Security Guide for Siebel Business Applications > Configuring Access Control >

Administering Access Control for Business Services

A user with an administrator login can restrict access to business services and business service methods by associating responsibilities with business services and vice versa. This allows the administrator to restrict access to business services based on the end user's responsibility. To access a restricted business service, an end user must be associated with the responsibility that allows access to the restricted business service. An end user who is assigned more than one responsibility can access any restricted business services that is associated with one of his or her responsibilities.

For business services that allow you to specify a view mode to access data, you can specify which view mode can be used by different responsibilities. The following list describes the view modes that can be associated with a responsibility to restrict the set of data records a user with the responsibility accesses. The list also indicates the relationship that exists between each view mode:

• Personal < Sales Rep << Manager < Organization << Sub-Organization < All
• Group < Catalog < All

In the preceding list, the level of visibility broadens as you read from left to right. For example, the Manager view mode grants access to more data than the Sales Rep view mode. The character < indicates a non-hierarchical relationship between view modes. For example, the relationship between Manager view mode and Organization view mode. The characters << indicate a hierarchical relationship between view modes. For example, the relationship between Sales Rep view mode and Manager view mode.

The capabilities described in the preceding paragraphs allow you to manage access to business services (and associated methods) by end users based on the responsibilities assigned to the end user.

The following sections provide more detailed information on the following topics:

• Associating a Business Service with a Responsibility
• Associating a Responsibility with a Business Service
• Example of Associating a Responsibility with Business Service Methods
• Clearing Cached Business Services
• Disabling Access Control for Business Services