData
Permission to modify the accounting rules associated with the ALL
processing org.
Without this permission, a user who has the function
ModifyOnlyProcessingOrgStaticData will not be able to modify static data
associated with the processing org ALL.

ModifyOnlyProcessingOrgStaticData
Restriction to only modify the accounting rules associated with the
processing orgs of the user currently connected. User processing orgs are
specified using Configuration > User Access Control > Access
Permissions - User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

RemoveAccountingRule
Permission to remove accounting rules.

ViewOnlyProcessingOrgStaticData
Restriction to only view the accounting rules associated with the processing
orgs of the user currently connected. User processing orgs are specified
using Configuration > User Access Control > Access Permissions -
User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
Mapping AddModifyAccountMapping
Permission to create and modify account mapping configurations.

RemoveAccountMapping
Permission to remove account mapping configurations.
Account Sweeping AddModifyAccountSweeping
Permission to create and modify account sweeping configurations.

RemoveAccountSweeping
Permission to remove account sweeping configurations.
Hedge Relationship Config CreateHedgeRelationshipConfiguration
Permission to create a hedge relationship config.

ModifyHedgeRelationshipConfiguration
Permission to modify a hedge relationship config.

RemoveHedgeRelationshipConfiguration
Permission to delete a hedge relationship config.

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 7

2.2 C ALY P S O N AV IGATOR

Applications Functions
Calypso Navigator In order to run the Calypso Navigator, the user must be granted the Connect
function, and must be granted read-write access to the "MainEntry" application
under Access > Application Name.

Connect
Permission to run the Calypso Navigator.
Help > About ViewDataServerInfo
Permission to view Data Server information.

2.3 MARKE T D ATA

2. 3. 1 MA R K ET D A T A W IN D OWS
Market Data
Applications Functions
All market data windows Access permissions for market data are multi-fold:
(curves, volatility surfaces, - If the market data does not belong to a pricer configuration, the user must be
correlation and covariance granted the functions described below as applicable, and the user must be granted
data, multi-curve packages) read-only or read-write access to individual market data types under Access >
Market Data Types as applicable, or to market data groups under Access > Market
Data Groups. Market data groups are created in the Groups panel by clicking on the
button Market Data Groups .
- If the market data belongs to a pricer configuration, the user must be granted
read-only or read-write access to the pricer configurations that contain the market
data under Access > Pricer Config.
If the market data belongs to a read-only pricer configuration, it cannot be
modified or removed, regardless of other access permissions.
If the market data belongs to a read-write pricer configuration, it can be
modified or removed provided the user is granted the functions described
below. It will be modified or removed regardless of individual market data type
access (i.e. even if the market data type access is read-only).
Note that the pricer configuration control can be removed by setting the
environment property DISABLE_MDI_PC_PERMISSION_INHERITANCE to true.
Examples To create an OPEN CurveZero, you need the functions CreateCurve
and CreateMarketDataOPEN, and you need read-write access to the CurveZero
curve type.
To modify an OPEN CurveZero that belongs to a pricer configuration, you need
read-write access to the pricer configuration, and you need the functions
ModifyCurve and ModifyMarketDataOPEN.
To use a CurveZero in a pricing environment, you need read-only or read-write
access to the CurveZero curve type, and read-only or read-write access to all the
components of the pricing environment.

CreateCurve
Permission to create curves, provided one of the following functions is also
granted:
- CreateMarketDataCLOSE
- CreateMarketDataLAST
- CreateMarketDataOPEN

CreateMarketData
8 Access Permissions

Applications Functions
Same as CreateCurve for volatility surfaces, and correlation and covariance
data.

CreateMarketDataCLOSE, CreateMarketDataLAST,
CreateMarketDataOPEN
Permission to create specified instances of curves (CLOSE, LAST, or OPEN)
provided the CreateMarketData function is also granted.

Disallow Save Quotes From Curve Window

Restriction to disable the Save Quotes button in the Quotes panel of the
Curve windows.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ModifyCurve
Permission to modify curves, provided one of the following functions is also
granted:
- ModifyMarketDataCLOSE
- ModifyMarketDataLAST
- ModifyMarketDataOPEN

ModifyMarketData
Same as ModifyCurve for volatility surfaces, and correlation and covariance
data.

ModifyMarketDataCLOSE, ModifyMarketDataLAST,
ModifyMarketDataOPEN
Permission to modify specified instances of curves (CLOSE, LAST, or OPEN)
provided the ModifyMarketData function is also granted.

RemoveCurve
Permission to remove curves, provided one of the following functions is also
granted:
- RemoveMarketDataCLOSE
- RemoveMarketDataLAST
- RemoveMarketDataOPEN

RemoveMarketData
Same as RemoveCurve for volatility surfaces, and correlation and covariance
data.

RemoveMarketDataCLOSE, RemoveMarketDataLAST,
RemoveMarketDataOPEN
Permission to remove specified instances of curves (CLOSE, LAST, or OPEN)
provided the RemoveMarketData function is also granted.

ModifyMktDataQuotes
Permission to create and modify quotes in the Quotes panel, provided one of
the following functions is also granted:
- ModifyMktDataQuotesClose
- ModifyMktDataQuotesLast
- ModifyMktDataQuotesOpen

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 9

Applications Functions
ModifyMktDataQuotesClose, ModifyMktDataQuotesLast,
ModifyMktDataQuotesOpen
Permission to create and modify specified instances of quotes (CLOSE,
LAST, or OPEN) in the Quotes panel provided the ModifyMktDataQuotes
function is also granted.

RemoveMktDataQuotes
Permission to remove quotes from the Quotes panel.

ViewQuoteTab
Permission to view the Quotes panel in the Zero Curve and Basis Curve
windows.
Credit Curves > Credit Access permissions for credit ratings are twofold:
Ratings - The user must be granted the functions described below as applicable.
- The user must be granted read-only or read-write access to individual rating
agencies under Access >Rating Agencies as applicable.

CreateLECreditRating
Permission to create credit ratings.

ModifyLECreditRating
Permission to modify credit ratings.

RemoveLECreditRating
Permission to remove credit ratings.

AuthorizeCreditRating
Permission to authorize credit rating modifications for a legal entity.
Correlation & Covariance ViewBetaMatrix
Permission to display a beta matrix.

ModifyBetaMatrix
Permission to modify a beta matrix.
Market Quotes > DTS Monitor ViewDTSMapper
Permission to open the DTS Monitor.

AllowDTSMapperAmendments
Permission to make trade amendments in the DTS Monitor.
Note that you can add the trade workflow rule ClearDTSErrors to the
workflow on a transition to be executed when a trade is amended. The DTS
record is retrieved, and all messages are marked as fixed.
Market Quotes > Feed Quotes ViewFeedQuoteWindow
Permission to open the Feed Quots window.

PublishFeedQuotes
Permission to publish quotes.
Market Quotes > Quotes ModifyMktDataQuotes
Permission to create and modify quotes, provided one of the following
functions is also granted:
- ModifyMktDataQuotesClose
- ModifyMktDataQuotesLast
10 Access Permissions

Applications Functions
- ModifyMktDataQuotesOpen

ModifyMktDataQuotesClose, ModifyMktDataQuotesLast,
ModifyMktDataQuotesOpen
Permission to create and modify specified instances of quotes (CLOSE,
LAST, or OPEN) provided the ModifyMktDataQuotes function is also granted.

RemoveMktDataQuotes
Permission to remove quotes.
Market Quotes > Security ModifyMktDataQuotes
Quotes
Permission to create and modify quotes, provided one of the following
functions is also granted:
- ModifyMktDataQuotesClose
- ModifyMktDataQuotesLast
- ModifyMktDataQuotesOpen

ModifyMktDataQuotesClose, ModifyMktDataQuotesLast,
ModifyMktDataQuotesOpen
Permission to create and modify specified instances of quotes (CLOSE,
LAST, or OPEN) provided the ModifyMktDataQuotes function is also granted.
Note that ModifyMktDataQuotesLast also applies to BID and ASK quotes.

RemoveMktDataQuotes
Permission to remove quotes.
Multicurve Window CreateMulticurvePackage
Creation of packages.

ModifyMulticurvePackage
Modification of packages.

RemoveMulticurvePackage
Removal of packages.

2. 3. 2 MA R K ET D A T A C ON F IGU R A T ION
Configuration > Market Data
Applications Functions
Feed Configuration ModifyFeedConfig
Permission to create, modify and delete feed configurations provided the
RunConfigWindow function is also granted.

RunConfigWindow
Permission to run Feed Configuration.
Feed Address Mapping Access permissions for feed address mapping configurations are twofold:
- The user must be granted the functions described below as applicable.
- The user must be granted read-only or read-write access to individual feed
address mapping configurations under Access > Feed Config as applicable.
Examples To modify the feed address mapping configuration called ReutersRFA,
you need the function ModifyFeedAddress, and you need read-write access to
ReutersRFA. To view ReutersRFA in the Feed Address Window, you need read-only
or read-write access to ReutersRFA.

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 11

Applications Functions
CreateFeedAddress
Permission to create a feed address mapping configuration.

ModifyFeedAddress
Permission to modify a feed address mapping configuration.

RemoveFeedAddress
Permission to remove a feed address mapping configuration.
Curve Underlyings CreateCurveUnderlying
Permission to create curve underlying instruments.

ModifyCurveUnderlying
Permission to modify curve underlying instruments.

RemoveCurveUnderlying
Permission to remove curve underlying instruments.
Market Data Server Access permissions for market data server configurations (host name and port
number) are twofold:
- The user must be granted the functions described below as applicable.
- The user must be granted read-only or read-write access to individual market
data server configurations under Access > MktData Server Config as applicable.

CreateMktDataServerConfig
Permission to create new market data server configurations.

ModifyMktDataServerConfig
Permission to modify market data server configurations.

MktDataServerAllowForceGenerate
Permission to allow force generating market data items on the market data
server. In the trade worksheet in the Market Data panel, click the down
arrow, and choose "Force generate".

MktDataServerAllowMultiSelection
Permission to allow selecting multiple market data server configurations. In
the trade worksheet in the Market Data panel, click the down arrow, and
choose "Select Market Data Server" to subscribe to a Market Data Server
configuration in the list.

RemoveMktDataServerConfig
Permission to delete market data server configurations.
Volatility Surface Underlyings CreateVolSurfaceUnderlying
Permission to create volatility surface underlying instruments.

ModifyVolSurfaceUnderlying
Permission to modify volatility surface underlying instruments.

RemoveVolSurfaceUnderlying
Permission to remove volatility surface underlying instruments.
Correlation Surface CreateCorrSurfaceUnderlying
Underlyings
Permission to create correlation surface underlying instruments.

ModifyCorrSurfaceUnderlying
12 Access Permissions

Applications Functions
Permission to modify correlation surface underlying instruments.

RemoveCorrSurfaceUnderlying
Permission to remove correlation surface underlying instruments.

2. 3. 3 PR IC IN G EN VIR ON MEN T
Market Data > Pricing Environment
Applications Functions
Pricing Environment Access permissions for pricing environments are twofold:
- The user must be granted the functions described below as applicable.
- The user must be granted read-only or read-write access to individual pricing
environments under Access > Pricing Env.

CreateMarketDataConfig
Permission to create pricing environments.

ModifyMarketDataConfig
Permission to modify pricing environments.

RemoveMarketDataConfig
Permission to remove pricing environments.
Pricer Configuration Access permissions for pricer configurations are twofold:
- The user must be granted the functions described below as applicable.
- The user must be granted read-only or read-write access to individual pricer
configurations under Access > Pricer Config.

CreateMarketDataConfig
Permission to create pricer configurations.

ModifyMarketDataConfig
Permission to modify pricer configurations.

RemoveMarketDataConfig
Permission to remove pricer configurations.
Quote Set Access permissions for quote sets are twofold:
- The user must be granted the functions described below as applicable.
- The user must be granted read-only or read-write access to individual quote sets
under Access > Quote Set as applicable.
Examples To create OPEN quotes in a quote set called MyQuoteSet, you need the
functions ModifyMktDataQuotes and ModifyMktDataQuotesOpen, and you need
read-write access to MyQuoteSet. To use MyQuoteSet in a pricing environment, you
need read-only or read-write access to MyQuoteSet.

ModifyMktDataQuotes
Permission to create and modify quotes, provided one of the following
functions is also granted:
- ModifyMktDataQuotesClose
- ModifyMktDataQuotesLast
- ModifyMktDataQuotesOpen

ModifyMktDataQuotesClose, ModifyMktDataQuotesLast,
ModifyMktDataQuotesOpen

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 13

Applications Functions
Permission to create and modify specified instances of quotes (CLOSE,
LAST, or OPEN) provided the ModifyMktDataQuotes function is also granted.

RemoveMktDataQuotes
Permission to remove quotes.
Pricing Parameter Set Access permissions for pricing parameter sets are twofold:
- The user must be granted the functions described below as applicable.
- The user must be granted read-only or read-write access to individual pricing
parameter sets under Access > Pricing_Parameter.

CreateMarketDataConfig
Permission to create pricing parameter sets.

ModifyMarketDataConfig
Permission to modify pricing parameter sets.

RemoveMarketDataConfig
Permission to remove pricing parameter sets.

2.4 ME S S AGE S & MATCHING

Configuration > Messages & Matching
Applications Functions
Master Confirmations CreateMasterConfirmation
Permission to create a master confirmation.

ModifyMasterConfirmation
Permission to modify a master confirmation.

RemoveMasterConfirmation
Permission to remove a master confirmation.

ModifyALLProcessingOrgStaticData
Permission to modify master confirmations associated with the ALL
processing org.
Without this permission, a user who has the function
ModifyOnlyProcessingOrgStaticData will not be able to modify static data
associated with the processing org ALL.

