Access Control
Siebel Intelligent Search restricts which data a user can see and retrieve when performing searches. It ensures that you can only see the records that you are authorized to access based on their organization, position, and visibility rules.
Siebel Search access control is implemented through a combination of Siebel Business Component View Modes and the Configured drilldown view’s visibility. During the indexing of records from Siebel application into OpenSearch, each record is tagged with the appropriate visibility. At runtime, when you perform a search, your access permissions are included with the search query. As a result, only records that you are authorized to access are returned in the search results.
Siebel Intelligent Search supports four visibility types, listed from least to most restrictive:
- All
- OrganizationId
- PositionId
- PersonId
Visibility Use Case 1: Searching Within One Category
You can perform searches using the same or a more restrictive visibility level than the default set by the drill-down view. Searches with less restrictive visibility than the default are not allowed.
For example:
| Category | Drill-Down View Visibility | Allowed Searches | Disallowed Searches |
|---|---|---|---|
| ServiceRequests ModernSearch | All (least restrictive) | Any visibility (All, PositionId, PersonId) | None |
| ServiceRequests ModernSearch | OrganizationId | OrganizationId, PositionId, PersonId | All |
| ServiceRequests ModernSearch | PersonalId (most restrictive) | Only PersonId | PositionId, OrganizationId, All |
| Account ModernSearch | PositionId | PositionId, PersonId | OrganizationId, All |
Visibility Use Case 2: Searching Across All Categories
Siebel Intelligent Search applies the most restrictive visibility to all indexed categories.
For example: Assume you have indexed the following categories, each with a drill-down view that has a corresponding visibility applet type:
| Category | Drill-Down View | Drill-Down View Visibility |
|---|---|---|
| Contact ModernSearch | Contact List View | OrganizationId |
| Accounts ModernSearch | Account List View | SalesRep |
| Service Requests ModernSearch | All Service Requests Across Organization | ALL |
| Opportunity ModernSearch | All Opportunities across Organizations | ALL |
SalesRep has the most restrictive visibility and will be applied across all categories. Results are filtered accordingly.
On top of this default visibility, you can do more restrictive search based on visibility hierarchy.
Visibility Use Case 3: Searching Across Multiple Categories
Siebel Intelligent Search applies the most restrictive visibility to the selected group of categories.
For example: Assume you have selected 3 categories, each with a drill-down view that has a corresponding visibility applet type -
| Category | Drill-Down View | Drill-Down View Visibility |
|---|---|---|
| Contact ModernSearch | Contact List View | PersonId |
| Accounts ModernSearch | Account List View | SalesRep |
| Service Requests ModernSearch | All Service Requests Across Organization | ALL |
PersonId has the most restrictive visibility and will be applied across the selected categories. Results are filtered accordingly.
On top of this default visibility, you can do more restrictive search based on visibility hierarchy.