How Sales Users Gain Access to Sales Information
The security reference implementation provided by Oracle determines who can access opportunity information in your sales organization. While basic information on accounts and contacts is available to all salespeople, your access to sales data is restricted by your position in the resource hierarchy, membership in the sales team, and ownership.
Whether or not you can access a particular opportunity or a lead depends on your membership in the resource and territory hierarchies. Here's how you gain access to opportunities. Lead access follows the same pattern. You can access an opportunity if:
-
You create the opportunity.
-
You're on the opportunity sales team.
-
The opportunity owner or sales team member is your direct or indirect report in the resource hierarchy.
-
You're the owner or are a member of the territory assigned to the opportunity.
-
You're the owner or member of a parent territory of the territory assigned to the opportunity.
-
You're assigned to a territory for the account associated with the opportunity.
-
You're assigned to a territory that's a parent of the territory for the account associated with the opportunity.
Salespeople can see all opportunities related to their accounts but access differs between territory members and opportunity members:
-
An opportunity owner gets full access to the opportunity, which includes the ability to edit as well as add and remove team members.
-
Owners and members of territories or parent territories assigned to the opportunity account get read-only access to the opportunity and aren't added to the opportunity sales team.
-
Owners and members of territories assigned to the opportunity product lines are added as a distinct list of territories to the opportunity sales team. Owners and members of these territories get full access to the opportunity. Depending on a profile option, either only the owner or all the members of the territory are added as resources to the opportunity sales team. Regardless of the access level for these members as a resource on the opportunity team, they always have full access.
Owners and members of parent territories of the territory assigned to the opportunity aren't added to the opportunity sales team but they always get full access.
The following diagram illustrates some of the different ways that you can gain access to an opportunity:
-
Named agents in the diagram (A, B, and C) can access the opportunity.
-
Unnamed agents (highlighted in yellow) can't access the opportunity.
-
Sales managers can access the opportunity because a salesperson in their management chain has access.
-
Owners of parent territories can access the opportunity through the sales territory hierarchy.
![How data security policies determine access to opportunities](images/crm_application_logic_security_overview_02_20036541.png)
-
Agent A can access the opportunity because she created it. When you create an opportunity, you're the initial owner.
-
Agent B can access the opportunity because he's on the sales team.
-
Sales managers who are higher up in the management chain can also see the opportunity because access is provided through the resource hierarchy. The managers of Agent A and Agent B can access the opportunity information, but agent A and Agent B's colleagues can't.
-
Agent C can access the opportunity because he's the owner of the NW territory. The owner of the parent territory can also access the opportunity.
-
Sales administrators can access the opportunity.
Special Access
Some access isn't affected by the management hierarchy and membership in sales teams or territories. This special access includes:
-
Administrators: Users assigned the Sales Administrator job role get full access to opportunities and other objects. This access is based on their privileges, regardless of where the administrators are in the management hierarchy. Administrators don't have to be on the sales team or members of territories.
-
Deal Protection: Salespeople assigned to an opportunity retain the sales credit on an opportunity even if they're moved to another opportunity.