ModifyOnlyProcessingOrgStaticData
Restriction to only modify the master confirmations associated with the
processing orgs of the user currently connected. User processing orgs are
specified using Configuration > User Access Control > Access
Permissions - User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgStaticData
Restriction to only view the master confirmations associated with the
processing orgs of the user currently connected. User processing orgs are
specified using Configuration > User Access Control > Access
Permissions - User panel.
[NOTE: This function is actually a restriction and not a permission.
14 Access Permissions

Applications Functions
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
Message Configuration Set- CreateLEMessageConfig
up
Permission to create message configurations.

ModifyLEMessageConfig
Permission to modify message configurations.

RemoveLEMessageConfig
Permission to remove message configurations.

ModifyALLProcessingOrgStaticData
Permission to modify the message configurations associated with the ALL
processing org.
Without this permission, a user who has the function
ModifyOnlyProcessingOrgStaticData will not be able to modify static data
associated with the processing org ALL.

ModifyOnlyProcessingOrgStaticData
Restriction to only modify the message configurations associated with the
processing orgs of the user currently connected. User processing orgs are
specified using Configuration > User Access Control > Access
Permissions - User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgStaticData
Restriction to only view the message configurations associated with the
processing orgs of the user currently connected. User processing orgs are
specified using Configuration > User Access Control > Access
Permissions - User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
MIME Types ModifyMimeTypes
Permission to modify MIME types for message documents generation and
export.
Incoming Status ModifyIncomingStatusConfig
Configuration
Permission to modify incoming status configurations provided the
RunConfigWindow function is also granted.

RunConfigWindow
Permission to run Incoming Status Configuration.
Incoming Message ModifyIncomingMessageConfig
Configuration
Permission to modify incoming message configurations provided the
RunConfigWindow function is also granted.

RunConfigWindow
Permission to run Incoming Message Configuration.
Message Sender ModifyMessageSenderConfig
Configuration
Permission to modify create, message and delete sender configurations

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 15

Applications Functions
provided the RunConfigWindow function is also granted.

RunConfigWindow
Permission to run Message Sender Configuration.
Message Grouping ModifyConfigData
Permission to modify message grouping configurations.
Message Group ModifyLegalData
Permission to modify message groups.

RemoveLegalData
Permission to remove message groups.
Message Rule ModifyLegalData
Permission to modify message rules.

RemoveLegalData
Permission to remove message rules.

ModifyALLProcessingOrgStaticData
Permission to modify message rules associated with the ALL processing
org.
Without this permission, a user who has the function
ModifyOnlyProcessingOrgStaticData will not be able to modify static data
associated with the processing org ALL.

ModifyOnlyProcessingOrgStaticData
Restriction to only modify the message rules associated with the processing
orgs of the user currently connected. User processing orgs are specified
using Configuration > User Access Control > Access Permissions -
User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgStaticData
Restriction to only view the message rules associated with the processing
orgs of the user currently connected. User processing orgs are specified
using Configuration > User Access Control > Access Permissions -
User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

2.5 P ROCE S S ING

Processing
Applications Functions
Task Station In general, in order to apply any action, the products must specify what workflow
actions the user is allowed to perform using the Product Access panel.
In the Product Access panel, you can also specify what task handling the user is
allowed to do: process, complete, pass over, etc.

AllowSplitWithoutSDI
Permission to perform a split even if the SDIs are not set.
16 Access Permissions

Applications Functions
AssignCtpyOnXfer
Controls the counterparty when applying the ASSIGN action.
Permission to change the counterparty.

AssignCptyOnXferApplyAll
Controls the button "Apply to All" when applying the ASSIGN action.
Permissions to Apply to All.

AuthorizeConfirmMessage
Permission to authorize a message confirmation.
This is used in the context of a custom implementation of the 4-eye
principle in the message workflow.

AuthorizeSeeConnectedClients
Controls Utilities > Show Connected Users .
Permission to view connected users. The menu item Show Connected
Users will not appear if the function is not granted.

AuthorizeTrade
Permission to manually authorize trade workflow transitions. Trade
workflow manual authorization is described under the Help menu of the
Workflow Configuration.

Execute<netting_type>Netting
An Execute<netting_type>Netting access permission is created for each
netting type in the nettingType domain. For example,
ExecuteCounterPartyNetting. Netting types are defined under
Configuration > Settlements > Netting Configuration.
Permission to execute netted transfers by netting type.
[NOTE: If the user is not granted any of the Execute<netting_type>Netting
function then the user has permission to execute all types of netted
transfers]

FreeTaskEvenNotOwner
Permission to free a task in process even though the user is not the owner
of the task.

ModifyAdviceDocument
Controls Inspect > Documents .
Permission to enable the Edit button. Note that the Edit action must also be
configured in the workflow. Refer to the Calypso Workflow User Guide for
details.

ModifyConfigData
Controls Configure > Task Access Config and Configure > User Config.
Permission to modify task access configurations provided the
RunConfigWindow function is also granted.
Permission to configure defaults for the Task Station provided the
RunConfigWindow function is also granted.

ModifyTSConfigureColumn
Controls Utilities > Configure Columns .
Permission to configure the columns of the Task Stations panels.

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 17

Applications Functions
RestoreTaskFromTaskStation
Controls Utilities > Restore Task .
Permission to restore an archived task.

RetryPosting
Controls the RETRY action, and the SUSPENSE_POSTINGS scheduled task.
Permission to retry a posting.
It is only enabled if the environment property ACCENGINE_INVALID_LOGIC
is true.

RunConfigWindow
Controls Configure > Task Access Config and Configure > User Config.
Permission to run Task Access Configuration and permission to run Task
Station Defaults.
[NOTE: To modify data in these windows, you also need the function
ModifyConfigData]

TS_CFG_LOAD_TRADES
Controls the function in the Task Station > Configure menu.
Permission to Load Trades.

TS_CFG_LOAD_TRANSFERS
Controls the function in the Task Station > Configure menu.
Permission to Load Transfers.

TS_CFG_LOAD_MESSAGES
Controls the function in the Task Station > Configure menu.
Permission to Load Messages.

TS_CFG_AUTO_PROCESS
Controls the function in the Task Station > Configure menu.
Permission to Auto Process.

TS_CFG_AUTO_FREE
Controls the function in the Task Station > Configure menu.
Permission to Auto Free.

TS_CFG_RT_UPDATE
Controls the function in the Task Station > Configure menu.
Permission to Real Time Update.

TS_CFG_OPEN_BO_TRADES
Controls the function in the Task Station > Configure menu.
Permission to Open BO with Trade.

TS_CFG_COLUMNS
Controls the function in the Task Station > Utilities menu.
Permission to Configure Columns.

TS_CFG_SORT
Controls the function in the Task Station > Utilities menu.
18 Access Permissions

Applications Functions
Permission to Configure Sort.

TS_CHANGE_DATE_TYPE
Controls the Date Type filed in the Task Station.
Permission to change the date type.

TS_DECREASE_TASK_PRIORITY
Controls Priority > Decrease Priority .
Permission to decrease the priority of a task.

TS_INCREASE_TASK_PRIORITY
Controls Priority > Increase Priority .
Permission to increase the priority of a task.

TS_FIX_TASK_PRIORITY
Controls Priority > Fix Priority .
Permission to set the priority of a task.

TS_INCREASE_DATE_RANGE
Controls the From and To dates in the Task Station.
Permission to increase the range.

ViewOnlyGroupTaskStation
Controls Configure > Set User .
Restriction to view only the tasks of users in the same group, provided you
have the permission ViewOtherTaskStation.

ViewOtherTaskStation
Controls Configure > Set User .
Permission to view the tasks of another user.

ViewPendingProcessing
Controls Utilities > all pending processing functions.
Permission to view events that are pending processing. The menu items will
not appear if the function is not granted.
N ET T I N G M A N A GER
NettingManagerApply
Permission to apply a change to a netted transfer, Apply button.

NettingManagerApplyToTrade
Permission to apply a change to a netted transfer for a given trade, Apply to
Trade button.
DoNotAllowBeneficiaryChange
Provided you have permission NettingManagerApplyToTrade or
DoNotAllowBeneficiaryChange, you can change a netted transfer but you
cannot change the beneficiary.
This is a restriction.

DoNotAllowNettingGroupChange
Provided you have permission NettingManagerApplyToTrade or

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 19

Applications Functions
DoNotAllowBeneficiaryChange, you can change a netted transfer but you
cannot change the netting group.
This is a restriction.

DoNotAllowNettingMethodChange
Provided you have permission NettingManagerApplyToTrade or
DoNotAllowBeneficiaryChange, you can change a netted transfer but you
cannot change the netting method.
This is a restriction.

DoNotAllowSDIChange
Provided you have permission NettingManagerApplyToTrade or
DoNotAllowBeneficiaryChange, you can change a netted transfer but you
cannot change the SDIs.
This is a restriction.
New Task Station In general, in order to apply any action, the products must specify what workflow
actions the user is allowed to perform using the Product Access panel.
In the Product Access panel, you can also specify what task handling the user is
allowed to do: process, complete, pass over, etc.
Access permissions for the new Task Station are two-fold.
You can set read/write access to Task Station tabs and enrichment filters, or read-
only access to Task Station tabs and enrichment filters under Access Permissions >
Group Access > Access: Task Station Tabs and Task Station Filters.
The following access permission functions can be defined:

AddModifyTSTab
Permission to define or update panel configurations.

ModifyTSCatalogOrdering
Permission to order the report catalog.

ModifyTSTabFiltering
Permission to modify search criteria in the report panels.

ModifyTSTabPlan
Permission to modify the report plans

ModifyTaskStationGlobalFilter
Permission to set the global filter in the preferences.

RemoveTSTab
Permission to delete panel configurations

TASK_STATION_SHOW_FILTER
Permission to display the search criteria in the report panels.

ViewOnlyGroupTaskStation
Controls Configure > Set User .
Restriction to view only the tasks of the users in the same group, provided
you have the permission ViewOtherTaskStation.

ViewOtherTaskStation
Controls Configure > Set User .
Permission to view the tasks of another user.
20 Access Permissions

Applications Functions
Process Trades OperationsProcessing
Permission to process trades provided the RunProcessTrades function is
also granted.
This permission allows performing operations in all panels.

OperationsProcessingProcessTrade
Permission to process trades provided the RunProcessTrades function is
also granted.
This permission only allows performing operations in the Process Trade
panel.

OperationsProcessingRegenerateEvent
Permission to process trades provided the RunProcessTrades function is
also granted.
This permission only allows performing operations in the Generate Trade
Event panel.

OperationsProcessingMergeCounterparties
Permission to process trades provided the RunProcessTrades function is
also granted.
This permission only allows performing operations in the Merge
Counterparties panel.

RunProcessTrades
Permission to run Process Trades.

ViewOnlyMergeCounterParties
Restriction to only merge counterparties provided the RunProcessTrades
function is also granted.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
Static Data Maintenance ModifyAccount
Permission to modify accounts provided one of the following functions is
also granted:
- ModifyAccountCLOSING
- ModifyAccountLINK
- ModifyAccountNORMAL
- ModifyAccountSETTLE
- ModifyAccountSTOCK

ModifyAccountCLOSING, ModifyAccountLINK,
ModifyAccountNORMAL, ModifyAccountSETTLE,
ModifyAccountSTOCK
Permission to modify accounts of specified type (CLOSING, LINK, NORMAL,
SETTLE, or STOCK) provided the ModifyAccount function is also granted.

ModifyBook
Permission to modify books. You also need read-write access to individual
books and book bundles.

ModifyLEContact

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 21

Applications Functions
Permission to modify LE contacts.

ModifyLegalEntity
Permission to modify legal entities of any status.

ModifyLegalEntityRegistration
Permission to modify LE registrations.

ModifyLESDI
Permission to modify SDIs.

ModifyUsedSDI
Allows overriding the behavior when the environment property USE_OLD_
SDI_VALIDATION is false. In this case, the user will be able to update the
existing SDI, rather than creating two SDIs with effective to and from dates.

ModifyUserDefaults
Permission to modify user defaults.

ModifyStaticDataMaintenance
Permission to run Static Data Maintenance.
Generic Comment Editor Access permissions for generic comments are twofold:
- The user must be granted the functions described below as applicable.
- The user must be granted read-only or read-write access to individual generic
comment types under Access > Generic Comment Type as applicable.

InvalidateGenericComment
Permission to invalidate a comment.

SaveGenericComment
Permission to save a comment.
Data Authorization Authorizations are to be performed by a different user than the user who modified
or created data, unless the SameUserAuthorization function is granted.

ApplyIndividualAuth
Permission to authorize individual changes to a given entity version when
multiple changes have occurred, as opposed to authorizing all the changes
at once.
Make sure to select Detail next to the Refresh button in the Data
Authorization window, in order to see individual changes.
[NOTE: You should also have the permission to authorize the selected
entity]

AuthorizeAccount
Permission to authorize new and modified accounts specified using
Configuration > Accounting > Accounts.
AuthorizeAccountingEventConfig
Permission to authorize new and modified accounting events specified
using Configuration > Accounting > Accounting Events .

AuthorizeAccountingRule
Permission to authorize new and modified accounting rules specified using
Configuration > Accounting > Accounting Rules.
22 Access Permissions

Applications Functions
AuthorizeAccountingRuleAccountConfig
Permission to authorize new and modified accounting rule configurations
specified using Configuration > Accounting > Accounting Rules > Config
panel.

AuthorizeAdviceConfig
Permission to authorize new and modified message configurations specified
using Configuration > Messages & Matching > Message Configuration
Set-up.
AuthorizeBook
Permission to authorize new and modified books specified using
Configuration > Books & Bundles > Trading Book. Note that you also
need read-write access to individual books and book bundles.

AuthorizeCDSIndexDefinition
Permission to authorize new and modified CDS index definitions specified
using Configuration > Credit Derivatives > CDS Index Definition.

