Siebel Order Management Guide Addendum for Communications > Creating Communications Promotion Groups >

Promotion Group Access Control Reference

To control who is entitled to add members to or remove members from a promotion group, product administrators create access control rules when setting up the promotion group definition. Your Siebel application enforces these rules when call center agents add members to or remove members from promotion groups.

Member access right values are summarized in Table 109.

At run time, by default, only promotion group owners can manage the memberships. In addition, your Siebel application enforces access control rules as follows:

• The owner, billing, and service accounts of the promotion group have full access rights to the entire promotion group.
• The owner, billing, and service accounts of an asset associated with a membership that has the Manage Members access right have full access rights to the entire promotion group.
• The owner, billing, and service accounts of an asset associated with a membership that has the Manage Self access right can modify and disconnect that membership. However, these accounts cannot perform these actions on other memberships in the promotion group.
• The owner, billing, and service accounts of an asset associated with a membership that has the Modify Self access right can modify that membership.
• A customer can subscribe to the membership of a promotion group if one of the following statements is true:
  • The customer is the holder of the owner, billing, or service account of the promotion group.
  • The customer is the holder of the Owner, Billing, or Service Account of an asset already associated with a membership of that promotion group, with the Manage Members access right.
  • The membership has the Add Self access right.
• The owner, billing, and service accounts of an asset associated with a membership that has the View Members access right can see all members of the promotion group.

The enforcement of access control rules affects the Promotion Groups screen, Restricted Components view and the Accounts screen, Installed Assets view, as described in the topics that follow.

Access Control Rules and the Restricted Components View

In the Promotion Groups screen, Restricted Components view, the access control rules affect the contents of the Components list, the Modify and Disconnect buttons of the Components list, and the Add button of the Promotion Group Definition list.

Components list contents. The Components list displays all membership and reward products of the promotion group only in the following cases:

• The account context is the owner, billing, or service account of the promotion group.
• The account context is the owner, billing, or service account of an asset associated with a membership of the promotion group that has the Manage Members access right.
• The account context is the owner, billing, or service account of an asset associated with a membership of the promotion group that has the View Members access right.

Components list menu options. If the account context is the owner, billing, or service account of the promotion group or of an asset associated with a membership that has the Manage Members access right, then the options are enabled regardless of which list row is selected. If these conditions do not apply, then the state of each option depends on the access rights of the selected row, as follows:

• If the account context of the selected row is the owner, billing, or service account of an asset associated with the selected membership and the membership has the Manage Self access right, then all options are enabled.
• If the account context of the selected row is the owner, billing, or service account of an asset associated with the selected membership and the membership has the Modify Self access right, then the Modify option is enabled.

Promotion Group Definition Add button. If the account context is the owner, billing, or service account of the promotion group or of an asset associated with a membership that has the Manage Members access right, then the Add button is enabled regardless of which list row is selected. If these conditions do not apply, then the Add button is enabled only if the selected membership has the Add Self access right. These facts have the following consequences:

• If the account context is the owner, billing, or service account of an asset associated with a membership that has the Add Self access right, then you can create a new instance of this membership in the same promotion group on behalf of the holder of that account.

  However, the validity of this action is subject to the cardinality and validation rules. These rules are applied when the order that includes the promotion group is processed.

• If the account context does not have a membership in the promotion group, then the holder of that account can subscribe only to a membership that has the Add Self access right. Subscription to other memberships can be granted by the promotion group owner, billing, or service account, or by a member that has the Manage Members access right.

The effects of access control rules on this view are summarized in Table 110, where the cell contents signify the following meanings:

• All. All components of a promotion group are displayed.
• Account. Only the promotion group components that belong to the current account context are displayed.
• Enabled. The object is enabled.
• Disabled. The object is disabled.

Access Control Rules and the Installed Assets View

In the Accounts screen, Installed Assets view, whether the Modify and Disconnect buttons are enabled or disabled varies according to the access rights of the selected membership row. The effects of access control rules on this view are summarized in Table 111, where the cell contents signify the following meanings:

• Enabled. The option is enabled.
• Disabled. The option is disabled.