Control what your users can access and save time, money, and frustrations. Lock down sensitive data in SuiteCRM to specific groups or teams. