Application Security
The “
Application Security
” screen allows administrators to edit security access for user groups and individual users. This screen can be opened by choosing “Application Security
” from the “Administration” menu.

Configuration
The “
Configuration
” tab is used for configuring group and user permissions in order to restrict or grant access to specific parts of ONESOURCE ISF.
ONESOURCE ISF contains the following access roles:
Acess roles | Description |
|---|---|
Defaults – View Only | Entity can view data in “Defaults” screen but cannot edit the contents of the screen. |
ISF - Delete | Entity can delete a Security Filing. |
ISF – No Delete | Entity cannot delete a Security Filing. |
ISF – No Retransmit | Entity cannot retransmit a Security Filing that has already been transmitted to CBP at least once. |
ISF – Transmit | Entity can transmit a Security Filing to CBP, regardless of how many times it has been transmitted to CBP. |
ISF – No Transmit | Entity cannot transmit any Security Filings to CBP. |
ISF – View Only | Entity has read only access to all Security Filings and cannot create, modify, transmit, retransmit, or delete any Security Filings. |
Party – View Only | Entity can view data in “ Parties ” screen but cannot edit the contents of the screen. |
Field Level Access
The “
Field Level Access
” tab is used for configuring access rights for groups or specific users for the “Edit Security Filing” screen at the field level. Users and/or groups can be assigned one of the below settings for each data element:Data element | Description |
|---|---|
Full Access | Entity can view and modify the data element. |
Read Only | Entity can view the data element but cannot edit the data element. |
No Access | Entity cannot view or modify the data element. |
Access is limited beyond current group and application security settings only after a field level security entry has been created for a user or group. It is important to note that if user access to certain data on the “Edit Security Filing” screen is limited, the user’s access to reports and queries should be eliminated. This will prevent the user from having roundabout access to the data through other means. This can be accomplished using Group Administration.

Party Level Access
The “
Party Level Access
” tab is used for configuring which Security Filings a user/group can view in a partner based on which parties appear on a Security Filing.Access is limited beyond the current group and application security settings only after a party level security entry is created for a user or group. Once Party Level Access is initiated, each new party must be added to the user/group access for that user or group to have access to the party.
It is important to note that if user access to certain data on the “Edit Security Filing” screen is limited, the access of this user to reports and queries should also be eliminated. This is done in order to prevent access to that data through other means accomplished using Group Administration.

Party Type Access Tab
The “
Party Type Access
” tab is used for configuring which party types a user/group can add to a Security Filing.Access is limited beyond current group and application security settings only once a party type level security entry has been created for a user/group. This security access impacts the ability to add the indicated party type (regardless of the party) to a Security Filing.
