Questions about security roles in business units.

(0) Share

Report

Posted on by James F.

If I assigned a user the System Admin role in a child business unit, will they be able make changes on parent business units?

Is there a way to only allow users to see information in the Business Unit they are assigned? If so can you provide documentation on how to set this up?

*This post is locked for comments

I have the same question (0)

All responses (3)

Answers (1)

Royal King 27,686 on at

Like (0)

Report

Yes he is able to do anything in the system .System Administrator and system customizer roles are global and you can't restrict access based on the Business unit. Whoever owns this role can do anything on the system regardless of which business unit he attached to. If you just want to control access to data in the system based on business unit , you can create your security role based on the customer requirement.

Was this reply helpful? Yes No
Suggested answer

Sayhaitokumar 7,042 on at

Like (0)

Report

Hi James,

For your 1st Questions answer is No.

For 2nd question answer is yes, Depending on security role.

Was this reply helpful? Yes No
Verified answer

Aileen Gusni 44,524 on at

Like (0)

Report

Hi James,

1. If I assigned a user the System Admin role in a child business unit, will they be able make changes on parent business units?

--> Yes, because the user will be getting a full access (full green circle), it means access to Organization, does not matter the BU or User ownership. Basically, the concept is not the System Admin role is a super user, but the privilege and access for each entities and other misc privileges are set to full access level (full green circle), this access means the user can do anything, so don't confused about the Role Name, you can create your own custom rule to make the user as Business Unit-level System Admin, but not use the standard one, it is totally not touchable.

2. Is there a way to only allow users to see information in the Business Unit they are assigned? If so can you provide documentation on how to set this up?

--> Yes, as I mentioned in point 1 before, you can create your own Business Unit-privilege level.

In your respective entity(the entity that you want to restrict), you can set to Business Unit. It is half circle with Yellow Color.

And you can see the Legend here for explanation.

You can see in this:

http://msdn.microsoft.com/en-us/library/gg334717.aspx

How role-based can control your data security.

and this:

http://www.powerobjects.com/blog/2014/02/14/microsoft-dynamics-crm-2013-business-units-and-data-silos/

Hope this helps!

Thanks.

Was this reply helpful? Yes No