
Announcements
Hello, I am looking for some advice, since still in a stage of learning yet, what would be best way to structure access to data with different teams/departments and business units?
We started with using model driven apps as "order management" system to manage incoming orders for one side of the business, which include contact tables/custom (i.e. sales records tables, order queues, etc) . I Have a single root business unit at this point and different teams to manage separate accounts (and contacts under) and related activities access. Users can be assigned to different teams to oversee activates for different teams. Each team responsible for own country/region. Security roles also can gice access across teams.
In a next stage, we are looking to expand Dataverse to serve a single database for operations/sales and add some inventory/POS functionality.
This will include 4 different business divisions for example, International with teams managing different regions, then B2B unit (more traditional CRM/Dynamics Sales approach) and retail division with different retail locations (B2C) and another division managing between international/retail sales so they need access to both.
What would be best way to structure to separate access to same data by separate sides of the business, so Retail can only see own records, while Finance/C-level can see all divisons data?
And in retail group each store can only manage only own "store" level records with each Sales rep only able see/edit own created records and same time Store manager can manage records on store level. And District managers access/manage own "territory". (Group of retail teams/locations?)
Same applies for Operations app, where each retail store will have own records for assets and service requests, and visibility according to hierarchy.
Should we create busines units for each division as top level (retail/international/B2C/B2B) then, and for retail what would be choice for "Retail Store/Location"?
Would be possible for example give Retail unit access to Retail contacts as own (add/modify) and give access to international part of contacts as "read-only" scenario?
Another scenario, for example, we have custom table with different "products" SKU's to use in Orders and some of them can be only "sold" and used on international side, how we hide/restrict those SKu's from Retail side and other, while International can have access all SKu's?