Securing Accounts Based On Region
Assume that accounts are classified as belonging to one of the following regions:
• Northwestern
• Northeastern
• Southwestern
• Southeastern
Assume the following company hierarchy exists:
• Senior Management has access to all customers
• Northern Division Management has access to all customers in the Northwestern and Northeastern divisions.
• Southern Division Management has access to all customers in the Southwestern and Southeastern divisions.
• Northwestern Users have access to all customers in the Northwestern division.
• Northeastern Users have access to all customers in the Northeastern division.
• Southwestern Users have access to all customers in the Southwestern division.
• Southeastern Users have access to all customers in the Southeastern division.
The following diagram illustrates the access groups and data access roles required to implement these requirements:
Notice the following about the above:
• There are 4 access groups because access to accounts is based on the region in which they are located (and there are 4 regions).
• There are 7 data access roles because each component of every layer of the access hierarchy requires a separate data access role.