Bookshelf v7.5: Manager Access Control

Security Guide for Siebel eBusiness Applications > Access Control > Position-Based Access Control >

Manager Access Control

You can indirectly associate a position with data associated with subordinate positions in a reporting hierarchy. For example, in the My Team's Opportunities view, an employee with a particular active position can see opportunities associated with that position and opportunities associated with subordinate positions.

Manager-subordinate relationships are determined from a position hierarchy. One position hierarchy is included as seed data when you install your Siebel application.

You can specify one parent position for a position, which represents that the position is a direct report to the parent. The parent of an internal position may be in the same division or a different division. For example, a sales manager in the Sales division may report to a sales vice-president in the Corporate division.

In a view using manager access control, the employee or partner has access to the following data:

If the business component on which the view is based uses single-position access control, the user sees data associated directly with the user's active position or with subordinate positions.

If the business component on which the view is based uses team-based access control, then the user sees data for which the user's active position is on the team or any subordinate position that is the primary member on the team. This is the standard behavior, known as primary manager visibility.

A business component using team-based access control can be configured to allow the user to see data for all subordinate positions, regardless of whether they are the primary position for a record. This is known as non-primary manager visibility.

To configure non-primary manager visibility, define a user property called Manager List Mode for the business component, and set it to Team (rather than the default value of Primary).

For more information about the Manager List Mode user property, refer to Siebel Developer's Reference.

CAUTION: Configuring non-primary manager visibility to support mobile users requires changes to docking visibility rules. Customers who require this functionality must engage Siebel Expert Services.

If the business component on which the view is based uses Personal access control, the user sees only data associated with the user's primary position.

Views that apply manager access control generally contain the phrase My Team's in the title, such as My Team's Accounts. The word My is sometimes omitted, as in Team's Activities.

There are no business component view modes specific to manager access control. Manager access control is set at the view level. It requires that the business component on which the view is based has a view mode with owner type Position.

For information about business component view modes, see Business Component View Modes.

For information about implementing access control in a view, see View Access Control Properties.