AuthorizeCFDCustom
Permission to authorize new and modified CFD products and custom CFD
products specified using Trade > Equity > Contract for Difference .

AuthorizeCountry
Permission to authorize new and modified countries specified using
Configuration > Definitions > Countries.
AuthorizeCurrencyDefault
Permission to authorize new and modified currency defaults specified using
Configuration > Definitions > Currency Definitions > Currency Default
panel.

AuthorizeCurrencyPair
Permission to authorize new and modified currency pairs specified using
Configuration > Definitions > Currency Definitions > Currency Pair panel.
AuthorizeFXReset
Permission to authorize new and modified FX resets specified using Trade
Lifecycle > Reset > FX Rate Reset.
AuthorizeHoliday
Permission to authorize new and modified holiday calendars specified using
Configuration > Definitions > Calendar Definitions.
AuthorizeKickOffCutOffConfig
Permission to authorize new and modified KickOffCutOff configurations
specified using Configuration > Workflow > Kick-Off/Cut-Off.

AuthorizeLEAttribute
Permission to authorize new and modified LE attributes specified using
Configuration > Legal Data > Attributes.
AuthorizeLegalAgreement
Permission to authorize new and modified legal agreements specified using

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 23

Applications Functions
Configuration > Legal Data > Legal Agreements.
AuthorizeLegalContact
Permission to authorize new and modified LE contacts specified using
Configuration > Legal Data > Contact Personnel.
AuthorizeLegalEntity
Permission to authorize new and modified legal entities specified using
Configuration > Legal Data > Legal Entities.
AuthorizeLegalEntityRelation
Permission to authorize new and modified LE relations specified using
Configuration > Legal Data > Legal Entity Relation.
AuthorizeLERegistration
Permission to authorize new and modified LE registrations specified using
Configuration > Legal Data > Registration Details.
AuthorizeMarginCallConfig
Permission to authorize new and modified margin call configurations
specified using Configuration > Fees, Haircuts, & Margin Calls > Margin
Call.
AuthorizeMasterConfirmation
Permission to authorize new and modified master confirmations specified
using Configuration > Messages & Matching > Master Confirmations .

AuthorizeNettingMethod
Permission to authorize new and modified netting methods specified using
Configuration > Settlements > Netting Method.
AuthorizePLMark
Permission to authorize new and modified marks set by the scheduled task
EOD_PLMARKING.

AuthorizeQuoteValue, AuthorizeQuoteValueLAST,
AuthorizeQuoteValueOPEN, AuthorizeQuoteValueCLOSE
You need to add QuoteValue to the classAuthMode domain using
Configuration > System > Domain Values if not present.
Permission to authorize all types of quotes, LAST quotes only, OPEN quotes
only, CLOSE quotes only.
Note that AuthorizeQuoteValueLAST also applies to BID and ASK quotes.

AuthorizeRefEntityBasket
Permission to authorize reference entity baskets specified using
Configuration > Credit Derivatives > Reference Entity Basket.
AuthorizeRefEntityTranche
Permission to authorize reference entity tranches specified using
Configuration > Credit Derivatives > Reference Entity Basket.
AuthorizeRateIndexDefaults
Permission to authorize new and modified rate index definitions specified
using Configuration > Interest Rates > Rate Index Definitions .
24 Access Permissions

Applications Functions
AuthorizeSDI
Permission to authorize new and modified SDIs specified using
Configuration > Settlements > Settlement Instructions.
AuthorizeSDIRelationShip
Permission to authorize new and modified SDI relationships specified using
Configuration > Settlements > Settlement Instructions, R-Ship button.
AuthorizeStaticDataFilter
Permission to authorize new and modified static data filters specified using
Configuration > Filters > Static Data Filter. Note that you also need read-
write access to individual static data filters.

AuthorizeSystemSettings
Permission to authorize changes to the running mode (Audit, Access
Permissions, Workflow, Authorization) specified using the Admin
application.

AuthorizeUserAccessPermission
Permission to authorize new and modified access permissions specified
using Configuration > User Access Control > Access Permissions .

AuthorizeWorkflowConfig
Permission to authorize new and modified workflow configurations specified
using Configuration > Workflow > Workflow Configuration.

ModifyOnlyProcessingOrgStaticData
When a user has the restriction ModifyOnlyProcessingOrgStaticData, the
user can only authorize modifications made to static data related to the
users processing organizations.

SameUserAuthorization
Permission for a user to authorize self-modifications.
Manual Posting CreateManualPosting
Permission to create manual postings.

ONLY_TWOSIDEDPOSTINGS
Permission to only enter postings with a debit account AND a credit
account.

ModifyManualPosting
Permission to modify manual postings.
Accounting Operations >
See also All trade windows for information about all access permissions
Customer Transfer required for viewing and entering trades.

ViewCustXferPoSettlementPanel
View menu - Permission to view the PO Settlement Panel.

ViewCustXferXCCYPanel
View menu - Permission to view the Xccy Panel.

ViewCustXferAdditionalPanel
View menu - Permission to view the Additional Panel.
Collateral Management > Please refer to Calypso Collateral Management documentation for details.

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 25

Applications Functions
Collateral Manager The following access permissions are no longer used:
MarginCallClose
MarginCallOkToCall
MarginCallReturn
MarginCallUncheckedPositions
MarginCallValidate
Clearing & Settlements > AllowBlockBONYMessages
BONY Monitor
Permission to set the Kick Off and Cut Off times for the Security and Cash
Interfaces as well as the Reversal (Tools > KickOff CutOff Config).
Matching > Client Matching ModifyALLProcessingOrgStaticData
Permission to modify matching configurations associated with the ALL
processing org.
Without this permission, a user who has the function
ModifyOnlyProcessingOrgStaticData will not be able to modify static data
associated with the processing org ALL.

ModifyOnlyProcessingOrgStaticData
Restriction to only modify the matching configurations associated with the
processing orgs of the user currently connected. User processing orgs are
specified using Configuration > User Access Control > Access
Permissions - User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgStaticData
Restriction to only view the matching configurations associated with the
processing orgs of the user currently connected. User processing orgs are
specified using Configuration > User Access Control > Access
Permissions - User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
Matching > Indexing ConfigPairingMatching
Controls the Config button.
Permission to configure matching criteria.

CreateDocument
Controls Utilities > Create New Message .
Permission to create a message.

PairingMatchingContractIdTradeId
Permission to specify a contract id and a trade id.
Matching > Financial ConfigPairingMatching
Matching
Controls the Config button.
Permission to configure matching criteria.
Matching > Fund FX Matching ModifyALLProcessingOrgStaticData
Permission to modify matching configurations associated with the ALL
processing org.
Without this permission, a user who has the function
26 Access Permissions

Applications Functions
ModifyOnlyProcessingOrgStaticData will not be able to modify static data
associated with the processing org ALL.

ModifyOnlyProcessingOrgStaticData
Restriction to only modify the matching configurations associated with the
processing orgs of the user currently connected. User processing orgs are
specified using Configuration > User Access Control > Access
Permissions - User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgStaticData
Restriction to only view the matching configurations associated with the
processing orgs of the user currently connected. User processing orgs are
specified using Configuration > User Access Control > Access
Permissions - User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
Matching > Security Matching Manual Match
Permission to use the Manual Match button. It allows matching transfers
even if the automatic matching criteria are not satisfied.
Tools > Calypso Mapping Data Mapping window (menu action "mapping.CalypsoMappingWindow").

ViewMWMappings
Permission to view the Data Mapping window.

ModifyMWMappings
Permission to modify data mappings.

2.6 P RODUCTS

2. 6. 1 A L L PR OD U C T S
Configuration > Product-specific menu
Applications Functions
All product windows Access permissions for products are twofold:
- The user must be granted the functions described below as applicable.
- The user must be granted read-only or read-write access to individual products
under Access > Products StaticData using static data filters as applicable.
Examples To create a bond product, you need the function CreateProduct, and
you need read-write access to a static data filter that includes this bond (for
example ISIN like US%). To view the bond details, you need read-only or read-write
access to a static data filter that includes this bond.

CreateProduct
Permission to create products.

ModifyDefaultQuoteType
Permission to create and modify default quote types.

ModifyProduct

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 27

Applications Functions
Permission to modify products.

RemoveDefaultQuoteType
Permission to remove default quote types.

RemoveProduct
Permission to remove products.

2. 6. 2 A SSET MA N A GEMEN T
Configuration > Asset Management
Applications Functions
Fund CreateFund
Permission to create funds.

ModifyFund
Permission to modify funds.

RemoveFund
Permission to remove funds.
Strategy CreateFundStrategyAssoc
Permission to associate funds and strategies.

CreateStrategy
Permission to create strategies.

ModifyFundStrategyAssoc
Permission to modify associations between funds and strategies.

Modifystrategy
Permission to modify strategies.

RemoveFundStrategyAssoc
Permission to remove associations between funds and strategies.

RemoveStrategy
Permission to remove strategies.

2. 6. 3 C OMMOD IT IES
Configuration > Commodities
Applications Functions
Commodities
See All product windows.
Commodity Indexes See .
All product windows
Period Distribution CreatePeriodDistribution
Permission to create period distributions.

RemovePeriodDistribution
Permission to remove period distributions.
Intraday Configuration CreateIntradayConfiguration
28 Access Permissions

Applications Functions
Permission to create intraday configurations.

RemoveIntradayConfiguration
Permission to remove intraday configurations.

2. 6. 4 CREDIT DERIVAT IVES

Configuration > Credit Derivatives
Applications Functions
Reference Entity Basket CreateReferenceEntityBasket
Permission to create a reference entity basket.

ModifyReferenceEntityBasket
Permission to modify a reference entity basket.

RemoveReferenceEntityBasket
Permission to remove a reference entity basket.

CreateReferenceEntityTranche
Permission to create a reference entity tranche.

ModifyReferenceEntityTranche
Permission to modify a reference entity tranche.

RemoveReferenceEntityTranche
Permission to remove a reference entity tranche.
CDS Index Definition
See All product windows.

CreateCDSIndexDefinition
Permission to create a CDS index definition, provided the function
CreateProduct is also granted.

ModifyCDSIndexDefinition
Permission to modify a CDS index definition, provided the function
ModifyProduct is also granted.

RemoveCDSIndexDefinition
Permission to remove a CDS index definition, provided the function
RemoveProduct is also granted.
CDS ABS Index Definition See .
All product windows
CDS ABS Index Tranche See .
All product windows
Definition
CDS Settlement Matrix AddModifyCDSSettlementMatrix
Permission to create and modify CDS settlement details.

RemoveCDSSettlementMatrix
Permission to remove CDS settlement details.

2. 6. 5 EQU IT IES
Configuration > Equity

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 29

Applications Functions
Stock
See All product windows.

AddDividend
Permission to add dividends to the Dividend panel.

RemoveDividend
Permission to remove dividends from the Dividend panel.
Equity Indexes See .
All product windows
CFD Contracts ModifyCFDContractGrid
Permission to create and modify CFD contracts.

RemoveCFDContractGrid
Permission to remove CFD contracts.

ViewCFDContractGrid
Permission to view CFD contracts.
CFD Country Grid CreateCFDCountryGrid
Permission to create CFD country grids.

ModifyCFDCountryGrid
Permission to modify CFD country grids.

RemoveCFDCountryGrid
Permission to remove CFD country grids.
Stock Options See .
All product windows
Listed Index Option See .
All product windows

2. 6. 6 FIXED I N C OME
Configuration > Fixed Income
Applications Functions
Bond Defaults CreateReferenceData
Permission to create bond defaults.

RemoveReferenceData
Permission to remove bond defaults.
Bond Product Definition
See All product windows.

AllowExoticTrade
Permission to select the Exotic type.

AllowReadOnlyStructuredWindow
Restriction to bring up the Structure Window in read-only mode.

DoNotCheckCorporateActions
By default, any change to bond static data will trigger the message Do you
want to review corporate actions?. If you do not want to trigger this
message by default, you need to grant the access permission restriction
DoNotChekcCorporateActions to your user group.
Default Quote Type ModifyDefaultQuoteType
30 Access Permissions

Applications Functions
Permission to create and modify default quote types.

RemoveDefaultQuoteType
Permission to remove default quote types.

2. 6. 7 FOR EIGN EXC H A N GE

Configuration > Foreign Exchange
Applications Functions
FX Rate Definitions CreateReferenceData
Permission to create FX rate definitions.

ModifyReferenceData
Permission to modify FX rate definitions.

RemoveReferenceData
Permission to remove FX rate definitions.
Triangulation Currency CreateTriangulationCcyRule
Permission to create a triangulation currency rule.

RemoveTriangulationCcyRule
Permission to remove a triangulation currency rule.

2. 6. 8 INT EREST RAT ES

Configuration > Interest Rates
Applications Functions
Cash Settlement Defaults AddCashSettleDefault
Permission to add cash settle defaults.

AmendCashSettleDefault
Permission to amend cash settle defaults.

RemoveCashSettleDefault
Permission to remove cash settle defaults.
Rate Index Definitions ModifyReferenceData
Permission to modify reference index definitions.

RemoveReferenceData
Permission to remove reference index definitions.
Exotic Variables AddModifyXSPVariable
Permission to create and modify variables for exotic structured products.

RemoveXSPVariable
Permission to remove variables for exotic structured products.

2. 6. 9 LIST ED DERIVAT IVES

Configuration > Listed Derivatives

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 31

Applications Functions
Option Contracts CreateReferenceData
Permission to create ETO contracts.

ModifyReferenceData
Permission to modify ETO contracts.

RemoveReferenceData
Permission to remove ETO contracts.
Future Contracts CreateReferenceData
Permission to create Future contracts.

ModifyReferenceData
Permission to modify Future contracts.

RemoveReferenceData
Permission to remove Future contracts.
Options on Future Contracts CreateReferenceData
Permission to create Future Option contracts.

