Siebel Security Guide > Configuring Access Control > Access Control Mechanisms >

About Manager Access Control

You can indirectly associate a position with data associated with subordinate positions in a reporting hierarchy. For example, in the My Team's Opportunities view, an employee with a particular active position can see opportunities associated with that position and opportunities associated with subordinate positions.

Manager-subordinate relationships are determined from a position hierarchy. One position hierarchy is included as seed data when you install your Siebel application. You can specify one parent position for a position, which represents that the position is a direct report to the parent. The parent of an internal position can be in the same division or a different division. For example, a sales manager in the Sales division can report to a sales vice president in the Corporate division.

In a view using manager access control, an employee or partner user has access to data according to the behavior outlined in the following topics.

Business Component Uses Position Access Control

If a view uses manager access control, and if the business component on which the view is based uses position access control, then the following behavior applies:

• If the business component on which the view is based uses single-position access control, then the user sees data associated directly with the user's active position or with subordinate positions.
• If the business component on which the view is based uses team access control, then the user sees data for which the user's active position is on the team or any subordinate position that is the primary member on the team. This is the standard behavior, known as primary manager visibility.

  A business component using team access control can be configured to allow the user to see data for all subordinate positions, regardless of whether they are the primary position for a record. This is known as nonprimary manager visibility.

  To configure nonprimary manager visibility, define a user property called Manager List Mode for the business component and set it to Team (rather than the default value of Primary). For more information about the Manager List Mode user property, see Siebel Developer's Reference.

  CAUTION:  Configuring nonprimary manager visibility to support mobile users requires changes to docking visibility rules. Customers who require this functionality must engage Oracle's Application Expert Services. Contact your Oracle sales representative for Oracle Advanced Customer Services to request assistance from Oracle's Application Expert Services.

NOTE:  The value of the Visibility Applet Type field determines the access control properties that apply to a view. However, if a more restrictive value is specified for the Visibility Applet Type field for another view that is based on the same business component, then the restrictions of this visibility type are applied to both views. For example, if two views are based on the same business component, and if Manager visibility is selected for one view and Sales Rep Visibility is selected for the other view, then the restrictions of the Sales Rep Visibility type are also applied to the user's active position or team positions on the view that has implemented Manager access control. As a result, the user does not have access to data associated with subordinates' positions.

Business Component Uses Personal Access Control

If a view uses manager access control, and if the business component on which the view is based uses personal access control, then the behavior is as follows:

• For single-owner access control, the user sees data associated directly with the user's active position or with subordinate positions.
• For multiple-owner access control, the user sees data for which the user's active position is on the team, or any subordinate position that is the primary member of the team.

Views that apply manager access control generally contain the phrase My Team's in the title, such as My Team's Accounts. (In some cases, the word My is omitted.) There are no business component view modes specific to manager access control. Manager access control is set at the view level. It requires that the business component on which the view is based has a view mode with owner type Position or Person.

NOTE:  In a view using manager access control, if the manager user has no subordinate positions defined, then the user cannot create new records in the view. The New button and the New Record command are unavailable.

Related Topics

Viewing Business Component View Modes

Access Control Mechanisms

Listing View Access Control Properties