How to change portfolio permissions
In this article, we explain how you can set the permissions for the Portfolio and Pending Portfolio pages. The permissions control which companies a user can see in their Portfolio and Pending Portfolio, and they are set based on user groups.
How to open data.json5 for editing
Before beginning these instructions, please follow this guide:How to upload files via WebDAV so you are able to connect to your Boss Insights Portal via WebDAV.
The portal server contains code and configuration files that run your Boss Insights portal. Please do not make any unnecessary changes to any files.
Connect to your Boss Insights Portal via WebDAV. The guide linked above has detailed instructions for doing this. Once connected, you should see a screen showing you the folders/files on your Portal.
Click to expand âpublic/dashboard' folder. There should be a file there named âdata.json5â. This is the file that must be edited to change portfolio permissions. Create a backup copy of the file by right-clicking and selecting 'Duplicateâ. Use the default suggested name for the duplicate file. Never make changes to the data.json5 file without first creating a backup copy.
Right-click on the âdata.json5â file and select âEdit Withâ, and choose your preferred text editor from the list. The data.json5 file will be opened in the selected text editor, and any time you save changes to the file, your copy will immediately overwrite the data.json5 file on the server.

How to change Portfolio permissions in data.json5
Permissions are configured by user groups. You can read more about user groups and how to use them here: https://bossinsights.atlassian.net/wiki/spaces/SC/pages/56164354/Users+Groups#Group-Management
Press ctrl+F and search for the word âportfolioâ until you find a section of the file that looks similar to this:
portfolio: { owners: [ 'admins', 'users' ], permissions: [ { groups: [ 'admins' ], access: { view: 'all', edit: true } }, { groups: [ 'users' ], access: { view: 'own' } } ], fields: [ ...
JSONConfigure who can be an âOwnerâ of a portfolio company by adding or removing groups in the âownersâ array. Any user that belongs to a group in the âownersâ array can be selected as an Owner of a portfolio company.
The âpermissionsâ array is an array of objects, where each object can be thought of as a permissions policy. The âpolicyâ object has a âgroupsâ array which is a list of groups that the policy applies to, and an âaccessâ object which determines the permissions granted by the policy. Create as many policy objects as is needed for your use case, whether that is a single policy that applies to all groups, or one policy per group.
... permissions: [ { groups: [ // list of groups that the following access permissions apply to 'admins' ], access: { view: 'all', // what companies are visible in the portfolio? 'all' or 'own' edit: true // can they use the 'Change Owner' button? true or false (or not set) } }, { groups: [ 'users' ], access: { view: 'own' } } ], ...
CODEConfigure which companies are visible in the portfolio using the âaccessâ->âviewâ setting. If âviewâ is set to âallâ, users in the applicable group will be able to see any and all companies in their portfolio. If âviewâ is set to âownâ, they will only be able to see companies for which they are the âOwnerâ. If âviewâ is not set, they will not see any companies in their portfolio.
Configure who can use the âChange Ownerâ button using the âaccessâ->âeditâ setting. If âeditâ is set to true, users in the applicable group will be able to edit the Owners of portfolio companies using the âChange Ownerâ button at the top right of the portfolio. If âeditâ is set to false, or not set at all, they will not have access to the âChange Ownerâ button.
Once you have made all of your changes, put them live on your Boss Insights Portal by using WebDAV. If you opened data.json5 using WebDAVâs âEdit Withâ option, simply save your file by pressing ctrl+S or going to File->Save, and your file will be automatically uploaded to your Portal server. If you downloaded data.json5, you can upload your modified version by dragging and dropping it into your WebDAV window, and confirming that you want to overwrite the existing data.json5.
How to Change Pending Portfolio Permissions in data.json5
Permissions are configured by user groups. You can read more about user groups and how to use them here: https://bossinsights.atlassian.net/wiki/spaces/SC/pages/56164354/Users+Groups#Group-Management
Press ctrl+F and search for the word âinvitationsâ until you find a section of the file that looks similar to this:
invitations: { uniqueJoinField: 'company-legal-name', owners: [ 'admins', 'users' ], permissions: [ { groups: [ 'admins' ], access: { view: 'all', add: true } }, { groups: [ 'users' ], access: { view: 'own', add: true } } ], fields: [ ...
JSONConfigure who can be an âOwnerâ of an invitation by adding or removing groups in the âownersâ array. Any user that belongs to a group in the âownersâ array can be selected as an Owner of an invitation.
The âpermissionsâ array is an array of objects, where each object can be thought of as a permissions policy. The âpolicyâ object has a âgroupsâ array which is a list of groups that the policy applies to, and an âaccessâ object which determines the permissions granted by the policy. Create as many policy objects as is needed for your use case, whether that is a single policy that applies to all groups, or one policy per group.
... permissions: [ { groups: [ // list of groups that the following access permissions apply to 'admins' ], access: { view: 'all', // what invitations are visible in the pending portfolio? 'all' or 'own' add: true // can they use the 'Invite Account' and 'Upload Account List' buttons? true or false (or not set) } }, { groups: [ 'users' ], access: { view: 'own', add: true } } ], ...
CODEConfigure which invitations are visible in the pending portfolio using the âaccessâ->âviewâ setting. If âviewâ is set to âallâ, users in the applicable group will be able to see any and all invitations in their pending portfolio. If âviewâ is set to âownâ, they will only be able to see invitations for which they are the âOwnerâ. If âviewâ is not set, they will not see any invitations in their pending portfolio.
Configure who can use the 'Invite Account' and 'Upload Account List' buttons using the âaccessâ->âeditâ setting. If âeditâ is set to true, users in the applicable group will be able to create new invitations using the 'Invite Account' and 'Upload Account List' buttons at the top right of the pending portfolio. If âeditâ is set to false, or not set at all, they will not have access to the 'Invite Account' and 'Upload Account List' buttons.
Once you have made all of your changes, put them live on your Boss Insights Portal by using WebDAV. If you opened data.json5 using WebDAVâs âEdit Withâ option, simply save your file by pressing ctrl+S or going to File->Save, and your file will be automatically uploaded to your Portal server. If you downloaded data.json5, you can upload your modified version by dragging and dropping it into your WebDAV window, and confirming that you want to overwrite the existing data.json5.