ModifyReferenceData
Permission to modify Future Option contracts.

RemoveReferenceData
Permission to remove Future Option contracts.
Future Configuration See .
All product windows
Future Option Configuration See .
All product windows

2. 6. 10 MON EY MA R K ET
Configuration > Money Market
Applications Functions
Loan See .
All product windows

2. 6. 11 PR OD U C T C ON F IGU R A T ION
Configuration > Product Configuration
Applications Functions
Exotic Type Creator CreateExoticType
Permission to create exotic types.

ModifyExoticType
Permission to modify exotic types.

RemoveExoticType
Permission to remove exotic types.
Product Code CreateDomains
Permission to create product code names.

CreateReferenceData
32 Access Permissions

Applications Functions
Permission to create product codes.

ModifyDomains
Permission to modify product code names.

RemoveReferenceData
Permission to remove product codes.

2.7 R E FE RE NCE D ATA

2. 7. 1 A U T OMA T ED OPER A T ION S

Configuration > Automated Operations
Applications Functions
Back-To-Back Trades CreateModifySalesB2BRoutingRule
Permission to create / modify B2B configurations.

RemoveSalesB2BRoutingRule
Permission to remove B2B configurations.
Book Substitution CreateModifyBookSubstitutionRoutingRule
Permission to create / modify book substitution configurations.

RemoveBookSubstitutionRoutingRule
Permission to remove book substitution configurations.
Currency Splits CreateModifyXccySplitRoutingRule
Permission to create / modify Ccy Split configurations.

RemoveXccySplitRoutingRule
Permission to remove Ccy Split configurations.
Forward Risk Transfer CreateModifyFwdRiskTransferRoutingRule
Permission to create / modify Forward Risk Transfer configurations.

RemoveFwdRiskTransferRoutingRule
Permission to remove Forward Risk Transfer configurations.
Position Rollover CreateModifyPositionRolloverRule
Permission to create and modify position rollover rules.

RemovePositionRolloverRule
Permission to remove position rollover rules.
Spot Risk Transfer CreateModifySpotRiskTransferRoutingRule
Permission to create / modify Spot Risk Transfer configurations.

RemoveSpotRiskTransferRoutingRule
Permission to remove Spot Risk Transfer configurations.

2. 7. 2 B OOK S & B U N D L ES
Configuration > Books & Bundles

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 33

Applications Functions
Trading Book Access permissions for books are multifold:
- The user must be granted the functions described below as applicable.
- The user must be granted read-only or read-write access to individual books
under Access > Books as applicable.
- The user must be granted read-only or read-write access to book bundles under
Access > BookBundle if the BookBundle attribute is specified on the book.
- The book must specify the currencies, currency pairs and products that can be
traded in that book using the Book Access panel. These permissions apply
regardless of the user.
- The user must be granted read-only or read-write access to individual book
attributes under Access > Book Attributes as applicable.
Examples To modify the attribute values of a book called MyBook, you need the
functions ModifyBook and ModifyDomains, and you need read-write access to
MyBook.
To enter a USD bond trade on MyBook, you need read-write access to MyBook,
and MyBook needs permission to trade the USD currency and the Bond product.
(Note that you also need read-write access to the Bond product type under
Access > Product Types).
To view MyBook in a report, you need read-only or read-write access to MyBook.

CreateBook
Permission to create books.

CreateDomains
Permission to create book attributes.

ModifyBook
Permission to modify books.

ModifyDomains
Permission to modify book attributes.

RemoveBook
Permission to remove books.

RemoveDomains
Permission to remove book attributes.

ModifyALLProcessingOrgStaticData
Permission to modify the books associated with the ALL processing org.
Without this permission, a user who has the function
ModifyOnlyProcessingOrgStaticData will not be able to modify static data
associated with the processing org ALL.

ModifyOnlyProcessingOrgStaticData
Restriction to only modify the books associated with the processing orgs of
the user currently connected. User processing orgs are pecified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgStaticData
34 Access Permissions

Applications Functions
Restriction to only view the books associated with the processing orgs of the
user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
Book Hierarchy Access permissions for book hierarchies are twofold:
- The user must be granted the functions described below as applicable.
- The user must be granted read-only or read-write access to individual book
hierarchies under Access > Book Hierarchy as applicable.
Examples To modify the book hierarchy called MyBookHchy, you need the
function ModifyBookHierarchy, and you need read-write access to MyBookHchy. To
view MyBookHchy in a report, you need read-only or read-write access to
MyBookHchy.

CreateBookHierarchy
Permission to create book hierarchies.

ModifyBookHierarchy
Permission to modify book hierarchies.

RemoveBookHierarchy
Permission to remove book hierarchies.
Book Valuation Currency ModifyBookValCcy
Permission to create, modify, and delete book valuation currencies provided
the RunConfigWindow function is also granted.

RunConfigWindow
Permission to run Book Valuation Currency.
Liquidation Configuration AddModifyLiquidationInfo
Liquidation Config Permission to create and modify liquidation configurations.

RemoveLiquidationInfo
Permission to remove liquidation configurations.
Trade Bundle CreateTradeBundle
Permission to create trade bundles.

ModifyTradeBundle
Permission to modify trade bundles.

RemoveTradeBundle
Permission to remove trade bundles.

2. 7. 3 D EF IN IT ION S
Configuration > Definitions
Applications Functions
Countries CreateCountry
Permission to create countries.

ModifyCountry

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 35

Applications Functions
Permission to modify countries.

RemoveCountry
Permission to remove countries.
Calendar Definitions AddModifyHoliday
Permission to create and modify holiday calendars.

RemoveHoliday
Permission to remove holiday calendars.
Date Rule Definitions CreateDateRule
Permission to create date rules.

ModifyDateRule
Permission to modify date rules.

RemoveDateRule
Permission to remove date rules.
Currency Definitions CreateCurrencyDefaults
Controls the Currency Default panel.
Permission to create currency defaults.

CreateCurrenyPair
Controls the Currency Pair panel.
Permission to create currency pairs.

ModifyCurrencyDefaults
Controls the Currency Default panel.
Permission to modify currency defaults.

ModifyCurrencyPair
Controls the Currency Pair panel.
Permission to modify currency pairs.

RemoveCurrencyDefaults
Controls the Currency Default panel.
Permission to remove currency defaults.

RemoveCurrencyPair
Controls the Currency Pair panel.
Permission to modify currency pairs.
Funding Rate Definitions RemoveReferenceData
Permission to remove funding rate definitions.

2. 7. 4 FEES, H A IR C U T S, & MA R GIN C A L L S

Configuration > Fees, Haircuts, & Margin Calls
Applications Functions
Margin Call CreateMarginCallConfig
Permission to create margin call configurations.
36 Access Permissions

Applications Functions
ModifyMarginCallConfig
Permission to modify margin call configurations.

RemoveMarginCallConfig
Permission to remove margin call configurations.

ModifyALLProcessingOrgStaticData
Permission to modify the margin calls associated with the ALL processing
org.
Without this permission, a user who has the function
ModifyOnlyProcessingOrgStaticData will not be able to modify static data
associated with the processing org ALL.

ModifyOnlyProcessingOrgStaticData
Restriction to only modify the margin calls associated with the processing
orgs of the user currently connected. User processing orgs are specified
using Configuration > User Access Control > Access Permissions -
User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgStaticData
Restriction to only view the margin calls associated with the processing
orgs of the user currently connected. User processing orgs are specified
using Configuration > User Access Control > Access Permissions -
User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
Fee Definition ModifyFeeDefinition
Permission to create, modify and delete fee definitions provided the
RunConfigWindow function is also granted.

RunConfigWindow
Permission to run Fee Definition.
Fee Billing Rule ModifyLegalData
Permission to disable LE roles.

RemoveLegalData
Permission to remove disabled roles.

ModifyALLProcessingOrgStaticData
Permission to modify the fee billing rules associated with the ALL
processing org.
Without this permission, a user who has the function
ModifyOnlyProcessingOrgStaticData will not be able to modify static data
associated with the processing org ALL.

ModifyOnlyProcessingOrgStaticData
Restriction to only modify the fee billing rules associated with the
processing orgs of the user currently connected. User processing orgs are
specified using Configuration > User Access Control > Access

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 37

Applications Functions
Permissions - User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgStaticData
Restriction to only view the fee billing rules associated with the processing
orgs of the user currently connected. User processing orgs are specified
using Configuration > User Access Control > Access Permissions -
User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
Fee Grid CreateFeeGrid
Permission to create fee grids.

ModifyFeeGrid
Permission to modify fee grids.

RemoveFeeGrid
Permission to remove fee grids.
Fee Config AddModifyFeeConfig
Permission to create and modify fee configurations.

RemoveFeeConfig
Permission to delete fee configurations.
Haircut Rule CreateHaircutRule
Permission to create haircut rules

ModifyHaircutRule
Permission to modify haircut rules

RemoveHaircutRule
Permission to remove haircut rules
Withholding Tax Attribute AddModifyWHTAttribute
Permission to add and modify withholding tax attributes.

RemoveWHTAttribute
Permission to remove withholding tax attributes.

ViewAllWHTAttributes
You can define hidden withholding tax attributes in the domain
"WHTHiddenAttribute". The value of these attributes will be hidden upon
display.
The attributes can be defined as "WHTLEAttribute.<attribute name>",
"WHTBookAttribute.<attribute name>", or ""WHTAccountAttribute.<attribute
name>".
The function ViewAllWHTAttributes allows viewing all withholding tax
attributes, including hidden attributes.
Withholding Tax Config AddModifyWithholdingTaxConfig
Permission to add and modify withholding tax configurations.
38 Access Permissions

Applications Functions
RemoveWithholdingTaxConfig
Permission to remove withholding tax configurations.

2. 7. 5 FIL T ERS
Configuration > Filters
Applications Functions
Trade Filter Access permissions for trade filters are twofold:
- The user must be granted the functions described below as applicable.
- The user must be granted read-only or read-write access to individual trade
filters under Access > Trade Filter as applicable.
Examples To modify the trade filter called MyTradeFilter, you need the function
ModifyTradeFilter, and you need read-write access to MyTradeFilter. To use
MyTradeFilter for loading trades, you need read-only or read-write access to
MyTradeFilter.

CreateSQLTradeFilter
Permission to create SQL Trade Filter. CreateTradeFilter +
CreateSQLTradeFilter are required to create SQL Trade Filters.

CreateTradeFilter
Permission to create trade filters.

ModifyGroupTradeFilter
Permission to modify trade filters created by any user in the group provided
the ModifyTradeFilter function is also granted.
To restrict a user to only modify the trade filters that the user has created,
use the ModifyUserTradeFilter function instead.

ModifySQLTradeFilter
Permission to modify SQL Trade Filter. ModifyTradeFilter +
ModifySQLTradeFilter are required to create SQL Trade Filters.

ModifyTradeFilter
Permission to modify trade filters.

ModifyUserTradeFilter
Permission to modify trade filters created by the user currently connected
provided the ModifyTradeFilter function is also granted.
To allow a user to modify trade filters created by any user in the group, use
the ModifyGroupTradeFilter function instead.

RemoveSQLTradeFilter
Permission to delete SQL Trade Filter. RemoveTradeFilter +
RemoveSQLTradeFilter are required to create SQL Trade Filters.

RemoveTradeFilter
Permission to remove trade filters.
Static Data Filter Access permissions for static data filters are twofold:
- The user must be granted the functions described below as applicable.
- The user must be granted read-only or read-write access to individual static data
filters under Access > Static Data Filter as applicable.

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 39

Applications Functions
Examples To remove the static data filter called MyStaticDF, you need the
function RemoveStaticDataFilter, and you need read-write access to MyStaticDF. To
use MyStaticDF for loading data, you need read-only or read-write access to
MyStaticDF.

CreateStaticDataFilter
Permission to create static data filters.

ModifyStaticDataFilter
Permission to modify static data filters.

RemoveStaticDataFilter
Permission to remove static data filters.
Filter Set Access permissions for filter sets are twofold:
- The user must be granted the functions described below as applicable.
- The user must be granted read-only or read-write access to individual filter sets
under Access > Filter Set as applicable.
Examples To modify the filter set called MyFilterSet, you need the function
ModifyFilterSet, and you need read-write access to MyFilterSet. To use MyFilterSet
for loading trades, you need read-only or read-write access to MyFilterSet.

CreateFilterSet
Permission to create filter sets.

CreateTradeSelectorTemplate
Permission to create filter set templates.

ModifyFilterSet
Permission to modify filter sets.

RemoveFilterSet
Permission to remove filter sets.

2. 7. 6 LEGA L D A T A
Configuration > Legal Data
Applications Functions
Legal Entities CreateLegalEntity
Permission to create legal entities of any status.
To restrict the creation of legal entities by status, use the
CreateLegalEntityDisabled, CreateLegalEntityEnabled and
CreateLegalEntityPending functions instead.
Example - If you want to allow users to create legal entities in status Pending only,
do not assign the function CreateLegalEntity but assign the function
CreateLegalEntityPending instead.

CreateLegalEntityDisabled, CreateLegalEntityEnabled,
CreateLegalEntityPending
Permission to create legal entities based on the corresponding status only:
disabled, pending, or enabled.
This can be useful when the authorization mode is not enabled. For
example, a user creates a legal entity in status pending, and the supervisor
40 Access Permissions

Applications Functions
changes the status to enabled.
If the authorization mode is enabled, a user can create a legal entity in any
status, and the supervisor will authorize the legal entity. These functions
are not needed in that case.
To create legal entities of any status, use the CreateLegalEntity function
instead.

ModifyLegalEntity
Permission to modify legal entities of any status.
To restrict the modification of legal entities by status, use the
ModifyLegalEntityDisabled, ModifyLegalEntityEnabled and
ModifyLegalEntityPending functions instead.
Example - If you want to allow users to modify legal entities in status Pending only,
do not assign the function ModifyLegalEntity but assign the function
ModifyLegalEntityPending instead.

