Multi-Organization Access Rights

Key Features

Record Access

Select current/active Job&Organizational Unit

To gain access to the Multi Organization Access Rights module, a user who logs in to Agile e6 has to select a job function (respectively an organizational unit). The selected organizational unit initially is the current/active job.

A user can select from

  • All assigned Jobs: all job functions a user is assigned to are displayed for selection
  • Jobs with currently displayed Organizational Units: only those job functions are displayed for selection that belong to the currently displayed organizational unit as defined in the Organizational Units to Display list.
 

The access (view) on objects is initially limited to those which belong to the current organizational unit the user has selected (including subordinate organizational units) when logging in to the Multi-Organization Access Rights module.

In the diagram above the Sales Director has selected as the current organization thus granting access (view) to the documents D1-D3 and D6-D9.

 

Organizations to display

A user can be assigned to several organizational units via different job functions. However, when selecting a current organizational unit, only this organizational unit (including subordinate organizational units) and the objects assigned to it will be displayed. In order to gain access to additional organizational units a user is assigned to, a function is provided that allows to select any of these organizational units for display.

When activating the checkbox for Europe Marketing, this organizational unit and its assigned objects will be displayed in addition to NA Marketing.

The current organizational unit is always displayed in this list and cannot be deactivated!

Only those organizational units can be selected for display a user is assigned to via a job function!

Please note that the DataView manager is not subject to any access limitations. Therefore, the "Organizations to Display" and "Select current Job" functions don't apply to the DataView manager!

 

Suppress Inheritance

In some cases it may be required to deny a user access to a subordinate organization and its assigned objects. This is done by means of the so-called "Suppress Inheritance" function.
In the example below, the access to NA Marketing is suppressed. As a result, the Marketing Specialist doesn't have access to the organizational unit NA Marketing and the objects associated to it.

Please note that the "Suppress Inheritance" function can only be performed by a user with manager privileges!
In the example above only the Marketing Manager (if granted manager privileges!) can suppress the inheritance on the subordinate department NA Marketing. But as a prerequesite the Marketing Manager has to be explicitly assigned to the department NA Marketing via a job function. Otherwise, as a consequence, the view on NA Marketing would be surpressed for both the Marketing Manager and for the Marketing Specialist. Since then the department NA Marketing and the objects assigned wouldn't be accessable any longer, there was no chance to restore the "Suppress Inheritance" setting for any user assigned to the organizational structure. In this case only the DataView Manager would be able to restore the settings!

 

Global Visibility

Objects assigned to an organizational unit are only displayed for those users that have access to this organizational unit due to their job function. In some cases it might be desirable to grant all users access to a specific object. This is done via the activation of a so-called "View_all flag" on this object. Once this flag is activated, the object will be globally visible for all users. Subordinate objects of an object with activated View_all flag are also displayed.

 

Staff Members tab

On each Company / Department mask there is a Staff Members tab displaying the users that are assigned to the organizational unit (company, department or any sub organization) via a job function.

 

Modifying Organization-Object Assignments

Organization-specific working offers different ways of editing organization-object assignments. When creating an object, the object is automatically assigned to the currently active organizational unit and thus integrated into an organizational structure. However, organization-object assignments can be later modified with the following fuctions:

Assignment to additional organizational unit

Objects that are assigned to a specific organizational unit can be assigned to further organizational units thus enabling other users to view the objects.


In the example above, document D5 has been assigned additionally to the organizational unit Europe Marketing. Besides the NA Marketing Specialist now the Europe Marketing Specialist is also able to view document D5.

It is only possible to assign an object to an additional organizational unit if the user is assigned to this organizational unit via a job function and if this organizational unit is activated for display!
 

Assignment to different organizational unit

Objects can be assigned to a different organizational unit. In this case the previous organization-object assignment will be deleted.

In the example above, document D5 is assigned to a different organizational unit (Europe Marketing). The previous document-organization assignment (D5-NA Marketing) will automatically be deleted. Now only the Europe Marketing Specialist has access to D5 when being logged in to the organizational unit Europe Marketing.

 

Delete organization-object assignments

Organization-object assignments can be deleted, thus limiting the view on organizational units and the objects assigned for any user.



In the example above, the assignment between document D4 and the organizational unit NA Marketing has been deleted, thus denying the NA Marketing Specialist access to the document D4 and the subordinate documents D9 and D10. The only remaining access to any document for the NA Marketing Specialist is limited to document D5.

It is only possible to delete organization-object assignments that have been created by assigning an object to an additonal organization (explicit assignment). It is not possible to delete the organization-object assignment that was set up when creating the object (implicit assignment)!
 

Change job or organization during a session

A user can switch between jobs and/or organizational units he/she is assigned to. In this case all open masks are closed. The selection of a new organizational unit is done in the Job Selection window (View>Filter>Job/Position). This window is identical to the one used after logging in.