Published at: 2025-10-30

Multi-dimensional Permission Management


The system provides department-based data permissions by default, assigning access according to the department that owns the data. As the business grows, you may need additional dimension-based data controls. Like the department dimension, each additional dimension builds an independent hierarchical structure; then you associate specific hierarchy nodes with employees and with business records. Employees gain access to the records associated with the dimension nodes they are responsible for, including subordinate nodes.

1. Enabling Multi-Dimensional Management

  • After your tenant enables Multi-Dimensional Management, the system automatically provisions three dimension lines: Region Line, Industry Line, and Product Line.
  • Administrators manage each dimension’s hierarchy and enable the applicable business objects under Org Structure Management → Multi-Dimension Management.
  • Example: In the Region Line dimension you create four level‑1 regions: East China, North China, South China, and Central China. Under East China you create a level‑2 node for Shanghai; under South China you create level‑2 nodes for Guangzhou and Shenzhen. You enable Campaigns, Accounts, Contacts, and Opportunities for the Region Line dimension.

image

2. Assigning Employee Responsible Dimensions

  • When Multi-Dimensional Management is enabled, the Person object automatically gains fields for “Responsible Dimension”.
  • Administrators assign the specific dimension nodes an employee is responsible for, granting the employee access to records associated with those nodes and their child nodes.
  • If an employee is assigned multiple dimensions or multiple nodes within a dimension, they can access all records for every assigned node by default.
  • Example: Assign Assistant A in the South China Sales Dept. responsibility for the Guangzhou and Shenzhen region nodes on the Region Line.

3. Setting Business Record Ownership by Dimension

  • Business objects enabled for a dimension automatically receive the corresponding dimension field, but this field does not display on record pages unless an administrator adds it to the object’s page layout.
  • Example: If Account B’s owning region is Guangzhou, Assistant A will get access to Account B based on A’s Region Line permissions.

4. Notes and Considerations

  • An employee’s multi-dimensional data permissions do not propagate upward to their manager.
  • Multi-Dimensional Management is an add‑on feature; contact your customer success manager to enable it.
  • After enabling multi-dimensional permissions, administrators must manually add the relevant dimension fields to the page layouts of enabled business objects.
  • Dimension ownership fields support filtering on list views, creating condition-based data sharing rules, and being included in BI Reports.
Submit Feedback