Using the
Another SmartBox Object option is recommended when configuring Limited Data Access for your policy. You can use the
This SmartBox Object option, however, when you add new data to the SmartBox Object, that new data may not be seen by those having limited data access.
In this scenario, Jonathan, who is a member of the Sales Team - France role, only needs access to the data on the Customers SmartBox SmartObject for France . To achieve this, you must give him Limited Data Access on the Customers SmartBox SmartObject.
Follow the steps below to apply a policy with Limited Access for Jonathan, on the Customers SmartObject using the This SmartBox Object Option option.
- Open the Customers SmartBox SmartObject in Management and click the Data Access tab.
Notice that Full Data Access is enabled for Anthony ( a member of the Customer Success Team - Global Manager role), as he is the Global Customer Success Manager. You want to limit the data that Jonathan is able to access on the Customers SmartBox SmartObject. Data access policies can contain both Full Data Access and Limited Data Access settings.
- On the Limited Data Access section, click This SmartBox object: Customers.
- On the Limited Access section, click Display Properties... and select Country in the Title option and leave the Description option blank. Click OK.
-
You can add Jonathan to SmartBox Object properties in two ways, by using the By Item view or the By Role view. For the purpose of this example, you add Jonathan using the By Role view. Click the By Item option and select By Role.
- On the By Role view, click Add User.
-
On the Add Users, Groups, And Roles page, add the Sales Team - France role. Click OK.
- On the By Role view, give Sales Team - France role access to France. This means the Sales Team - France only sees Customers who's region is France in the Customers SmartObject at runtime.
You can use the Grant Access and Remove Access options to give full access or remove access to a selected user on all display properties, on the SmartBox Object, in the By Role view. This allows you to grant and revoke access in bulk. If no display property is selected then the Grant Access and Remove Access options are disabled.
-
Enable the policy by clicking Enable Policy.
- When Jonathan (a member of the Sales Team - France role) runs the Regions and Customers form, which contains data from the Customers SmartObjects, he only sees data for France at runtime.