Hi. I have been stuck with the same predicament for over 3 days now and my research into the solution is going nowhere. I need this urgently so any direction would be great.
So I have a model-driven application with several custom entities. I have a few users that need to access that application, and depending on the department (or BU) each user is in, they should have custom read/write/create/delete permissions on the custom entities.
What I did is I separated the users into business units (all having the same parent BU which is the Organization). I moved the users from the root BU to their own BU, hence they moved Teams. That means they shouldn't inherit the permissions that apply to the Team associated with the root BU, right?
John is in BU1, which is under the root/parent BU. I created a security role under BU1. I gave him read permissions for model-driven apps (SCOPE: Organization so the filled green dot) in the Customization tab, and gave him create (SCOPE: BU) and read (SCOPE: Organization) for a custom entity. So this should allow him to see the custom entity and create a new record but not delete/update/etc. Is that correct? But when I wanted to share the app and gave John the security role (only ONE role was given to him), he could access the application (through the unified URL) and see the custom entity, but couldn't see the columns/records/etc of the entity. It's just empty and nothing happens when you click on the entity. What could be the problem?
Please and thank you for the help.
@Pstork1 @CNT @RandyHayes @WarrenBelz if either of you can help, I'd very much appreciate it.
