Published at: 2026-09-17

Configure the service provider workbench

Configure object, layout, and data permissions for service connected applications.

Overview

Service providers use service capabilities through after-sales service connected applications. ShareService-Downstream Service Provider Convergence service connected application portal.

Administrators can control app status, app administrators, internal and external usage permissions, business objects, function permissions, and data permissions.

Before you begin

[!IMPORTANT] Use an administrator account with enterprise Internet and connected application management rights.

The service provider portal and service provider account have been opened.
The business objects, record types and page layouts that service providers need to use have been clarified.
The scope of data sharing for each business object has been determined.
The corresponding service provider connected role has been configured.

Operation steps

Configure service connected application

In Management > Connected Enterprise > Internet Application > Channel After-sales Service, open the service connected application.
Select ShareService-Downstream Service Provider.
Set the application activation status and application administrator.
Set internal and external usage permissions for the app.
Save the basic settings.

Configure business objects

In the connected application, open Business Object.
View the available objects preset by the system.
Select the record types available to service provider employees for the target object. The default scope is all record types.
Assign object page layouts to service provider employees.
In scene management, set object scenes that are visible or available to service provider employees.
Save the object settings.

The system provides a default set of business objects for service providers. Change this set only when required. Object settings work together with the service provider’s connected-role permissions.

Configure basic data permissions

In the data permission settings of the target business object, select the sharing scope.
Check the impact of this scope on the person in charge, relevant teams, members of the same company, and upstream and downstream personnel.
Save data permissions.
Use the service provider test account to verify the visible and editable range.

Data Permissions	Visible Scope	Editing Scope
Individuals only	Person in charge, relevant team members and their superiors	Read-only or editable according to relevant team permissions
Read only for members of the same company	Person in charge, relevant teams and service providers in the same company	Read only for members of the same company of service providers
Public read-only	Visible to both upstream and downstream personnel	The person in charge, his superiors, and relevant team members with editing permissions can edit
Public read and write in the same company	Visible to people in the same company as the service provider	People in the same company as the service provider can edit or delete
Public read and write	Visible to both upstream and downstream personnel	Upstream and downstream personnel can edit or delete

The “superior” in the table refers to the person to whom the user reports.

Expected results and verification

ShareService-Downstream Service Provider The application is in the expected state and the application administrator is set up.
The service provider role only displays open business objects, record types, layouts and scenarios.
The data visibility and editing range of the service provider’s test account comply with the selected data permissions.
Service provider accounts without corresponding permissions cannot access restricted objects or data.

FAQ and Troubleshooting

The service provider cannot see the business objectCheck whether the object has been opened in the connected application, and check the function permissions of the service provider’s Internet role.

The service provider sees the object but cannot view the data

Check the object’s data permissions, record the person in charge and related teams, and confirm whether the current account belongs to the corresponding service provider company.

Page fields or operations are inconsistent with expectations

Check the page layout assigned to this record type, as well as the field and function permissions of the service provider connected role.

Notes

Data permissions directly affect the visibility range of data between service providers and between upstream and downstream.
Before selecting editable or deletable visibility, confirm whether the business object allows for extensive collaboration.
Adjustments to system preset business objects should be verified using test roles first.