Defining Access Groups

Refer to The Big Picture of Row Security for a description of how access groups are used to restrict access to specific objects.

Access groups control which groups of users (referred to as Data Access Roles) have rights to accounts (or other objects) associated with the access group. You can access the portal using Admin > Security > Access Group. You are brought to a query portal with options for searching for a specific access group. Once a record has been selected you are brought to the maintenance portal to view and maintain the selected record.

The Access Mode zone provides the information about the access group and its data access roles.

  • The Data Access Role collection defines the data access roles whose users have access to the access group's secured objects. Keep in mind that when you add a Data Access Role to an Access Group, you are granting all users who belong to this role access to all of the objects linked to the access group.

    Note: You can also use Data Access Role - Access Group to maintain a data access role's access groups.
  • The To Do Role Assignment collection may be used to route To Do Entries of a given To Do Type to a specific To Do Role if the objects related to the To Do Entry are associated with the access group. Refer to Adjusting the To Do Role for more information.