Dynamics Community Forum Thread Details

Record Level Security

The use case that I'm currently faced is as follows:

All users should be able to read all accounts, opportunities and leads as well as their associated activities. However, there certain records (either accounts,opps or leads and their associated activities) that need to be restricted to a specific group of users a. The group of users can be different depending on the record.

Does anyone have any ideas on how to achieve this without adding the overhead if the record doesn't need to be restricted?

I've thought of set the security roles to have user level access and automating the process of adding all the users to the access team if it is flagged as a public record. However, this still leaves all the associated activities exposed to the use of advanced find

Hi David,

there is no "deny" security role, so this kind of access restriction always creates a problem. One way to do it might be to create two different business units:

- Regular BU

- Restricted BU

You would add all users to the Regular BU default team, and you would give that team read access to all records in that BU. You can, then, assign any regular record to that team. For all other permissions (write, append, etc), you can use access teams or sharing.

In the restricted BU, you might create a team per record (maybe per set of records, since I'm assuming related leads, accounts, and opportunities will be available to the same users). On top of that, you might create a manual access team per the same set of records and share all those related records with the same manual access team (give "read" permission when sharing). So, giving permissions to the users will be all about adding correct users to that access team. For the write and other permissions, you can either user another manual access team.. or you might add all those "full-access" users directly to the owner team for that set of records.

In my experience, this may require a lot of coding(plugins and workflows) to automate the process.

Quick Links

Leaderboard