Monday, September 26, 2005
Access Control
Access control is the term used to describe the set of Siebel application mechanisms that control user access to data and application functionality.
Access control elements include the following:
The sections that follow examine access control further:
Parties are categorized into the following party types: Person, Position, Organization, Household, User List, and Access Group.
Groupings of data
Customer data:
Master data:
Access control elements include the following:
- Application-level access control The set of screens that a user has access to are determined by the applications that your company has purchased. Each application is made of a set of available screens.
- View-level access control Within the available screens, you can control the views that areavailable to a particular user through responsibilities. A responsibility defines a collection ofviews that represent the data and functionality needed to perform a job function.
- Record-level access control You can control data records that each user can see through avariety of mechanisms, including direct record ownership by a user, being on a team working with the record, or being a member of the same organization as the record owner.
The sections that follow examine access control further:
- Parties People, entities representing people, and collections of people are unified as parties.Different party types have different access control mechanisms available.
- Data The type of data and whether the data is categorized determines which access controlmechanisms can be applied.
- Access control mechanisms Access control mechanisms you apply to parties and data determines what data a user sees.
Parties are categorized into the following party types: Person, Position, Organization, Household, User List, and Access Group.
Groupings of data
Customer data:
- Customer data includes contacts and transactional data such as opportunities, orders, quotes, service requests, and accounts.
- Access is controlled at the data item level, through a mechanism such as individual record ownership or ownership by an organization.
Master data:
- Master data includes the following referential data: products, literature, solutions, resolutionitems, decision issues, events, training courses, and competitors.
- Master data can be grouped into categories of similar items—for example, hard drives. Categories can then be organized into catalogs—for example, computer hardware—which arehierarchies of categories. Access can be controlled at the catalog and category levels throughaccess groups, which is the recommended strategy for controlling access to master data.
- Master data can be associated with organizations. By associating master data withorganizations, access can be controlled at the data item level. This strategy requires more administration than the access group strategy.
- Other data includes referential data that is not master data, such as price lists, cost lists, rate lists, and SmartScripts.
- Access is controlled at the data item level.
- Personal access control.
- Position access control. This includes single-position, team, and manager access control.