What is privilege to change a user's BU?

(0) Share

Report

Posted on by Cyclefitness

I need to create a security liasion role to allow a user to change a person's BU and assign them security roles and teams. Which privilege on the role permits the change of the BU?

Thank you!

*This post is locked for comments

I have the same question (0)

All responses (4)

Answers (1)

Verified answer

Community Member on at

Like (2)

Report

Off the top of my head, the specific privilege is called something like "Reparent User" in the security roles interface.

When you move a user to a new BU they will have no roles after the move.

So this security liason user will have to assign all their new roles.

To do this, they must have all the privileges in all the role that the user who moved could possibly need.
So you either have to give them all user roles, or system admin role, and if you give them System Admin role then they will obviously have the rights to move a user to a new BU

Was this reply helpful? Yes No
Cyclefitness on at

Like (0)

Report

Reparent User is not providing the appropriate privilege to allow a user to change another user's BU. Any other ideas?

Was this reply helpful? Yes No
ScottDurow 21 on at

Like (0)

Report

Hi Deb,

Because of the fact that CRM restricts the roles/business unit operations on a user based on the user who is making the change - I find that the idea of having a user who is in charge of security but only with a limited security role themselves impossible without creating some kind of plugin/intermediate process that can run under elevated privileges.

The important part of Adam's reply is 'they must have all the privileges in all the role that the user who moved could possibly need'

This is because you can't move a user to a different business unit if that would grant them access to more data than you can see yourself.

E.g. if you are in Business Unit A and you have Business Unit Level Read permissions on Accounts - and you want to move a user into Business Unit B then you won't be able to because you can't see the records in Business Unit B.

You will also need Write and Append access to the User.

Hope this helps,

Scott

Was this reply helpful? Yes No
Cyclefitness on at

Like (0)

Report

I think I've got it working based on a variation of Adam's response. Here is a screenshot of what I ended up with.

Thanks, guys.

Was this reply helpful? Yes No