ModifyLegalEntityDisabled, ModifyLegalEntityEnabled,
ModifyLegalEntityPending
Permission to modify legal entities based on the corresponding status:
disabled, pending, or enabled.
To create legal entities of any status, use the ModifyLegalEntity function
instead.

RemoveLegalEntity
Permission to remove legal entities.

ModifyALLProcessingOrgStaticData
Permission to modify legal entities associated with the ALL processing org.
Without this permission, a user who has the function
ModifyOnlyProcessingOrgStaticData will not be able to modify static data
associated with the processing org ALL.

ModifyOnlyProcessingOrgStaticData
Restriction to only modify the legal entities associated with the processing
orgs of the user currently connected. User processing orgs are specified
using Configuration > User Access Control > Access Permissions -
User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgStaticData
Restriction to only view the legal entities associated with the processing
orgs of the user currently connected. User processing orgs are specified
using Configuration > User Access Control > Access Permissions -
User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
Attributes AddModifyLEAttribute
Permission to create and modify legal entity attributes.

RemoveLEAttribute
Permission to remove legal entity attributes.

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 41

Applications Functions
ModifyALLProcessingOrgStaticData
Permission to modify LE attributes associated with the ALL processing org.
Without this permission, a user who has the function
ModifyOnlyProcessingOrgStaticData will not be able to modify static data
associated with the processing org ALL.

ModifyOnlyProcessingOrgStaticData
Restriction to only modify the LE attributes associated with the processing
orgs of the user currently connected. User processing orgs are specified
using Configuration > User Access Control > Access Permissions -
User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgStaticData
Restriction to only view the LE attributes associated with the processing
orgs of the user currently connected. User processing orgs are specified
using Configuration > User Access Control > Access Permissions -
User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

Access Permissions per Attributes

To set access permissions per legal entity attribute, set the comment of the
attribute to allowAccessPermission in the leAttributeType domain.
Example:

It creates the access functions AddModifyLEAttribute#ACCOUNTING and

RemoveLEAttribute#ACCOUNTING.
Attribute Code CreateReferenceData
Permission to create LE attribute codes.

RemoveLegalData
Permission to remove LE attribute codes.
Legal Entity EOD AddModifyLERelation
Permission to create and modify EOD data for legal entities.

RemoveLERelation
Permission to remove EOD data for legal entities.
Disabled Roles ModifyLegalData
Permission to disable LE roles.
42 Access Permissions

Applications Functions
RemoveLegalData
Permission to remove disabled roles.

ModifyALLProcessingOrgStaticData
Permission to disable roles associated with the ALL processing org.
Without this permission, a user who has the function
ModifyOnlyProcessingOrgStaticData will not be able to modify static data
associated with the processing org ALL.

ModifyOnlyProcessingOrgStaticData
Restriction to only disable the roles associated with the processing orgs of
the user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgStaticData
Restriction to only view the disabled roles associated with the processing
orgs of the user currently connected. User processing orgs are specified
using Configuration > User Access Control > Access Permissions -
User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
Legal Agreements CreateLegalAgreement
Permission to create legal agreements.

ModifyLegalAgreement
Permission to modify legal agreements.

RemoveLegalAgreement
Permission to remove legal agreements.

ModifyALLProcessingOrgStaticData
Permission to modify the legal agreements associated with the ALL
processing org.
Without this permission, a user who has the function
ModifyOnlyProcessingOrgStaticData will not be able to modify static data
associated with the processing org ALL.

ModifyOnlyProcessingOrgStaticData
Restriction to only modify the legal agreements associated with the
processing orgs of the user currently connected. User processing orgs are
specified using Configuration > User Access Control > Access
Permissions - User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgStaticData
Restriction to only view the legal agreements associated with the processing
orgs of the user currently connected. User processing orgs are specified

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 43

Applications Functions
using Configuration > User Access Control > Access Permissions -
User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
Contact Personnel CreateLEContact
Permission to create LE contacts.

ModifyLEContact
Permission to modify LE contacts.

RemoveLEContact
Permission to remove LE contacts.

ModifyALLProcessingOrgStaticData
Permission to modify the contacts associated with the ALL processing org.
Without this permission, a user who has the function
ModifyOnlyProcessingOrgStaticData will not be able to modify static data
associated with the processing org ALL.

ModifyOnlyProcessingOrgStaticData
Restriction to only modify the contacts associated with the processing orgs
of the user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgStaticData
Restriction to only view the contacts associated with the processing orgs of
the user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
Registration Details CreateLegalEntityRegistration
Permission to create LE registrations.

ModifyLegalEntityRegistration
Permission to modify LE registrations.

RemoveLegalEntityRegistration
Permission to remove LE registrations.
Legal Entity Relation AddModifyLERelation
Permission to create and modify LE relations.

RemoveLERelation
Permission to remove LE relations

ModifyALLProcessingOrgStaticData
Permission to modify the LE relations associated with the ALL processing
44 Access Permissions

Applications Functions
org.
Without this permission, a user who has the function
ModifyOnlyProcessingOrgStaticData will not be able to modify static data
associated with the processing org ALL.

ModifyOnlyProcessingOrgStaticData
Restriction to only modify the LE relations associated with the processing
orgs of the user currently connected. User processing orgs are specified
using Configuration > User Access Control > Access Permissions -
User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgStaticData
Restriction to only view the LE relations associated with the processing orgs
of the user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
Industry Hierarchy CreateModifyIndustryHierarchy
Permission to create or modify an industry hierarchy.

RemoveIndustryHierarchy
Permission to delete an industry hierarchy.

ViewIndustryHierarchy
Permission to open the industry hierarchy window.

2.8 R E P ORTING AND R ISK

2. 8. 1 POSIT ION & R ISK

Position & Risk
Applications Functions
Calypso Workstation AddVisokioTemplate
Permission to create Visokio templates

RemoveVisokioTemplate
Permission to remove Visokio templates

RiskPresenterDefaultViewConfig
Permission to set a default view

DistributeCWSNodes
Permission to distribute report nodes.

DistributeCWSReportPlans
Permission to distribute report views.

DistributeCWSDrillDowns

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 45

Applications Functions
Permission to distribute drill-down views.

DistributeCWSSpeedButtons
Permission to distribute CWS speed buttons.

DistributeCWSWindowPlans
Permission to distribute window plans (layout).

DistributeCWSConfigWithGroup
This is a restriction so that the user can only distribute CWS items to other
users within the same group.
On Demand Analysis The On Demand Analysis window can be accessed from the Trade Blotter, the
Pricing Sheet, the Calypso Workstation, and the Trade Windows.

ConfigureODAServers
Permission to modify the selection of default calculation server,
presentation server, market data server, dispatcher.

ConfigureODAShortcuts
Permission to configure input shortcuts and analysis shortcuts.

DistributeODAShortcuts
Permission to distribute input shortcuts and analysis shortcuts to other
users.

DistributeODASpeedButtons
Permission to distribute speed buttons to other users.
If the speed button contains a CWS report view, the view must be
distributed from the Calypso Workstation.

ODAAdhocAnalysis
Permission to run Ad Hoc analyses.

ODAAdhocTradeFilter
Permission to select a trade filter in the Ad Hoc and On Demand panels.
Risk Analysis Launcher > All Access permissions for risk analysis configurations are twofold:
risk analyses - The user must be granted the functions described below as applicable.
- The user must be granted read-only or read-write access to individual risk
analysis configurations under Access > Risk Config as applicable.
Examples To remove the risk analysis configuration called MyRiskConfig, you
need the function RemoveRiskAnalysisConfig, and you need read-write access to
MyRiskConfig. To use MyRiskConfig for running risk analyses, you need read-only
or read-write access to MyRiskConfig.

[NOTE: Functions like checking market data and previewing risk results can only
be performed by an Admin user (a user from a "Is Admin" group)]

CreateRiskAnalysisConfig
Permission to create risk analysis configurations.

ModifyRiskAnalysisConfig
Permission to modify risk analysis configurations.

RemoveRiskAnalysisConfig
Permission to remove risk analysis configurations.
46 Access Permissions

Applications Functions
Risk Analysis Launcher > All Access permissions for parameter viewers are twofold:
risk parameter viewers - The user must be granted the functions described below as applicable.
- The user must be granted read-only or read-write access to individual Analysis
Parameter Sets under Access > Analysis Param Set as applicable.
Examples To modify the analysis parameter set called SecurityAccrual#default,
you need the function ModifyAnalysisParam, and you need read-write access to
SecurityAccrual#default. To use SecurityAccrual#default in a risk analysis
configuration, you need read-only or read-write access to SecurityAccrual#default.

CreateAnalysisParam
Permission to create analysis parameter sets.

ModifyAnalysisParam
Permission to modify analysis parameter sets.

RemoveAnalysisParam
Permission to remove analysis parameter sets.
Display Risk Report ViewRiskReport
Permission to run Display Risk Report.
P&L Mark > P&L Mark CreateSystemPLMark
Adjustment
Permission to adjust System P&L Marks.
P&L Mark > P&L Mark Report UnlockMarks
Permission to unlock marks. When you right-click a mark, the menu items
"Unlock Book" and "Unlock Marks for Selected Trade" will be available, if
marks have been locked.

2. 8. 2 R EPOR T S
Reports
Applications Functions
All reports with templates Private report templates can be used only by the user who creates them, and public
report templates can be used by any user, provided the proper permissions are
granted.
PRI VAT E R EPOR T T EM PL A T ES

CreatePrivateReportTemplates
Permission to create private report templates.

ModifyPrivateReportTemplates
Permission to modify private report templates. Only the user who created a
private report template can modify it.

RemovePrivateReportTemplates
Permission to modify private report templates. Only the user who created a
private report template can remove it.
PUBLIC R EPOR T T EM PL A T ES
Access permissions for using public report templates are twofold:
- The user must be granted the functions described below as applicable.
- The user must be granted read-only or read-write access to individual report
templates under Access > Report Templates as applicable.

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 47

Applications Functions
Example To remove the public report template called MyReportTmpl, you need
the function RemovePublicReportTemplates, and you need read-write access to
MyReportTmpl. To use MyReportTmpl in a report, you need read-only or read-write
access to MyReportTmpl.

CreatePublicReportTemplates
Permission to create public report templates.

ModifyPublicReportTemplates
Permission to modify public report templates.

RemovePublicReportTemplates
Permission to remove public report templates.
LOA D I N G R EPOR T T EM PL A T E

AddStandardReportTemplates
Permission to load report templates that are available under
resources/com/calypso/tk/report/templates in
Configuration > Reporting & Risk > Report Templates and the
corresponding report window.

AdmPurgeReportTemplates
Permission to purge report templates.
Accounting Reports >
See also All trade windows for information about all access permissions
Account Enrichment (CRE) required for viewing and entering trades.

ModifyOnlyProcessingOrgTrade
Restriction to only modify the trades associated with the processing orgs of
the user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

SaveManualCre
Controls Process > Edit.
Permission to save manual CREs provided the ModifyBOPosting function is
also granted.

ViewOnlyProcessingOrgTrade
Restriction to only view the trades associated with the processing orgs of
the user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
Accounting Reports >
See also All trade windows for information about all access permissions
Account Enrichment (CRE) required for viewing and entering trades.

SaveManualCre
Controls Process > Edit.
48 Access Permissions

Applications Functions
Permission to save manual CREs provided the ModifyBOPosting function is
also granted.
Accounting Reports > Posting ModifyBOPosting
Report
Controls Edit > Edit.
Permission to modify posting details.
Fees & Settlement >
See also All trade windows for information about all access permissions
Cashflow Report required for viewing and entering trades.

ModifyOnlyProcessingOrgTrade
Restriction to only modify the trades associated with the processing orgs of
the user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgTrade
Restriction to only view the trades associated with the processing orgs of
the user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
Fees & Settlement >Transfer ModifyALLProcessingOrgStaticData
Report
Permission to modify the books associated with the ALL processing org.
Without this permission, a user who has the function
ModifyOnlyProcessingOrgStaticData will not be able to modify static data
associated with the processing org ALL.

ModifyOnlyProcessingOrgStaticData
Restriction to only modify the books associated with the processing orgs of
the user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgStaticData
Restriction to only view the books associated with the processing orgs of the
user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
Message Reports > Message ModifyALLProcessingOrgStaticData
Report
Permission to modify the books associated with the ALL processing org.
Without this permission, a user who has the function
ModifyOnlyProcessingOrgStaticData will not be able to modify static data
associated with the processing org ALL.

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 49

Applications Functions
ModifyOnlyProcessingOrgStaticData
Restriction to only modify the books associated with the processing orgs of
the user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgStaticData
Restriction to only view the books associated with the processing orgs of the
user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
Nostro/Custodian Positions > EditAccountSweepingDetail
Inventory Position
Permission to edit the sweeping details when you bring up the Pool
Consolidation window.
Report Browser Controls the Report Browser configurations.
Configurations
CreateReportBrowserConfig
Permission to create configurations.

ModifyReportBrowserConfig
Permission to modify configurations.

RemoveReportBrowserConfig
Permission to remove configurations.
SDI Report ModifyALLProcessingOrgStaticData
Permission to modify the books associated with the ALL processing org.
Without this permission, a user who has the function
ModifyOnlyProcessingOrgStaticData will not be able to modify static data
associated with the processing org ALL.

ModifyOnlyProcessingOrgStaticData
Restriction to only modify the books associated with the processing orgs of
the user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgStaticData
Restriction to only view the books associated with the processing orgs of the
user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
50 Access Permissions

Applications Functions
Trade Price Report Controls permissions in Trade Price report (menu action
reporting.ReportWindow$PricerFromDB).
DeletePriceFromTradePriceReport
Permission to delete pricer measure values.

ReadPriceFromTradePriceReport
Permission to import pricer measure values.

