by eggsurplus

Control what your users can access and save time, money, and frustrations. Lock down sensitive data in SugarCRM or SuiteCRM to specific groups or teams. Supports unlimited assigned users, unlimited group assignments to records, custom layouts for each group, login/sudo capabilities and much more.

Cancel at any time!
Free Trial

#1005 - External customer access

Closed General Question created by vishal.mehra Verified Purchase 5 years ago

I am trying to setup the system where I would like our external customers (Accounts, Contacts associated via groups or roles) to have "group" level access to their data and the Internal Sales team have access to all the data for all the customers.

A few questions:
1. How do I get auto-assignment / inheritance to work in this scenario?
2. I would like to have a common layout for the objects we are exposing to all the groups, do I have to create custom setup for each group? Can this be done at the Role Level?
3. I am thinking of setting up multiple roles (one for each customer company) and assigning individuals to that with group access. One SalesPerson Role for Internal Sales person and an ExternalAccess Group for the company. In this case the idea is when a user logs in, he/she can see only the records they are authorized to.

Am I on the right track here?


  1. eggsurplus member avatar

    eggsurplus Provider Affiliate

    5 years ago

    Hello Vishal,

    1. Just add the security group to the accounts and contacts. When they create a record (like a case) it will inherit the group from the parent record as long as you have Inherit from Parent set in your settings.
    2. If you want a custom layout different than the default layout for a group then yes, you would need to create a custom layout for that group. You can copy layouts from existing layouts to speed that up.
    3. As long as you have groups set up so that they only see their own records.

    I'm not a fan of using SecuritySuite for giving customers access to your database. It's too easy for someone to mess up and open up confidential information. Proper segmentation using a portal that only allows access to certain subsets of data is much, much more secure.

    That being said, there are plenty of organizations that use SecuritySuite for this.


  2. eggsurplus member avatar

    eggsurplus Provider Affiliate

    4 years ago

    Closing this out, but feel free to follow up if you have any more questions.

This case is public. Please leave out any sensitive information such as URLs, passwords, etc.
Saving Comment Saving Comment...
  • "The perfect solution for managing security. Very stable and easy to implement. Must-have add-on for every CE implementation!"

    Read More Reviews

Keep up to date on the latest additions

We'll send you an email every month with handpicked add-ons, reviews, tricks and tips. Don't worry, we hate spam as much as you do.