Redwood: Enhance Access Groups and Rules for Sales Orders
Update 25B introduced access groups that you could use to refine data access to sales orders. You can now create a duplicate access rule in an access group, and you can use the new Customer Class attribute and the Order Representative attribute when you create an access rule. Use an exception to exclude a member in your group. View and search for users according to first name, last name, or email address.
Realize these benefits:
- Improve your operational efficiency. Streamline how you set up your access rule and group.
- Use new attribute filters to refine access to sales order data.
- Simplify how you search for members of additions and exceptions when you set up your group.
You can now include the Order Representative attribute and the Customer Class attribute in your access rule. They provide more precise control over the sales orders that you can view and the permissions that you have when you view them.
Assume June Tsai is the order representative on sales order 65438. You can grant June the ability to create, view, or revise order 65438 but restrict other order representatives to only view access for a specific order type. You can also combine these new attributes with other order attributes to refine access control:
You can also duplicate an access rule instead of manually creating a new one from scratch. To duplicate a rule, select it, click Duplicate, then edit the copy, which starts with the text CopyOf prepended to the rule name:
Each access rule must have a unique name. If another rule already exists with the same name, then you’ll need to rename the duplicate before you save it.
Group Members and Exceptions
You can now exclude specific users from access groups.
To do this, add the user in the Exceptions section of the data access page. You can set up access according to business role and at the same time exclude individual users who shouldn't have that access.
Assume you create a group for users and assign them to the OM_NF_SERVICES_ROLES role. If you don't want a team member, such as Li Yu, to access a sales order, then you can use the Exceptions section to exclude Yu from the group.
You can also search for users in the Exceptions and Additions section by first name, last name, or email:
Steps to Enable
See the Steps to Enable section of the Redwood: Refine Data Security for Sales Orders feature.
Key Resources
Access Requirements
Users who are assigned a configured job role that contains these privileges can access this feature:
- Manage Security Access to Data for Sales Orders (FOM_MANAGE_DATA_SECURITY_PRIV)