SavePriceFromTradePriceReport
Permission to save pricer measure values.

2. 8. 3 R EPOR T IN G & R ISK C ON F IGU R A T ION

Configuration > Reporting & Risk
Applications Functions
Report Templates Private report templates can be used only by the user who creates them, and public
report templates can be used by any user, provided the proper permissions are
granted.
PRI VAT E R EPOR T T EM PL A T ES

CreatePrivateReportTemplates
Permission to create private report templates.

ModifyPrivateReportTemplates
Permission to modify private report templates. Only the user who created a
private report template can modify it.

RemovePrivateReportTemplates
Permission to modify private report templates. Only the user who created a
private report template can remove it.
PUBLIC R EPOR T T EM PL A T ES
Access permissions for using public report templates are twofold:
- The user must be granted the functions described below as applicable.
- The user must be granted read-only or read-write access to individual report
templates under Access > Report Templates as applicable.
Example To remove the public report template called MyReportTmpl, you need
the function RemovePublicReportTemplates, and you need read-write access to
MyReportTmpl. To use MyReportTmpl in a report, you need read-only or read-write
access to MyReportTmpl.

CreatePublicReportTemplates
Permission to create public report templates.

ModifyPublicReportTemplates
Permission to modify public report templates.

RemovePublicReportTemplates
Permission to remove public report templates.
LOA D I N G R EPOR T T EM PL A T ES

AddStandardReportTemplates

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 51

Applications Functions
Permission to load report templates that are available under
resources/com/calypso/tk/report/templatesfrom Report
Templates, from the corresponding report window.

AdmPurgeReportTemplates
Permission to purge report templates.
Risk Calculation Service Access permissions for the risk calculation service are twofold:
- The user must be granted the functions described below as applicable.
- The user must be granted read-only or read-write access to individual risk
calculation configurations under Access > Risk OnDemand Config as applicable.

ModifyRiskOnDemandConfig
Permission to modify risk calculation configurations.

RiskOnDemandConfigAccess
Permission to stop a calculation server.
Risk Presentation Service Access permissions for the risk presentation service are twofold:
- The user must be granted the functions described below as applicable.
- The user must be granted read-only or read-write access to individual risk
presentation configurations under Access > Risk Presenter Config as applicable.

CreatePresentationServerConfig
Permission to modify risk presentation configurations.

ModifyRiskPresenterConfig
Permission to modify risk presentation configurations.

RiskPresenterConfigAccess
Permission to stop a risk presentation server.

2.9 S CHE DULE D T AS KS

Configuration > Scheduled Tasks
Applications Functions
Scheduled Tasks Access permissions for scheduled tasks are twofold:
- The user must be granted the functions described below as applicable.
- The user must be granted read-only or read-write access to individual scheduled
tasks under Access > Scheduled Task as applicable.
Examples To modify a configuration for the BALANCE scheduled task, you need
the function ModifyScheduledTask, and you need read-write access to the
BALANCE scheduled task. To run the BALANCE scheduled task, you need read-only
or read-write access to the BALANCE scheduled task.

ModifyScheduledTask
Permission to modify scheduled task configurations.
[NOTE: To modify the Archive scheduled task, the ModifyScheduledTask_
ARCHIVE function also has to be granted]

ModifyScheduledTask_ARCHIVE
Permission to modify the Archive scheduled task configurations provided
the ModifyScheduledTask permission is also granted.

ModifyScheduledTask_DELETE_PRODUCTS
Permission to modify the DELETE_PRODUCTS scheduled task configurations
52 Access Permissions

Applications Functions
provided the ModifyScheduledTask permission is also granted.

ModifyScheduledTask_DELETE_TRADES
Permission to modify the DELETE_TRADES scheduled task configurations
provided the ModifyScheduledTask permission is also granted.

ExecuteManualScheduledTask
Permission to manually execute a scheduled task.

ModifyALLProcessingOrgStaticData
Permission to modify scheduled tasks associated with the ALL processing
org.
Without this permission, a user who has the function
ModifyOnlyProcessingOrgStaticData will not be able to modify static data
associated with the processing org ALL.

ModifyOnlyProcessingOrgStaticData
Restriction to only modify the scheduled tasks associated with the
processing orgs of the user currently connected. User processing orgs are
specified using Configuration > User Access Control > Access
Permissions - User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgStaticData
Restriction to only view the scheduled tasks associated with the processing
orgs of the user currently connected. User processing orgs are specified
using Configuration > User Access Control > Access Permissions -
User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
SCHEDUL E T ASK EOD _ PLMA R K IN G
- For setting marks: CreatePLMark
- For modifying marks: ModifyPLMark
SCHEDUL ED T ASK GEN ER A TE_ C OMM_ FU TU R ES
- For saving the default quote type: ModifyDefaultQuoteType.
SCHEDUL ED T ASK LOA D _ MA R K IT_ R ED _ D A TA
- For creating entities: CreateLegalEntity and AddModifyLEAttribute.
- For updating entities: ModifyLegalEntity and AddModifyLEAttribute.
- For creating obligations: CreateProduct and ModifyProduct.
- For creating ratings: CreateLECreditRating and ModifyLECreditRating.
SCHEDUL ED T ASK LOA D _ MA R K IT_ C D S_ SPR EA D _ D A TA
- For saving spread quotes: ModifyMktDataQuotes, ModifyMarketData,
ModifyMktDataQuotesLAST, ModifyMktDataQuotesOPEN, and
ModifyMktDataQuotesCLOSE.
- For creating underlyings: CreateCurveUnderlying and ModifyCurveUnderlying.
- For creating curves: CreateMarketData, ModifyMarketData, and
ModifyMarketDataConfig.
- For creating ratings: CreateLECreditRating, ModifyLECreditRating.

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 53

Applications Functions
- For updating attributes: AddModifyLEAttribute.
SCHEDUL ED T ASK LOA D _ MA R K IT_ C D S_ IN D EX_ D A TA
- For creating CDS indices: CreateProduct and ModifyProduct.
SCHEDUL ED T ASK LOA D _ MA R K IT_ TR A N C H E_ QU OTES_ D A TA
- For saving tranche quotes: ModifyMktDataQuotes, ModifyMarketData,
ModifyMktDataQuotesLAST, ModifyMktDataQuotesOPEN, and
ModifyMktDataQuotesCLOSE.
SCHEDUL ED T ASK PR OC ESS_ EXPIR Y
- To process trades: OperationsProcessing.
- To apply the selected action to a trade: the products must specify what workflow
actions the user is allowed to perform using the Product Access panel.
SCHEDUL ED T ASK PR OC ESS_ TR A D E
- To process trades: OperationsProcessing.
- To apply the selected action to a trade: the products must specify what workflow
actions the user is allowed to perform using the Product Access panel.

2.10 S E TTLE M E NTS

Configuration > Settlements
Applications Functions
Cash Manual SDI ModifyLEManualSDIDefaultedValues
Permission to modify default values.

AllowUpdateTagsWithManualSdi
Permission to save a manual SDI without Additional TAGS, and to apply
action UPDATE_TAGS on manual SDIs.
SDI Tree ModifyALLProcessingOrgStaticData
Permission to modify SDIs associated with the ALL processing org.
Without this permission, a user who has the function
ModifyOnlyProcessingOrgStaticData will not be able to modify static data
associated with the processing org ALL.

ModifyOnlyProcessingOrgStaticData
Restriction to only modify the SDIs associated with the processing orgs of
the user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgStaticData
Restriction to only view the SDIs associated with the processing orgs of the
user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
Settlement Instructions CreateLEProcessingOrgSDI
54 Access Permissions

Applications Functions
Permission to create SDIs for processing orgs provided the CreateLESDI
function is also granted.

CreateLESDI
Permission to create SDIs for all roles, except for processing organizations.
To create SDIs for processing organizations, the CreateLEProcessingOrgSDI
function is also needed.

ModifyLegalData
Controls the R-Ship button.
Permission to create and modify SDI relationships.

ModifyAccountHolderSDI
Permission to modify SDIs for which the role is defined in domain
AccountHolderRole. You also need permission ModifyLESDI.

ModifyLEProcessingOrgSDI
Permission to modify SDIs for processing orgs provided the ModifyLESDI
function is also granted.

ModifyLESDI
Permission to modify SDIs for all roles, except for processing organizations.
To create SDIs for processing organizations, the
ModifyLEProcessingOrgSDI function is also needed.

ModifyUsedSDI
Allows overriding the behavior when the environment property USE_OLD_
SDI_VALIDATION is false. In this case, the user will be able to update the
existing SDI, rather than creating two SDIs with effective to and from dates.

RemoveLegalData
Controls the R-Ship button.
Permission to remove SDI relationships.

RemoveLEProcessingOrgSDI
Permission to remove SDIs for processing orgs provided the RemoveLESDI
function is also granted.

RemoveLESDI
Permission to remove SDIs for all roles, except for processing
organizations.
To remove SDIs for processing organizations, the
RemoveLEProcessingOrgSDI function is also needed.

ModifyALLProcessingOrgStaticData
Permission to modify SDIs associated with the ALL processing org.
Without this permission, a user who has the function
ModifyOnlyProcessingOrgStaticData will not be able to modify static data
associated with the processing org ALL.

ModifyOnlyProcessingOrgStaticData
Restriction to only modify the SDIs associated with the processing orgs of
the user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 55

Applications Functions
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgStaticData
Restriction to only view the SDIs associated with the processing orgs of the
user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
Manual SDI AddModifyLEManualSDI
Permission to create and modify manual SDIs.

RemoveLEManualSDI
Permission to remove manual SDIs.
Settlement Method ModifyLegalData
Permission to modify settlement methods.

RemoveLegalData
Permission to remove settlement methods.

ModifyALLProcessingOrgStaticData
Permission to modify the settlement methods associated with the ALL
processing org.
Without this permission, a user who has the function
ModifyOnlyProcessingOrgStaticData will not be able to modify static data
associated with the processing org ALL.

ModifyOnlyProcessingOrgStaticData
Restriction to only modify the settlement methods associated with the
processing orgs of the user currently connected. User processing orgs are
specified using Configuration > User Access Control > Access
Permissions - User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgStaticData
Restriction to only view the settlement methods associated with the
processing orgs of the user currently connected. User processing orgs are
specified using Configuration > User Access Control > Access
Permissions - User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
Settlement Message Sending ModifyLegalData
Permission to modify settlement message configurations.

RemoveLegalData
Permission to remove settlement message configurations.

ModifyALLProcessingOrgStaticData
56 Access Permissions

Applications Functions
Permission to modify the settlement message configurations associated
with the ALL processing org.
Without this permission, a user who has the function
ModifyOnlyProcessingOrgStaticData will not be able to modify static data
associated with the processing org ALL.

ModifyOnlyProcessingOrgStaticData
Restriction to only modify the settlement message configurations associated
with the processing orgs of the user currently connected. User processing
orgs are specified using Configuration > User Access Control > Access
Permissions - User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgStaticData
Restriction to only view the settlement message configurations associated
with the processing orgs of the user currently connected. User processing
orgs are specified using Configuration > User Access Control > Access
Permissions - User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
Netting Configuration ModifyNettingConfig
Permission to create, modify and delete netting configurations provided the
RunConfigWindow function is also granted.

RunConfigWindow
Permission to run Netting Configuration.
Netting Method ModifyLegalData
Permission to modify netting methods.

RemoveLegalData
Permission to remove netting methods.

ModifyALLProcessingOrgStaticData
Permission to modify the netting methods associated with the ALL
processing org.
Without this permission, a user who has the function
ModifyOnlyProcessingOrgStaticData will not be able to modify static data
associated with the processing org ALL.

ModifyOnlyProcessingOrgStaticData
Restriction to only modify the netting methods associated with the
processing orgs of the user currently connected. User processing orgs are
specified using Configuration > User Access Control > Access
Permissions - User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgStaticData
Restriction to only view the netting methods associated with the processing
orgs of the user currently connected. User processing orgs are specified

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 57

Applications Functions
using Configuration > User Access Control > Access Permissions -
User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
Target Directory ModifyTargetDirectory
Permission to add/modify/delete an entry within the Target Directory window.

2.11 SYSTEM

2. 11. 1 EN GIN ES
Applications Functions
Engines In order to run an engine, the user must be granted read-write access to the
corresponding application under Access > Application Name.
- AccountingEngine
- Calculator
- CreEngine
- CreSenderEngine
- Dispatcher
- GSSCIncomingMessageEngine
- ImportMessageEngine
- InventoryEngine
- LiquidationEngine
- MarginCallPositionEngine
- MatchingMessageEngine
- MessageEngine
- PositionEngine
- SchedulingEngine
- SenderEngine
- TaskEngine
- TransferEngine
- etc.

2. 11. 2 SYST EM C ON F IGU R A T ION

Configuration > System
Applications Functions
Engine Configuration ModifyDomains
Permission to add and modify engine names provided the
RunConfigWindow function is also granted.

ModifyEngineConfig
Permission to create, modify and delete engine configurations provided the
RunConfigWindow function is also granted.

RunConfigWindow
Permission to run Engine Configuration.
58 Access Permissions

Applications Functions
Event Configuration ModifyEventConfig
Permission to create, modify and delete event configurations provided the
RunConfigWindow function is also granted.

RunConfigWindow
Permission to run Event configuration.
Dispatcher Configuration Access permissions for dispatcher configurations are twofold:
- The user must be granted the functions described below as applicable.
- The user must be granted read-only or read-write access to individual dispatcher
configurations under Access > Dispatcher Config as applicable.
Examples To modify a dispatcher configuration called MyDispatchConfig, you
need the function ModifyDispatcherConfig, and you need read-write access to
MyDispatchConfig. To use MyDispatchConfig for running a dispatcher, you need
read-only or read-write access to MyDispatchConfig.

