by eggsurplus

Control what your users can access and save time, money, and frustrations. Lock down sensitive data in SugarCRM or SuiteCRM to specific groups or teams. Supports unlimited assigned users, unlimited group assignments to records, custom layouts for each group, login/sudo capabilities and much more.

Free Trial

By clicking you consent to share your profile with the developer

#467 - Multilevel Hierarchy in SecuritySuite

Open Feature created by Rob123456 9 years ago

Hello, Can we create Multilevel hierarchy through Security Suite. What I need is: A and B Reports to C D and E reports to F C and F Reports to G Now, Records of A and B should be visible to C, but records of C should not be visible to A and B. Records of D and E Should be visible to F, but records of F should not be visible to D and E Records of A, B, C, D, E and F should be visible to G, but records of G should not be visible to A, B, C, D, E and F A simple tree structure hierarchy where lower node can not see records of upper node but upper node can see records of all node present below it in hierarchy.

For 2 level, I have created successfully with below steps: 1) Create a role with Owner rights. 2) Assign Owner role to the groups 3) Create a role with Group rights. 4) Assign Group role directly to the C and F

Now how to move with next level of hierarchy. I tried to repeat the above steps by keeping A, B, C, D, E, F and G in a new Group with Owner Rights and Group Rights for G. But it made a contradiction, as C and F were also having Group Right. So, records created by A, B, D, E and G started to get visible for C and F also.

I am sure I am moving in some wrong direction.... Your help will be appreciated. Thanks..

  1. eggsurplus member avatar

    eggsurplus Provider Affiliate

    9 years ago

    I just answered your question to some extent on a doc page:

    In a typical 3-level hierarchy you would just grant G a role with All permissions and not assign G to a group.

    In a 4+ level hierarchy (or a more stringent 3-level one) you may want to take advantage of the Not Inheritable checkbox. By going to a user and checking that for a given group that tells the system to not automatically assign a group to a record that the user creates. This ensures that a group will not then see the record.

  2. saket123456 member avatar


    9 years ago

    Thanks for your quick reply... I made User G and its group as Not Inheritable. But records created by C is visible to Records created by F. I want hierarchy in tree structure where Parent node will be able to view records of all children nodes on n level. Please suggest.

    • eggsurplus member avatar

      eggsurplus Provider Affiliate

      9 years ago

      If you don't want C to see F's records then ensure that their rights are either Owner or Group for that 2nd tier.

This case is public. Please leave out any sensitive information such as URLs, passwords, etc.
Saving Comment Saving Comment...
  • "I can say that it has been one of the best modules within our SugarCRM CE instance!"

    Read More Reviews