Hi,

We have 4 business units under the main Organization unit.

We have Salespeople and Technicians within each Business Unit

Accounts may be serviced by any or all of the business units.

Business Unit Managers are to see all records serviced by their Business Unit.

Sales people are to see only the Accounts they work with.

I added multiple n:1 relationships ... User to Account ..... to contain the
salesperson that works with that Account

I also added multiple n:1 relationships Business Unit to Account ... to
contain the Business Units that work with the Account.


I assumed that if a Business Unit record is associated to an Account
record, the Business Unit Manager would see the Account on the list of Active
Accounts.

Likewise with the User, but only the Accounts they are related to.

How would I implement this business security model without adding a lot of
criteria to each view in the system?

I thought about Workflow sharing the record based on an entry in one of the
business unit or user fields, but do not see an option for that in Workflow.


My other thought was to set each salesperson up as a child business
unit..... but still have to address the multiple business unit access.

Any one have an idea???

Thank you!!!
Voni

Voni wrote:
By Business unit or person which belongs to any of the BU?

Why? The owner of the Account is not the salesperson which works with
the Account

Why? if you add multiple n:1 relationships between same entities it is
M:N relationship, isn't it?


You archive this goal using BU Access level

First, please read a word about the security model in MSCRM. The
security model is based on user ownership and access rights are
vertically divided by users assignment to business units.

Yes it is probably easiest way how to simulate BU ownership over user
ownership.

Erik

Hi Erik,

Thank you for responding I added answers below your questions.

Since we can add multiple relationships between Accounts, Business Units and
Users...you would think permissions be granted to those business units and
users that are being added to the Account record.

"Erik Caha" wrote: