Create and assign business roles

Overview

Before you begin

[!IMPORTANT] - Role permissions: You need System Administrator permissions or a management role with Role Permission Settings permissions. - Dependency: Disabled business objects do not appear in role settings. Without View List or View Details permission, employees cannot see the module in the client.

Procedure

1. Create a business role

1. Go to Setup > Role Permissions > Business Function Permissions.
2. Click New Role.
3. Enter the following information:
   • Role name: Enter a name, such as Tele-sales User.
   • Role description: Describe the role’s responsibilities and applicable users.
4. Click Save.

2. Configure object function permissions

1. On the role permission settings page, locate the business object to configure.
2. Configure operation switches:
   • View List: Controls the list page entry. When cleared, employees cannot find the object in navigation or the workbench.
   • View Details: Controls access to record detail pages. When cleared, employees cannot open a detail page by clicking a record name.
   • New/Edit/Import: Controls the corresponding buttons. When cleared, the buttons are hidden in the client.
3. Click Save in the upper-right corner.

3. Configure field-level permissions

1. In the object permission settings, click Set Field Permissions next to the object name.
2. Select controls for each field:
   • Read: Controls visibility on new, edit, list, and detail pages. When cleared, the field is hidden.
   • Edit: Controls whether users can change the field on new or edit pages. When cleared, the field is read-only.
   • Export: Controls whether list exports include the field value.
   • Display: Controls whether the field appears in list filters and field settings.
3. Click Save.

4. Assign the role to employees

1. On the role’s employee assignment page, click Add Employee.
2. Select employees in the selector and click Confirm.
3. Set a primary role: For employees with multiple business roles, select the primary role in the employee list. Custom objects use the primary role’s default layout and process first.
4. Copy a role to an employee: In the employee list, click Copy Role to Employee beside a configured employee. Select the new employee to clone all role settings.

5. Configure department approval permissions

1. On the role’s Employee Assignment page, locate an assigned employee.
2. Click Edit Approval Departments in the action column.
3. Select the departments that the employee approves in the organization tree.
4. Click Confirm. When records from these departments trigger approval, the system assigns them to the selected employee. ## Verify the result
5. Create a customer service business role without Read permission for the Customer Mobile field on the Account object.
6. Assign the role to the test employee Wang Wu.
7. Sign in as Wang Wu and open an account detail page.
8. Expected result: The Customer Mobile field is blank or hidden, confirming field-level isolation.

Related topics

• Create and assign management roles
• Configure basic data permissions
• Complete the initial organization, role, and data sharing setup