Hi,
we are right now redefining our Security Roles structure and I wondered what is the best practice to assign roles to users.
Our organization works with the following job descriptions:
Sales:
- Sales Manager
- Sales Clerk
Customer Service:
- Support Manager
- Support Clerk
Finance:
- Quote Backoffice
- Order Management
- Invoice Management
My idea now was to create a Team for each job description.
So e.g. there is one team: "Sales Clerks" and I assign the team all necessary security roles. And assign the members to that team.
- Do I need to use the Team-based "Security Roles" or "Direct User" access levels for this to work?
- Is this a good idea? What are your solutions?
- It is certainly easier to just assign a new employee to a Team than setting up security roles individually
- Should we use Azure AD Groups in any way?
- Any resources regarding this topic that I should read?
Thanks.