Object Conditions
You can create conditions to define restrictions on a specific object based on one or more of its attributes, using logical operators to combine the conditions as needed.
The conditions that you create will be available for selection when you create permission sets and on the Search Conditions page.
Example: A condition to filter manufacturers located in the United States with an Active status.
- You can delete a condition that isn’t used in any permission set.
- You can delete up to 25 conditions in a single operation from the search page. If you select more than 25 conditions, the delete action will be disabled.
Create a Condition
- Navigate to the Product Management work area.
- In Actions, click Teams.
- On the Search Teams page, select Conditions from the Search Teams drop-down list.
- Click Create Condition and select the object for which you want to create
the condition and enter the object details.
- Name: A unique name for the condition.
- Description: A short description of the condition.
- Active: By default, this is set to Yes.
- Attribute: Select the attribute on which you want the rule to be set up. The attribute list consists of the main attributes for the object and the extensible flexfield attributes.
- Operator: Select an operator such as equals, is, or not equal to.
- Value: Provide the attribute value.
Repeat the steps to create a condition for another object.
- Click Save.
You can also set up nested rules with a combination of 'AND' and 'OR' to meet your business requirement.
Extensible Flexfield Attributes in Conditions
Here’s what you must know about using extensible flexfield attributes in conditions:
- If you have added new extensible flexfields, you must deploy these for the security to be defined based on those attributes.
- If you make any updates to the conditions containing extensible flexfield attributes, you must rebuild the index for the object to apply the updates to the access control list.
Allow Access for the Signed-in User
For Items and Manufacturers
You can provide view or manage access for all items and manufacturers to logged in users if they’re the creators. To provide access, select $User as the value for the Created By attribute when you define the condition for items and manufacturers. By setting a condition such as Created By = $User and associating it to a permission set and team, you grant team members access to all items or manufacturers they've created.
For Workflows
You can provide view or manage access for all workflows to logged in users if they’re the creators, assignees, or requesters of the workflow. To provide access, select $User as the value for the Created By, Assigned To, and Requested By attributes when you define the condition for workflows. For example: By setting a condition such as Assigned To = $User and associating it with a permission set and team, you grant team members access to all workflows assigned to them.
In both cases, the $User represents the logged in user.