You can get an even deeper control by combining the Security Roles features with the Hierarchical Security model. Basically this model allows users to see their own and their subordinate's records based on the established hierarchy (Manager based or position based).
If for example user "X" is the manager of user "y" and "z" and user "A" is the manager of users "b" and "c" and you configure Hierarchy Security you will get this:
- user "X" can add, view, edit, notes for user "X" (himself), user "y" and user "z".
- user "A" can add, view , edit, notes for user "A" (himself), user "b" and user "c".
- users "y","z","b","c" can only add, view or edit their own notes.
Advantages:
- you get a deeper control - two different managers can see different subordinates records (each of them just for his/her subordinates);
- the model is dynamic - when new employees join your company you will not have to worry about what they will be able to read/edit or not. As soon as they will be place on the right position/under the right manager this will work like it was set;
Disadvantage:
- if you need managers to be able to edit or add records for subordinates this will be available just for the next layer below them. If for example you have 5 layers, the manager from layer 5 will have Read, Write, Update, Append, AppendTo access to layer 4 employees' entities, and read-only access to the employees from layers 3,2 and 1.
They are 2 options to choose from: Position Hierarchy and Manager Hierarchy that rely on different "relationships" between employees in the system.
It's important to keep in mind this difference:
- In the Manager Hierarchy the manager must belong to the same business unit as the subordinate or to a parent business unit of the subordinate's business unit
- In the Position Hierarchy the business unit can be different between a higher position and the positions that come below it.
You can find information about these security options here:
technet.microsoft.com/.../dn832142.aspx
Hope this helps and will help you take the system one step further.