by eggsurplus

Control what your users can access and save time, money, and frustrations. Lock down sensitive data in SugarCRM or SuiteCRM to specific groups or teams. Supports unlimited assigned users, unlimited group assignments to records, custom layouts for each group, login/sudo capabilities and much more.

Free 30 day trial
Try it Now

#467 - Multilevel Hierarchy in SecuritySuite

Open Feature created by Rob123456 5 years ago

Hello,
Can we create Multilevel hierarchy through Security Suite.
What I need is:
A and B Reports to C
D and E reports to F
C and F Reports to G
Now,
Records of A and B should be visible to C, but records of C should not be visible to A and B.
Records of D and E Should be visible to F, but records of F should not be visible to D and E
Records of A, B, C, D, E and F should be visible to G, but records of G should not be visible to A, B, C, D, E and F
A simple tree structure hierarchy where lower node can not see records of upper node but upper node can see records of all node present below it in hierarchy.

For 2 level, I have created successfully with below steps:
1) Create a role with Owner rights.
2) Assign Owner role to the groups
3) Create a role with Group rights.
4) Assign Group role directly to the C and F

Now how to move with next level of hierarchy. I tried to repeat the above steps by keeping A, B, C, D, E, F and G in a new Group with Owner Rights and Group Rights for G. But it made a contradiction, as C and F were also having Group Right. So, records created by A, B, D, E and G started to get visible for C and F also.

I am sure I am moving in some wrong direction....
Your help will be appreciated.
Thanks..

  1. eggsurplus member avatar

    eggsurplus Provider Affiliate

    5 years ago

    I just answered your question to some extent on a doc page: https://www.sugaroutfitters.com/docs/securitysuite/introduction-video#post_2252

    In a typical 3-level hierarchy you would just grant G a role with All permissions and not assign G to a group.

    In a 4+ level hierarchy (or a more stringent 3-level one) you may want to take advantage of the Not Inheritable checkbox. By going to a user and checking that for a given group that tells the system to not automatically assign a group to a record that the user creates. This ensures that a group will not then see the record.

  2. saket123456 member avatar

    Rob123456

    5 years ago

    Thanks for your quick reply...
    I made User G and its group as Not Inheritable. But records created by C is visible to Records created by F.
    I want hierarchy in tree structure where Parent node will be able to view records of all children nodes on n level.
    Please suggest.

    • eggsurplus member avatar

      eggsurplus Provider Affiliate

      5 years ago

      If you don't want C to see F's records then ensure that their rights are either Owner or Group for that 2nd tier.

This case is public. Please leave out any sensitive information such as URLs, passwords, etc.
Saving Comment Saving Comment...
Rating
Rating
  • "I can say that it has been one of the best modules within our SugarCRM CE instance!"

    Read More Reviews

Keep up to date on the latest additions

We'll send you an email every month with handpicked add-ons, reviews, tricks and tips. Don't worry, we hate spam as much as you do.