CreateDispatcherConfig
Permission to create dispatcher configurations provided the
RunConfigWindow function is also granted.

ModifyDispatcherConfig
Permission to modify dispatcher configurations provided the
RunConfigWindow function is also granted.

RemoveDispatcherConfig
Permission to remove dispatcher configurations provided the
RunConfigWindow function is also granted.

RunConfigWindow
Permission to run Dispatcher Configuration.
Calculation Server Access permissions for calculation server configurations is twofold:
- The user must be granted the functions described below as applicable.
- The user must be granted read-only or read-write access to individual calculation
server configurations under Access > Calculation Server Config as applicable.

CreateCalculationServerConfig
Permission to create new calculation server configurations.

ModifyCalculationServerConfig
Permission to modify calculation server configurations.

RemoveCalculationServerConfig
Permission to delete calculation server configurations.
Domain Values CreateDomainConstraints
Permission to create domain constraints (ranges of values for domain data).

CreateDomains
Permission to create domains and domain values.
[NOTE: Domain values can be added to domains in most windows through
the Add Domain window, and this permission will be required]

ModifyDomains
Permission to modify domains and domain values.
[NOTE: Domain values can be modified in most windows through the Add

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 59

Applications Functions
Domain window, and this permission will be required]

RemoveDomains
Permission to remove domains and domain values.
[NOTE: Domain values can be removed from domains in most windows
through the Add Domain window, and this permission will be required]
Rating Values RemoveDomains
Permission to remove rating values.
Add Pricer ModifyTKConfigData
Permission to register custom pricers.

RemoveTKConfigData
Permission to remove custom pricers.
Add Pricer Measure ModifyDomains
Permission to register custom pricer measures.
Add Pricing Parameter Type ModifyTKConfigData
Permission to register custom pricing parameters.

RemoveTKConfigData
Permission to remove custom pricing parameters.
Analysis Viewer ModifyTKConfigData
Configuration
Permission to register custom analysis viewers.
Flow Configuration ModifyTKConfigData
Permission to register custom cashflow generators.

RemoveTKConfigData
Permission to remove custom cashflow generators.

2. 11. 3 SYST EM ENV

Applications Functions
System Env In order to run System Env, the user must be granted read-write access to the
SystemEnv application under Access > Application Name.

2. 11. 4 USER ENV

Applications Functions
User Env In order to run User Env, the user must be granted read-write access to the
UserEnv application under Access > Application Name.

2.12 T RADING

2. 12. 1 A L L TR A D E W IN D OWS
Trade
Applications Functions
All trade windows Access permissions for trades are multifold:
- The user must be granted the functions described below as applicable.
- The user must be granted read-write access to individual books under Access >
60 Access Permissions

Applications Functions
Books as applicable.
- The user must be granted read-write access to individual book bundles under
Access > BookBundle if the BookBundle attribute is specified on the book.
- The user must be granted read-write access to individual product types under
Access > Product Types as applicable.
- The user must be granted read-write access to individual products under Access
> Products Trading as applicable.
- The book must specify the currencies, currency pairs and products that can be
traded in that book using the Book Access panel. These permissions apply
regardless of the user.
- The products must specify what workflow actions the user is allowed to perform
using the Product Access panel.
- In order to use or modify product templates, the user must be granted read-write
or read-only access to individual product templates under Access > Product
Templates as applicable.
Examples To enter a USD bond trade on MyBook, you need the SaveTrade
function, you need read-write access to MyBook, you need read-write access to
the Bond product type, you need read-write access to a static data filter that
contains the USD bond, MyBook needs permission to trade the USD currency and
the Bond product, and you need permission to apply the NEW action on the Bond
product.
To view a trade, you need read-only or read-write access to MyBook, read-only or
read-write access to the trades product type, and read-only or read-write access
to the static data filter that contains the USD bond.

AllowExoticTrade
Permission to select the Exotic leg type.

AllowReadOnlyStructuredWindow
Restriction to bring up the Structure Window in read-only mode.

AssignOverrideKeys
Permission to define market data / pricer override keys.

CreatePrivateProductTemplates
Permission to create private product templates.

CreatePublicProductTemplates
Permission to create public product templates.

CustomizeCashflows
Controls the Cashflow panel.
Permission to customize cashflows.

ModifyB2BLinkedTrade
Permission to modify individual mirror trades. Otherwise, only the main
trade can be modified provided the user has permission to amend trades.

ModifyOverrideKeys
Permission to modify market data /pricer override keys.

ModifyTrade
Permission to modify a trade.

ModifyTradeCurrentDateTimeCheck

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 61

Applications Functions
Controls the Details panel.
Permission to modify the Current Trade Date Time checkbox.

SaveAsNewTrade
Permission to save a trade as a new trade.

SaveTrade
Permission to create a trade.

ViewArchivedTradeOnline
Permission to load an individual archived trade using the Trade Id field.

ViewPendingProcessing
Controls Trade > Trade Pending Processing.
Permission to view events that are pending processing. The menu items will
not appear if the function is not granted.
All trade windows > Back
See also All trade windows for information about all access permissions
Office > BO Window required for viewing and entering trades.

AllowInsertRemoveTransferRules
Controls Back Office > BO Window SDI panel.
Permission to insert or remove transfer rules.

ModifyBOTrade
Permission to modify BO details.

ViewBOTrade
Permission to view BO details.

ViewOnlyProcessingOrgTrade
Restriction to only view the back office details of the processing orgs of the
user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
All trade windows > Back CreateMutation
Office > Mutation
Permission to create mutations for vanilla OTC Equity options.

ModifyMutation
Permission to modify mutations for vanilla OTC Equity options.
All trade windows > Keyword ModifyTradeSystemKeyword
window
Permission for modify the value of trade keywords that have been set by the
system. The list of system trade keywords is specified in the
systemKeyword domain.
All trade windows > Product- CreateSpecificResets
specific menu > Specific
Permission to create specific resets provided the ViewSpecificResets
Resets
function is also granted.

RemoveSpecificResets
Permission to remove specific resets provided the ViewSpecificResets
function is also granted.
62 Access Permissions

Applications Functions
ViewSpecificResets
Permission to run Specific Resets.
All trade windows > Product- ModifyTerminationDates
specific menu > Termination
Permission to modify termination dates.
Date
FX Trade Windows Access permissions for the trade panels and components in the FX trade windows.

Foreign Exchange > Forward - The environment property FXTRADE_PERMISSIONING=true must be set to enable
the permissions in the FX trade windows.
Foreign Exchange > FX Swap
FXTradingSalesMargin
Foreign Exchange > Non-
Deliverable Forward Permission to show the Sales Margin panel for sales users.

Foreign Exchange > Spot FXTradingBroker

Foreign Exchange > Spot Permission to show the Broker field for trader users.
Reserve FXTradingInternal
Foreign Exchange > TTM Permission to show the Internal Counterparty toggle for trader users.
Foreign Exchange > FX Deal In addition to the access permissions required for "All trade windows", the
Station following function can also be granted.

DealCaptureLayoutCustomization
Permission to customize the layout.
Pricing Script CreatePricingScript
Permission to create pricing scripts

ModifyPricingScript
Permission to modify pricing scripts

RemovePricingScript
Permission to remove pricing scripts

2. 12. 2 D EA L MA N A GEMEN T
Deal Management
Applications Functions
Calypso Activity Browser CRMAccessConfig
Permission to access the Calypso Activity Browser.

CRMConfigAdmin
Permission to use the Relationship and User tabs.
Trade Browser
See also All trade windows for information about all access permissions
required for viewing and entering trades.

ModifyOnlyProcessingOrgTrade
Restriction to only modify the trades associated with the processing orgs of
the user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgTrade

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 63

Applications Functions
Restriction to only view the trades associated with the processing orgs of
the user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

UseProcessingOrgHierarchy
If the PO Child checkbox is checked and this access permission is not
granted, the behavior does not change; i.e. only the first level of children of
the given PO are used in trade selection. If this access permission is
granted, the whole tree of children of the given PO is used in trade
selection.

2. 12. 3 PRICING SHEET

Pricing > Pricing Sheet
Applications Functions
Pricing Sheet
See also All trade windows for information about all access permissions
required for viewing and entering trades.

ControlPricingSheetMarketData
Permission to:
Change the selected Pricing Env
Access Market Data-related windows
Edit spot quote
Edit real-time parameter

PricingSheetAccessBackOffice
Permission to access Audit and BO Browser.

PricingSheetProfilePropertiesConfigAccess
Permission to access the Profile Configuration window - Properties, Menu,
Layout panels.

PricingSheetProfileUsersConfigAccess
Permission to access the Profile Configuration window - Users panel.

PricingSheetProfileAdminAccess
Permission to access the Profile Administration window.

PricingSheetStrategyBuilderAccess
Permission to access the Strategy Builder.

PricingSheetLegDetailsEditable
Permission to modify the actual property values in the Leg Details window.

PricingSheetSettingAccess
Permission to access Global Preferences.

PricingSheetUserPreferencesAccess
Permission to access User Preferences.
64 Access Permissions

Applications Functions
[NOTE: The access permission function PricingSheetConfigAccess is not used]

2. 12. 4 TR A D E B L OT T ER
Deal Management > Trade Blotter
Applications Functions
Trade Blotter
See also All trade windows for information about all access permissions
required for viewing and entering trades.

ModifyOnlyProcessingOrgTrade
Restriction to only modify the trades associated with the processing orgs of
the user currently connected. User processing orgs are specifiedusing
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgTrade
Restriction to only view the trades associated with the processing orgs of
the user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
Trade Selector
See also All trade windows for information about all access permissions
required for viewing and entering trades.

ModifyOnlyProcessingOrgTrade
Restriction to only modify the trades associated with the processing orgs of
the user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgTrade
Restriction to only view the trades associated with the processing orgs of
the user currently connected. User processing orgs are specified using
Access Permissions > User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
Pricing Grid CreatePricingSheet
Permission to create pricing grids provided the ViewPricingSheet function is
also granted.

ModifyPricingSheet
Permission to modify pricing grids provided the ViewPricingSheet function
is also granted.

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 65

Applications Functions
RemovePricingSheet
Permission to remove pricing grids provided the ViewPricingSheet function
is also granted.

ViewPricingSheet
Permission to run Pricing Grid.

2.13 T RADE L IFE CY CLE

Trade Lifecycle
Applications Functions
Corporate Action > AddRemoveCAOption
- CA Warrant Generation Permission to add / remove outcomes to / from a corporate action.
Report
AddRemoveCAToProduct
- Corporate Action
Permission to add / remove "To Products" to /from a corporate action.
- Warrant Transformation
Report ApplyCA
Permission to apply a corporate action and generate CA trades.

CAEdition
Only applies if CreateModifyCA or ModifyCA are granted.
This is a restriction to allow a user group to modify only the fields specified
in domain "CAEdition.<user group>".
To allow a group of users to modify all the fields, do not grant them the
CAEdition function, or grant them the CAEdition function, and create the
domain "CAEdition.<user group>" that contains the value ANY.
For example, the users in user group "calypso_group" can only modify the Payment
Date - You need to create the domain "CAEdition.calypso_group" that contains the
value "Payment Date".

CreateModifyCA
New / Save / Save as New buttons.
Permission to create and modify corporate actions.

DesactivateCA
Deactivate button.
Permission to deactivate corporate actions.

ModifyCA
Save button.
Permission to modify corporate actions.

ReactivateCA
Reactivate button.
Permission to reactivate corporate actions.

RemoveCA
Controls the Create panel, Delete button.
Permission to delete corporate actions.

RevertCA
66 Access Permissions

Applications Functions
Revert button.
Permission to undo corporate actions.
Corporate Action > Credit CreateCreditEvents
Events
Permission to create credit events.

ModifyCreditEvents
Permission to modify credit events.

RemoveCreditEvents
Permission to remove credit events.
Corporate Action > Suc- ApplySuccessionEvents
cession Events
Permission to apply succession events - Apply Events panel.

CreateSuccessionEvents
Permission to create succession events - Manage Events panel.

ModifySuccessionEvents
Permission to modify succession events - Manage Events panel.

RemoveSuccessionEvents
Permission to remove succession events - Manage Events panel.
Expiration & Exercise > ModifySettlementTypeInOptExWin
Option Exercise
Permission to modify the settlement type in the Option Exercise window.

ViewOnlyProcessingOrgStaticData
Restriction to only view the data associated with the processing orgs of the
user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgTrade
Restriction to only view the trades associated with the processing orgs of
the user currently connected. User processing orgs are specified using
Access Permissions > User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
Hedge > Hedge Inception Access permissions for Hedge Relationships are twofold:
- The user must be granted the functions described below as applicable.
- The user must be granted read-write access to the Hedge Standard under Access
> Hedge Accounting Standard as applicable.
In the Hedge Inception Window, click Create New Strategy to open the Hedge
Strategy Window.

CreateHedgeRelationship
Permission to create a new hedge relationship.

CreateHedgeStrategy
Permission to create a new hedge strategy.

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 67

Applications Functions
HedgeTrades
Permission to hedge trades.

ModifyHedgeStrategy
Permission to modify a hedge strategy.

ModifyHedgeRelationship
Permission to modify a hedge relationship.

RemoveHedgeRelationship
Permission to remove a hedge relationship.

RemoveHedgeStrategy
Permission to remove a hedge strategy.
Portfolio Action > Position TransferPosition
Transfer
Permission to run Position Transfer.
Portfolio Action > Trade RunTradeTransfer
Transfer
Permission to run Trade Transfer.
Portfolio Manager PublishPortfolioManager
Controls Utilities >all publish functions.
Permission to publish the results of Portfolio Manager provided the
RunPortfolioManager function is also granted.

RunPortfolioManager
Permission to run Portfolio Manager.
Reset > FX Rate Reset CreateFXRateDef
Permission to create reset information for FX rates.

