Business Units and Security Roles Example: Dyn CRM 3.0

The company business unit already existed, 'Widgets Inc.'

1) Add a business unit named 'Managers' which is parented by the 'Widgets Inc.' business unit

2) Add a business unit named 'Employees' which is parented by the 'Managers' business unit

3) Assign the 'Employee' Business unit to an existing user by opening the user record, going to the actions menu and then selecting change business unit.

- Copy the existing 'Salesperson' role to a new role and named it 'Biz User Salesperson' and modify the new role by opening the role, selecting the core records tab, and then clicking on the word 'contact' until all of the permissions are set to 'Parent: Child Business Units' (3/4 Green Circle).

-Assign the 'Biz User Salesperson' to the employee user.

4) Assign the 'Manager' Business unit to an existing user by opening the user record, going to the actions menu and then selecting change business unit.

- Copy the existing 'Sales Manager' role to a new role and name it 'Biz User Sales Manager' and modify the new role by opening the role, selecting the core records tab, and then clicking on the word 'contact' until all of the permissions are set to 'Parent: Child Business Units' (3/4 Green Circle).

- Assign the 'Biz User Sales Manager' to the manager user.

Now, add a contact while you are logged in as a user who is part of the top-level business unit Widgets, Inc. (i.e. administrator).

After the contact has been added, log out and log back in as the manager user who is a member of the 'Manager' business unit and has the 'Biz User Sales Manager' role.  You should not be able to see the contact created by the user who is a member of the top-level business unit.  While you are logged in as this user, create a new contact and log-out when complete.

Now, log in as the employee user who is a member of the 'Employee' business unit and has the 'Biz User Salesperson' role.  You should not be able to see the contact created by the manager user or the user who is a member of the top-level business unit.  Add a contact while you are logged in and then log back in as the manager user; you should be able to see the contact added by the employee user.

*Within a security role, you will see a legend at the bottom that represents the access level within a role.  Using a combination of business units and properly set roles, users should be restricted to accessing only the information within their business unit and those that there business unit parent.

**If a manager wants to share a particular contact record, then he can do so by selecting actions against the contact record and then share....from this screen the contact can be shared with individual employees or teams.