Security roles, business units and Teams with read only on another business unit

(0) Share

Report

Posted on by Community Member Microsoft Employee

Hello all,

Here is my problem :

I have a business unit USA with two child business units : USA West and USA East. I have in BU USA West, User 1 and in USA West, User 2.

User 1 should be able to create and write records belonging to his BU (so created by him for now since he is the only one), and he should also be able to READ ONLY records of BU USA.

So he should see records of his BU (USA WEST) and record of USA EAST but in read only.

I want the same behavior for User 2.

how can I achieve this ? Should I assign User 1 to BU USA and in his role, put the "create" and "write" on user only and the "read" on Business unit privilege ? Should I use a team and create 2 roles ?

If anyone could help me it would be great !

Thank you

Categories:

Security

Administration and Setup

All responses (3)

Answers (0)

Suggested answer

Fubar 2,750 on at

Like (0)

Report

RE: Security roles, business units and Teams with read only on another business unit

If you need to cross to another branch in the Business Unit structure, you add a new Team to the BU in the other branch (the one that is not the users default), assign a Security Role to that team with the required privileges (e.g. read business unit), and then assign the Team to the user.
Community Member Microsoft Employee on at

Like (0)

Report

RE: Security roles, business units and Teams with read only on another business unit

It could work but I have another EMEA/ROW at the same level as the USA and I don't want users from USA to see records of EMEA
Yoshika Suzuki on at

Like (0)

Report

RE: Security roles, business units and Teams with read only on another business unit

How about setting the security role of the BU to which the user belongs, "under my department" for create and write privileges, and "organization" for read?