Bookshelf Home | Contents | Index | PDF |
Siebel Security Guide > Configuring Access Control > Access Control Mechanisms > About Manager Access ControlYou can indirectly associate a position with data associated with subordinate positions in a reporting hierarchy. For example, in the My Team's Opportunities view, an employee with a particular active position can see opportunities associated with that position and opportunities associated with subordinate positions. Manager-subordinate relationships are determined from a position hierarchy. One position hierarchy is included as seed data when you install your Siebel application. You can specify one parent position for a position, which represents that the position is a direct report to the parent. The parent of an internal position can be in the same division or a different division. For example, a sales manager in the Sales division can report to a sales vice president in the Corporate division. In a view using manager access control, an employee or partner user has access to data according to the behavior outlined in the following topics. Business Component Uses Position Access ControlIf a view uses manager access control, and if the business component on which the view is based uses position access control, then the following behavior applies:
NOTE: The value of the Visibility Applet Type field determines the access control properties that apply to a view. However, if a more restrictive value is specified for the Visibility Applet Type field for another view that is based on the same business component, then the restrictions of this visibility type are applied to both views. For example, if two views are based on the same business component, and if Manager visibility is selected for one view and Sales Rep Visibility is selected for the other view, then the restrictions of the Sales Rep Visibility type are also applied to the user's active position or team positions on the view that has implemented Manager access control. As a result, the user does not have access to data associated with subordinates' positions. Business Component Uses Personal Access ControlIf a view uses manager access control, and if the business component on which the view is based uses personal access control, then the behavior is as follows:
Views that apply manager access control generally contain the phrase My Team's in the title, such as My Team's Accounts. (In some cases, the word My is omitted.) There are no business component view modes specific to manager access control. Manager access control is set at the view level. It requires that the business component on which the view is based has a view mode with owner type Position or Person. NOTE: In a view using manager access control, if the manager user has no subordinate positions defined, then the user cannot create new records in the view. The New button and the New Record command are unavailable. Related Topics |
Siebel Security Guide | Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Legal Notices. | |