ModifyFXRateDef
Permission to modify reset information for FX rates.

RemoveFXRateDef
Permission to remove reset information for FX rates.
Reset > Price Fixing ModifyPriceFixings
Permission to create and modify price fixings.

PriceFixingAnyTrade
Controls the Add Trades button.
Permission to add individual trades for price fixing.

PublishPriceFixings
Permission to publish price fixings.

RemovePriceFixings
Permission to remove price fixings.
Reset > Rate Reset CreateRateResets
Permission to create reset information for interest rates.

ModifyRateResets
Permission to modify reset information for interest rates.
68 Access Permissions

Applications Functions
PublishRateResets
Controls the Trade Flows panel, Publish button.
Permission to publish reset information for interest rates.

RateResetAnyTrade
Controls the Add Trades button.
Permission to add individual trades for reset.

RemoveRateResets
Permission to remove reset information for interest rates.
Termination > Cash CashSettleReview
Settlement
Permission to check/clear the Reviewed/Satisfied checkbox.

CreateCashSettleInfo
Permission to create cash settlement information.

ModifyCashSettleInfo
Permission to modify cash settlement information.

RemoveCashSettleInfo
Permission to remove cash settlement information.

2.14 U S E R A CCE S S C ONTROL

Menu Configuration > User Access Control
Applications Functions
Access Permissions AccessPerm
Permission to configure access permissions, provided one of the following
functions is also granted:
- ModifyAccessPermAutoLogout
- ModifyAccessPermBookAccess
- ModifyAccessPermGroupAccess
- ModifyAccessPermGroups
- ModifyAccessPermProductAccess
- ModifyAccessPermUsers

CreateMarketDataGroup
Controls the Market Data Groups button.
Permission to create market data groups.

ModifyMarketDataGroup
Controls the Market Data Groups button.
Permission to modify market data groups.

RemoveMarketDataGroup
Controls the Market Data Groups button.
Permission to remove market data groups.

CreateUsers
Controls the Users panel.
Permission to create users provided the AccessPerm function is also

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 69

Applications Functions
granted.

ModifyUsers
Controls the Users panel.
Permission to modify users provided the AccessPerm function is also
granted.

RemoveUsers
Controls the Users panel.
Permission to remove users provided the AccessPerm function is also
granted.

ModifyAccessPermAutoLogout
Permission to modify the auto logout period provided the AccessPerm
function is also granted.

ModifyAccessPermBookAccess
Controls the Book Access panel.
Permission to modify book permissions provided the AccessPerm function is
also granted.

ModifyAccessPermGroupAccess
Controls the Group Access panel.
Permission to modify the group permissions provided the AccessPerm
function is also granted.

ModifyAccessPermGroups
Controls the Groups panel.
Permission to modify groups provided the AccessPerm function is also
granted.

ModifyAccessPermProductAccess
Controls the Product Access panel.
Permission to modify the product permissions provided the AccessPerm
function is also granted.

ModifyAccessPermUsers
Controls the Users panel.
Permission to modify users provided the AccessPerm function is also
granted.
For backward compatibility, users with this permission also have the
CreateUsers, ModifyUsers, and RemoveUsers permissions.

ModifyAdminUsers
Permission to modify admin users passwords.

ViewAccessPerm
Permission to view access permissions.
Task Access Configuration ModifyConfigData
Permission to modify task access configurations provided the
RunConfigWindow function is also granted.

ModifyUserTaskConfig
Permission to create, modify and delete task access configurations provided
70 Access Permissions

Applications Functions
the RunConfigWindow function is also granted.

RunConfigWindow
Permission to run Task Access Configuration.
[NOTE: To modify data, you also need the function ModifyConfigData]
User Defaults ModifyMyUserDefaultsOnly
Permission to modify only a users own user defaults.

ModifyUserDefaults
Permission to modify user defaults.

ModifyUserDefaultsRateDecimals
Permission to modify the Rate Decimals field in the User Defaults profile.
The ModifyUserDefaults permission in also required.
Task Station Defaults ModifyConfigData
Permission to configure defaults for the Task Station provided the
RunConfigWindow function is also granted.

RunConfigWindow
Permission to run Task Station Defaults.
[NOTE: To modify data, you also need the function ModifyConfigData]
Trade Window Configuration CreateTradeWinClassConfig
Permission to create Trade Window configurations.

ModifyTradeWinClassConfig
Permission to modify Trade Window configurations.

RemoveTradeWinClassConfig
Permission to remove Trade Window configurations.
Authorization Configuration CreateAuthConfig
Permission to create authorization configurations.

ModifyAuthConfig
Permission to modify authorization configurations.

RemoveAuthConfig
Permission to remove authorization configurations.

2.15 U TILITIES
Menu Utilities
Applications Functions
Main Entry Customizer ModifyConfigData
Permission to modify the Calypso Navigator configuration of any user
provided the function ModifyMainEntry is also granted.

ModifyMainEntry
Permission to modify the Calypso Navigator configuration of the user
currently connected.
To modify the Calypso Navigator configuration of any user, the
ModifyConfigData function also has to be granted.
Maintenance > Monitoring FullUtilitiesMenu

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 71

Applications Functions
Permission to run all utilities.

[NOTE: You need to run Utilities > Reload Access Perm in order to have access
to the full Utilities menu]
Maintenance > Monitoring > AdmShowProfiler
Profiler > Profiler
Permission to run the profiler.
Maintenance > Monitoring > AdmSaveEngineThread
Engine Thread
Permission to modify engine parameters.
Maintenance > Monitoring > AdmSubscribeUnSubEvent
Monitoring Events
Controls Subscribe and UnSubscribe buttons.
Permission to subscribe and unsubscribe to events for monitoring.
Maintenance > Monitoring > AdmArchiveCompletedTask
Clean-up > Archive All Com-
Permission to archive completed tasks.
pleted Tasks
Maintenance > Monitoring > AdmPurgeConsumedEvent
Clean-up > Purge Consumed
Permission to purge consumed events.
Events
Maintenance > Monitoring > AdmArchivingArchive
Clean-up > Clean-up Data-
Permission to archive data.
base
AdmArchivingRestore
Permission to restore archived data.

AdmArchivingDeletePermanently
Permission to delete data.

AdmArchivingDeleteFromArchive
Permission to delete archived data.

AdmCleanupDatabase
Permission to run Clean-up Database.

AdmPurgeProductTemplates
Permission to delete product templates. Note that you also need read-write
access to individual product templates.
Maintenance > Monitoring > AdmPurgeUnConsumedEvent.
Clean-up > Purge Uncon-
Permission to purge unconsumed events.
sumed Events
ViewUnconsumedEvent
Permission to display unconsumed events.
Maintenance > Monitoring > AdmCheckKickoff
Consistency > Check Kickoff
Permission to check kickoff tasks.
Maintenance > Monitoring > AdmCheckTradeOpenQty
Consistency > Check Trade
Permission to check the trade open quantity.
Open Quantity
System FullUtilitiesMenu
Permission to run all utilities.

[NOTE: You need to run Utilities > Reload Access Perm in order to have access
to the full Utilities menu]
Utilities HideUtilitiesMenu
72 Access Permissions

Applications Functions
Restriction to hide the Utilities menu.

[NOTE: This function is actually a restriction and not a permission. However, if a

group is granted all functions, this restriction will not apply. It has to be specifically
added]

2.16 W E B A DM IN
Applications Functions
Web Admin AdmLoginAttempts
Permission to delete/archive login audi trail.

RunAdminMonitor
Permission to run Web Admin.

AdmServer
Permission to perform various tasks in Web Admin.

2.17 W ORKFLOW
Menu Configuration > Workflow
Applications Functions
Custom Rule Editor The Custom Rule Editor window appears when you click Custom Rules Definition
in the Workflow Graph window or in the Workflow Configuration window.

AddCustomEditorWorkflowRule
Permission to save new custom workflow rules.

ModifyCustomEditorWorkflowRule
Permission to modify custom workflow rules.

RemoveCustomEditorWorkflowRule
Permission to remove custom workflow rules.
Workflow Graph CreateTaskWorkflowConfig
Permission to create workflow configurations provided the
RunConfigWindow function is also granted.
[NOTE: To create new actions, you also need the function
ModifyConfigData]

ModifyConfigData
Permission to save and delete actions provided the RunConfigWindow.
CreateTaskWorkflowConfig, ModifyTaskWorkflowConfig, and
RemoveTaskWorkflowConfig functions are also granted.

ModifyDomains
Permission to add and modify status codes and actions.

ModifyTaskWorkflowConfig
Permission to modify workflow configurations provided the
RunConfigWindow function is also granted.
[NOTE: To modify actions, you also need the function ModifyConfigData]

ModifyWorkflowConfig
Permission to modify workflow configurations provided the

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 73

Applications Functions
RunConfigWindow function is also granted.

RemoveTaskWorkflowConfig
Permission to remove workflow configurations provided the
RunConfigWindow function is also granted.
[NOTE: To remove actions, you also need the function ModifyConfigData]

RunConfigWindow
Permission to run Workflow Graph.

ViewOnlyProcessingOrgStaticData
Restriction to only view the workflows associated with the processing orgs
of the user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ModifyOnlyProcessingOrgStaticData
Restriction to only modify the workflows associated with the processing
orgs of the user currently connected. User processing orgs are specified
using Configuration > User Access Control > Access Permissions -
User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgStaticData
Restriction to only view the workflows associated with the processing orgs
of the user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
Workflow Configuration CreateTaskWorkflowConfig
Permission to create workflow configurations provided the
RunConfigWindow function is also granted.

ImportWorkFlow
Permission to import workflow configurations provided the
RunConfigWindow function is also granted.

ModifyDomains
Controls Domains > all menu items.
Permission to add and modify status codes, actions and rules.

ModifyTaskWorkflowConfig
Permission to modify workflow configurations provided the
RunConfigWindow function is also granted.

ModifyWorkflowConfig
Permission to modify workflow configurations provided the
RunConfigWindow function is also granted.
74 Access Permissions

Applications Functions
RemoveTaskWorkflowConfig
Permission to remove workflow configurations provided the
RunConfigWindow function is also granted.

RunConfigWindow
Permission to run Workflow Configuration.

ViewOnlyProcessingOrgStaticData
Restriction to only view the workflows associated with the processing orgs
of the user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ModifyOnlyProcessingOrgStaticData
Restriction to only modify the workflows associated with the processing
orgs of the user currently connected. User processing orgs are specified
using Configuration > User Access Control > Access Permissions -
User panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]

ViewOnlyProcessingOrgStaticData
Restriction to only view the workflows associated with the processing orgs
of the user currently connected. User processing orgs are specified using
Configuration > User Access Control > Access Permissions - User
panel.
[NOTE: This function is actually a restriction and not a permission.
However, if a group is granted all functions, this restriction will not apply. It
has to be specifically added]
Kick-Off/Cut-Off CreateKickOffCutOffConfig
Permission to create KickOff CutOff configurations.

ModifyKickOffCutOffConfig
Permission to modify KickOff CutOff configurations.

RemoveKickOffCutOffConfig
Permission to remove KickOff CutOff configurations.
Task Internal Reference AddModifyTaskInternalReference
Permission to create and modify task internal reference configurations.
Task Priority AddModifyTaskPriorityConfig
Permission to create and modify task priority configurations.

[NOTE: The Access permission functions ViewStressParametersTables and ModifyStressParametersTables are for
internal use]

2.18 D E P RE CATE D A CCE S S P E RM IS S IONS

The following access permissions may still be available in the domains but are no longer used.

2 0 1 0 - 2 0 1 4|Calypso Confidential - Copyright Calypso Technology, Inc. All Rights Reserved

Access Permissions 75

AdmCaptureConnection - Not used.

AdmChangeDSLogOptions Replaced by AdmServer.
AdmClearCache Replaced by AdmServer.
AdmDeleteLoginAttempts Replaced by AdmLoginAttempts.
AdmDSShowConnectedClient Replaced by AdmServer.
AdmDSShowTaskStatistics Replaced by AdmServer
AdmListActiveDataServer Replaced by AdmServer.
AdmPurgeDBConnection - Not used.
AdmPurgeLiquidatedPosition - Not used.
AdmPurgeLogFiles - Not used.
AdmPugeLoginAttempts Replaced by AdmLoginAttempts.
AdmReleaseConnection - Not used.
AdmShowDSOptions Replaced by AdmServer.
AdmShowSQLMonitoring - Not used.
AdmStartStopEnginesAdmUpdateTrace Replaced by AdmServer.
AdmUnCacheBook_Filter - Not used.
AdmUpdateDSOptions - Not used.
AuthorizeAccountingData - Not used.
AuthorizeCFDContractDefinition - Not used.
AuthorizeDisconnectedClients Replaced by AdmServer.
AuthorizeFeeBillingRule - Not used.
AuthorizeFeeGrid - Not used.
AuthorizeLegalEntityAttribute - Not used - Use AuthorizeLEAttribute instead.
AuthorizeLEContact - Not used - Use AuthorizeLegalContact instead.
AuthorizeManualSDI - Not used.
AuthorizeMessageGroup - Not used.
AuthorizeMessageRule - Not used.
AuthorizeReferenceEntityBasket - Not used - Use AuthorizeRefEntityBasket instead.
AuthorizeReferenceEntityTranche - Not used - Use AuthorizeRefEntityTranche instead.
AuthorizeSettleDeliveryInstruction - Not used - Use AuthorizeSDI instead.
AuthorizeSettlementMessageSending - Not used.
AuthorizeSettlementMethod - Not used.
AuthorizeTaskWorkflowConfig - Not used.
CreateLEManualSDI - Not used - Use AddModifyLEManualSDI instead.
ModifyAccountingData - Not used.
RemovePLMark - Not used.
RemoveTrade - Not used.
RunAdminMonitor Replaced by AdmServer.
ViewArchivedTrade - Not used.