# Maica Permissions Sets ## How is Access Managed in Maica? Now that Maica is all configured and ready to go, we need to make sure that your team has access to all the relevant pieces needed to fulfil their function. In order to do this, Maica leverages standard Salesforce [Permission Sets](https://developer.salesforce.com/docs/atlas.en-us.securityImplGuide.meta/securityImplGuide/perm_sets_overview.htm) to provide access to its range of features. A **Permission Set** is a collection of settings and permissions that give users access to various tools and functions without changing their profiles. Now, what does that actually mean?! For example, let’s say you have several **Plan Managers** who need the ability to enter `Invoices` and Claim funds from the Agency. Assign this user the `Maica - Manage Plan & Service Booking` Permission Set to ensure they can access the features and functionality required in this process. Taking this a step further, assume that only 1 of these Plan Managers needs the ability to delete a Service Booking. Assign this user the `Maica - Delete Service Booking` Permission Set in addition to the one above to enable this additional functionality. {% hint style="info" %} The `Permission Set` is complementary to their `Profile`, meaning it provides access to these Maica features **in addition** to what is already provided via their existing `Profile` {% endhint %} ## Maica Permission Sets The table below provides an overview of the standard Maica Permission Sets.

Permission Set Name	Access Provided
`Maica - General User`	Provides access to all the base Maica functions, such as Apex Classes and Components. This needs to be assigned to all of your Maica users.
`Maica - System Permissions`	This Permission Set contains the following required permissions: - CRUD to access to `Plan`/`Plan Budget` - CRUD to access to `Service Booking`/`Booking Item` - `Customize Application System Permission`. This needs to be assigned to all of your Maica users. ❗This Permission Set is not part of the Maica Managed Package but is manually installed via this link as shown in this online demonstration video. The reason we need to do it this way is due to the Salesforce restriction that prevents us from including System Permissions and objects with a Master-Detail relationship to a standard object (Contact) to a package's Permission Sets.
`Maica - Manage Plan & Service Booking`	Please see the matrix below.
`Maica - Manage Invoice & Claiming`	Please see the matrix below.
`Maica - Delete Service Booking`	Provides the ability to update the Service Booking `Status` = `Deleted` in both PRODA and Salesforce. ❗When a `Service Booking` is Deleted the record is not deleted from Salesforce. The `Status` is set to `Deleted` and you will no longer be able to interact with this `Service Booking`. Note: Users without this Permission Set cannot see the Delete option in the Manage Service Booking Quick Action accessed from the `Service Booking` object.
`Maica - Manage Crediting`	Provides the ability to use the `Credit Management` component accessed on the Invoice record and Invoice List View. The Claim Management component is described in more detail here.
`Maica - Manage Maica Settings`	Provides the ability to view and edit all the specific settings contained within the Maica Settings tab.
`Maica - Handle NDIS Notifications`	Provides the ability to handle and process the NDIS Notifications or Webhooks. Please make sure the associated `Guest User` of the selected Site has this Permission Set assigned. You do not need to grant this to individual Maica users.
`Maica Client Care - General User`	Provides access to all the base Maica Client Care functions, such as Apex Classes and Components. This needs to be assigned to all of your Maica Client Care users.
`Maica Client Care - Quick Appointment Completion`	Provides the ability to Quick Complete the Appointment.
`Maica Client Care - Timesheet Approval`	Provides the ability for a user to approve a Timesheet via the Timesheet Tab.
`Maica Client Care - Timesheet Management`	Provides the ability to manage Actual Dates on the Appointment.
`Maica Client Care - Timesheet Submission`	Provides the ability for a user to submit a Timesheet via the Timesheet Tab.
`Maica Client Care - Unavailability Management`	Provides the ability to manage Unavailability on the Planner.
`Maica Client Care - View Appointment Cost`	Provides the ability to see Appointment Cost when managing Appointments. This will provide the user with the ability to see the total cost of the Appointment being managed.
`Maica Client Care - Manage Appointment Breaks`	Provides the ability to create Unavailability records, marked as Appointment Breaks, that are associated with Appointments.
`Maica Client Care - Planner Filter Administration`	Turns the ability to use the Planner Filters either on or off.
`Maica Client Care - Create Billable Client Notes`	Provides for the ability to mark a Billable Client Note as Non-Billable via a toggle on the user interface.

### Permission Sets for Maica Object Access In cases where **Maica Client Care** users are required to access object data from within the **Maica Client Management** solution, the following Permission Sets are part of **Maica Client Management** to control this access. These can be assigned to **Maica Client Care** users as appropriate.

Permission Set Name	Maica Client Management Object Access
`Plan Management`	`Booking_Item__c` `Compliance_Check__c` `Plan__c` `Plan_Budget__c` `Plan_Goal__c` `Support_Category__c` `Registration_Group__c`
`Billing`	`Invoice__c` `Invoice_Line_Item__c` `Invoice_Setting__c` `Payment_Request__c` `Remittance__c`
`Service Agreements`	`Service_Agreement__c` `Agreement_History__c` `Agreement_Item__c`
`All`	All Maica Client Management objects

{% hint style="info" %} In order to respect any Sharing Rules or Data Access policies you may wish to implement, Maica Permission Sets **do not provide** `View All` or `Modify All` access to any objects. We recommend managing `View All` and `Modify All` at the **Profile** level OR in a **Clone** of this Permission Set {% endhint %} {% hint style="info" %} The Maica Object Permission Sets provide access to the objects as outlined above but do not directly provide access to the below-listed objects, as this is inherited based on Salesforce `Master-Detail` relationships, so any permissions/sharing configured for those objects will directly determine access the related Maica data objects, as shown here: * `Remittance` -> `Account` * `Service` -> `Account` * `Program Enrolment` -> `Opportunity` * `Connection` -> `Contact` * `Booking Item` -> `Service Booking` -> `Contact` * `Plan Goal` and `Plan Budget` -> `Plan` -> `Contact` {% endhint %} ### Full Permission Set Overview You can access a full overview of all the Maica Permission Sets in the Google Sheet below. {% embed url="" %}