Rights to maintain persons
It is possible to restrict person look-ups in Compliance Suite to specific departments or companies. You can do this by creating Dynamics 365 Business Units for departments and companies and then specifying them in "Department" or "Company" in Compliance Suite.
This means that only those persons with the security role CCS Self-Service Restricted are able to perform searches in the given department or company. For example, this is relevant if you manage a large company with multiple locations and an administrator is responsible for maintaining people at one location but not at others. When the administrator is assigned the security role, he or she is only able to perform person look-ups on the location he or she is responsible for maintaining.
If you would like additional information, please contact our support department.
What to do:
-
To do the delimitation, first create Business Units in Dynamics 365 for the companies and departments you wish to manage.
This results in the creation of Dynamics Teams for each Business Unit with Dynamics Users for that Business Unit.
image::4973481339922.png[] -
Enter the created Business Unit in Department or Company of Compliance Suite in field Business Unit.
image::15646039205276.png[] -
Assign the Dynamics 365 role CCS Self-Service Restricted to the users who are able to perform person lookups in Compliance Suite.
How it works:
| Unit | Compliance Suite does the following… | You need to perform this manual task… | Cause & Effect |
|---|---|---|---|
Dynamics 365 Business Units (BU) |
Define Business Units for each company, department and type of person to be managed. |
Dynamic Teams for each Business Unit are formed with Dynamics Users for that Business Unit. |
|
Dynamics 365 Role CCS Self-Service Restricted |
Read access at the "Parent: Child Business Units" level for companies, departments, individuals, locations, person types, positions, Companies, Divisions, Cost Centers and Self-Service Definitions. On Manage Orders, it must have owner-create, -read, -write access. |
Assign to the users who must be able to access Self-Service. |
|
Person |
Automatically sets the Owner to the Dynamics Team for the Business Unit for the person type, or department or company, if the Owner of this entity (person type / department / company) is one of the CRM Teams corresponding to a BU for person, department, company ( first matching, in order of priority) |
||
Dynamics 365 User |
Automatically sets Business Unit from Department.Business Unit (new field) or Company.Business Unit (if different from zero, in order of priority) when the corresponding person is updated or changed. If none of these are set, do as today. |
||
Person Type |
Set Person Type.Business Unit to the corresponding Business Unit if rights are to be managed for this person type. |
CCS will put Owner on persons the corresponding Business Unit-Team when they are updated (can be used, for example, to restrict access to system accounts). |
|
Person Type |
Set Owner to Dynamics 365 Team for this Business Unit. |
Dynamics 365 users with CCS Self-Service Restricted can now only see Person Type if they are in this Business Unit or in the team or have a Compliance Suite role such as Service Desk |
|
Department |
Set the Department.Business Unit (new field) to the corresponding Business Unit if rights are to be managed for this Department |
Compliance Suite will put Owner on persons in the corresponding Business Unit-Team when they are updated, unless the equivalent is set up for the type of person (can be used, for example, to restrict access to managers). |
|
Department |
Set Owner to Dynamics 365 Team for this BU |
Dynamics 365 users with CCS Self-Service Restricted can now only see the Department if they are in this Business Unit or in the team or have a CCS Role such as. Service Desk |
|
Company |
Set Company.Business Unit (new field) to the corresponding Business Unit if rights are to be managed for this Company. |
CCS will put Owner on persons for the corresponding Business Unit team when they are updated, unless the equivalent is set up for the type of person or department (can be used, for example, to restrict access to local administrators). |
|
Company |
Set Owner to Dynamics 365 Team for this Business Unit. |
Dynamics 365 users with CCS Self-Service Restricted can now only see Company if they are in this Business Unit or in the team or have a CCS Role such as. Service Desk. |
|
Locations, Positions, Divisions, Cost Centers and Self-Service Definitions |
Set Owner for Dynamics 365 Team equivalent to Business Unit for a company or department |
Dynamics 365 users with CCS Self-Service Restricted can now only view the device if they are in this Business Unit. |