Published at: 2025-10-30
Multi-dimensional Permission Management
The system provides department-based data permissions by default, which means access is granted based on the organizational unit that owns the data. As your business grows, you may require multi-dimensional permission controls. Similar to department-based permissions, multi-dimensional permissions first establish independent hierarchical structures for each dimension. Then, both employees and business data are associated with specific dimension levels. Employees gain access to business data linked to their assigned dimensions and subordinate dimension levels.
1. Enabling Multi-Dimensional Management
- When the tenant enables the multi-dimensional feature, the system automatically activates three default dimensions: Regional Line, Industry Line, and Product Line.
- Administrators can maintain specific dimension hierarchies in “Org Structure Management - Multi-Dimensional Management” and enable applicable business objects for each dimension.
- Example: The Regional Line dimension may include four top-level regions - East China, North China, South China, and Central China. Under East China, there could be a second-level region like Shanghai Area, while South China might include Guangzhou Area and Shenzhen Area. The Regional dimension can be enabled for business objects such as Campaigns, Accounts, Contacts, and Opportunities.
picture coming soon:
2. Assigning Employee Responsibility Dimensions
- After enabling multi-dimensional functionality, the employee object automatically gains dimension responsibility fields.
- Administrators can assign specific dimensions to employees, authorizing them to view business data associated with those dimensions and their subordinate levels.
- When an employee is responsible for multiple dimensions or multiple nodes within one dimension, they can view all data across all assigned dimensions by default.
- Example: A department assistant A in the South China Sales Dept. might be assigned responsibility for both Guangzhou Area and Shenzhen Area in the Regional Line dimension.
3. Assigning Business Data Ownership Dimensions
- Business objects enabled in Multi-Dimensional Management automatically gain corresponding dimension fields, though these won’t appear in the frontend by default. Administrators must configure the object layout to display them.
- Example: If Account B belongs to Guangzhou Area, department assistant A can access Account B’s data through Regional Line dimension permissions.
4. Important Notes
- Multi-dimensional data permissions don’t automatically propagate upward to an employee’s reporting manager.
- Dimension Management is a separately licensed feature. Please contact your account manager for access.
- After enabling multi-dimensional permissions, you must manually display the relevant multi-dimensional fields in business object layouts.
- Ownership dimension fields support filtering in data list views, conditional data sharing rules, and BI Reports statistics.