Managing Access to Private Attachment Folders

The advanced setting roles-allowed-to-view-private-folder controls which user roles have permission to access private attachment folders. By defining a comma-separated list of roles, administrators can restrict access to specific roles, enhancing security for sensitive data stored in attachments.

How to Enable

1. Navigate to Settings.
   Go to Settings > Advanced and locate the setting roles-allowed-to-view-private-folder.

2. Configure the Allowed Roles.
   Enter a comma-separated list of roles that should have access to private folders (e.g., Admin,Underwriter,Manager).

3. Save Changes.
   Click Save to apply the configuration.

How It Works

1. Private Folder Creation:

   • Navigate to the Attachments tab for a policy or claim.
   • Use the toolbar to create or select a folder, and click the Private option to designate it as a private folder.

2. Access Restriction:

   • Only users with roles listed in the roles-allowed-to-view-private-folder setting will be able to view or access the private folder.
   • Users without the specified roles will not see or interact with the private folder.

Example Use Case

If an administrator configures the setting with the roles Admin,Underwriter, only users assigned these roles will have access to private folders. This ensures that sensitive documents, such as legal or financial information, are restricted to authorized personnel.