Multidimensional permission management

Overview

Before you begin

[!IMPORTANT] - Role permissions: You need System Administrator permissions. - Layout configuration: Dimension fields do not appear on the client automatically. Add them manually to the relevant page layouts.

Procedure

1. Enable and build a multidimensional hierarchy

1. Go to Setup > Organization Structure > Multi-dimensional Permissions.
2. After the tenant enables this capability, the system provides three primary dimensions: Territory, Industry, and Product Line.
3. Click Edit Applicable Objects, select objects that use the dimension permission calculation, and assign permissions. Examples include Campaign, Account, and Opportunity.
4. Click a target dimension tree, such as Territory, to open its details.
5. Create dimension nodes in the same way as departments. For example, add East China and North China under a first-level region, then add Shanghai under East China.

2. Set the dimensions assigned to an employee

1. Go to Setup > Organization Structure > Departments & Users.
2. Select an employee and click Edit.
3. In organization relationship attributes, locate the new dimension fields:
   • Responsible Territory
   • Responsible Industry
   • Responsible Product Line
4. In the dimension tree, select the nodes assigned to the employee, such as Guangzhou and Shenzhen.
5. Click Save.

3. Configure the data dimensions

1. On the create or edit page, set the object’s dimension field, such as an account’s Assigned Region, to the corresponding dimension node.
2. After the record is linked to the dimension, employees responsible for that node or any parent dimension node automatically gain access to the record.

Considerations

1. Reporting line does not inherit:
   • Access gained through multidimensional management does not automatically pass to the employee’s administrative manager in the primary department.
2. Dimension field usage:
   • Assigned dimension fields support list filters, criteria-based data sharing rules, and BI report statistics in addition to data isolation.

Verify the result

1. Configure the Region dimension and assign Account B to Guangzhou.
2. Assign Guangzhou as the responsible region for employee A.
3. Sign in as A and confirm that Account B appears in the account list.
4. Change A’s responsible region to Shanghai and sign in again. Confirm that Account B is hidden.

Related topics

• Manage departments and employees
• Configure data sharing rules