Customer Zone Object Permissions

Posted by dubosegriffin on 12-Jan-2016 12:50

We are trying to utilize permissions to limit (not hide) access to select tenant zones. The LDF function does not provide for this because the organization attribute is not present on the the tenant zone object. So, we have turned to the ISV Partner role and the ISV Zone field. What I would like to do it is something like this.

Mary has access (can view and login into) client zone 1, 4, 7

Bob has access (can view and login into) client zone 2,12, 7

John has access (can view and login into) client zone 3, 6

How can I make this happen?

DuBose

Posted by Anoop Premachandran on 14-Jan-2016 00:58

Make sure the relationship between Tenant (Customer) and ISV Partner (User) in master is many to many.

Now relate the following way for these records

Mary to customer 1, 4, 7

Bob to customer 2,12, 7

John to customer 3, 6

Now go to Setup -> Application Setup -> Objects  and Select Customer Object (ID is 2)

Go to Permissions Tab

Now give Relationship permissions for View, Edit and Login.

Do not give direct permissions to Customer object for ISV Partner

All Replies

Posted by Anoop Premachandran on 12-Jan-2016 22:08

Tenant (customer) and user are related and you can use relationship permissions on this relationship.

Posted by dubosegriffin on 13-Jan-2016 14:27

Can you elaborate. I tried this route and it is not providing for the intended results.

Posted by Anoop Premachandran on 14-Jan-2016 00:58

Make sure the relationship between Tenant (Customer) and ISV Partner (User) in master is many to many.

Now relate the following way for these records

Mary to customer 1, 4, 7

Bob to customer 2,12, 7

John to customer 3, 6

Now go to Setup -> Application Setup -> Objects  and Select Customer Object (ID is 2)

Go to Permissions Tab

Now give Relationship permissions for View, Edit and Login.

Do not give direct permissions to Customer object for ISV Partner

Posted by dubosegriffin on 26-Jan-2016 10:18

Thank you. I was able to create many roles and relationships to each of these users to create this scenario. I could then use role specific pages to control the listviews available to each.  Thanks again.

This thread is closed