Share
ReportHi everyone,
I’m currently working with a Dataverse security model based on Business Units. The model is intentionally quite open because salespeople often operate across the entire region.
Below is the simplified structure used in Dataverse .
Region South – Parent Business Unit
Subordinate BUs:
BU Italy
BU Spain
BU Portugal
Each country represents a separate legal company within the holding.
Example setup for BU Italy:
-
Security role Key Account Manager
-
Tables: Account, Contact
-
Privileges: Create (BU), Read (BU), Write (BU), Assign (BU
-
-
Users are also members of the Owning Team – Region South
Tables: Account, Contact - Privileges: Create (BU + Child), Read (BU + Child), Write (BU + Child), Assign (BU + Child)
Problem
Some Account records contain contractual clauses stating that the data cannot be shared across the holding, and must only be visible to the local company (specific child BU) - Italy in this example.
Therefore I need to achieve the opposite behavior for selected Accounts:
These Accounts must remain visible in the local BU
Current Situation - summary
Key Account managers have a security role with Read = Parent:Child BU for the Account table.
Accounts are owned by the child BU.
Because of the hierarchy, they become visible to users in the parent BU.
However, I need to prevent visibility from the parent BU for selected records only, while keeping full access for the child BU.
Thank you very much for provided experience and advise.
All responses (
Answers (
102
