You’re offline. This is a read only version of the page.
1,710
Hello,
I have the following security requirements that I need to implement in our module.
I created a Business Unit called "IT Department" that has 4 users as follows:
I am still stuck on how can I restrict access for User 2 to not see User 1 data and allow him to see the normal team members' data? (User 3 and User 4)
If I created a custom security role for User 2 and gave him everything at the BU level then he will be able to see User 1's data again.
Note: User 1 cannot be assigned to have access to the Organization level only the BU that he belongs to.
Could you please advise what will be the solution to the above requirements?
I would greatly appreciate it if you could provide an example.
Best regards,
EBMRay
Hello
I think the manager Hierarchy will satisfy my requirements, and as soon as I have some free time I will give it a try and report back.
I will not proceed with the option to go for plugins and sharing.
Thank you,
Julien
Hello
I think the manager Hierarchy will satisfy my requirements, and as soon as I have some free time I will give it a try and report back.
I will not proceed with the option to go for plugins and sharing.
Thank you,
Julien
Hi @Julien2,
You should be easily able to achieve this with hierarchy security. For more info: https://learn.microsoft.com/power-platform/admin/hierarchy-security
I would suggest to try to avoid plugins and sharing. Sharing can have performance implications and is typically meant for temporarely access or handle adhoc scenarios.
Hope this helps!
Hi,
How about you share the records that are created by user2 and user3 via plugin.
Your scenario might not be achievable via security roles even if you create separate team. you can control privileges only by user level or business unit level. So you can try Sharing approach through which you can control the access as well (read,right,delete). If the number of entity is very limited then you can register a plugin on create event and just share the record to user2. You can control the user details via configuration entity.
#1
mmbr1606
22
Super User 2025 Season 1
#2
stampcoin
17
#3
ankit_singhal
11
Super User 2025 Season 1
Share
Report
All responses (
Answers (
