Basic Access Control for Siebel Financial Services

Basic access control for Siebel Financial Services applications is implemented as described in other topics in this guide, with the following exceptions:

• "Access Control Mechanisms"

• "Administration of Access-Group Access Control"

Access Control Mechanisms

The information in this topic applies to access control for opportunities in any view that uses personal, position, or organization access control.

If an opportunity's Secure field is checked, then only positions on the sales team have visibility of the opportunity in any view that applies person, position, or organization access control. For example, in the All Opportunities view, users on the sales team can see a secure opportunity, but other users in the same organization cannot. In the My Team's Opportunities view, a manager cannot see a secure opportunity on which a direct report is a primary unless the manager is also on the sales team. Any activities or events related to a secure opportunity are also hidden from any user who is not on the sales team.

Secure opportunity access control is provided by the following search specification on the Opportunity business component:

[Secure Flag] = 'N' OR EXISTS([Sales Rep Id] = LoginId())

Access-Group Access Control

Households can also be used in combination with other party types to form an access group. In all access control contexts, include households in lists of the party types that can be members of access groups.

Administration of Access-Group Access Control

This topic provides procedures for associating an access group with a catalog or category when you are using Siebel Financial Services applications.

Associating an Access Group with a Catalog

By associating an access group with a catalog of master data, you grant access to the data in the catalog to individual users in the access group.

Note: For a catalog and all of its' categories to be visible only to the access groups associated with it, the catalog's Private flag must be set.

To associate an access group with a catalog 

1. Navigate to the Administration - Catalog screen, then the Catalogs view.

   The Catalogs list appears.

2. Select a catalog.

3. Click the Access Groups view tab.

   The Access Groups list appears, which shows the access groups associated with this catalog.

4. In the Access Groups list, add a new record.

   A pop-up list appears that contains access groups.

5. Select an access group, and then click Add.

   The access group appears in the Access Groups list.

6. Complete the following fields for the access group you add, using the guidelines provided in the following table, and then step off of the access group record to save the record.

   Field	Guideline
   Admin	Set this flag to allow users in this access group to administer the catalog.
   Cascade	Set this flag to automatically associate this access group with the catalog's descendant categories (child, grandchild, and so on). The resulting behavior is that users in the access group have access to the data in the descendant categories.

   
   

You can disassociate an access group from a catalog similarly.

Associating an Access Group with a Category

By associating an access group with a category of master data, you grant access to the data in the category to individual users in the access group.

Note: For a category and all of its subcategories to be visible only to the access groups associated with it, the category's Private flag must be set or the Private flag of the catalog or a category from which the category descends must be set.

To associate an access group with a category 

1. Navigate to the Administration - Catalog screen, then the Catalogs view.

   The Catalogs list appears.

2. Drill down on a catalog name.

   The Categories list for the catalog appears.

3. Click the Access Groups view tab.

4. In the Access Groups list, add a new record.

   A multi-value group appears that lists access groups.

5. Select an access group, and then click Add.

   The access group appears in the Access Groups list.

6. Complete the following fields for the access group you add, using the guidelines provided, and then step off of the access group record to save the record.

   Field	Guideline
   Admin	Set this flag to allow users in this access group to administer this category.
   Cascade	Set this flag to automatically associate this access group with this category's descendant categories (child, grandchild, and so on). The resulting behavior is that users in the access group have access to the data in the descendant categories.

   
   

You can disassociate an access group from a category similarly. When an access group is disassociated from a category, it is automatically disassociated from all of the category's descendant categories.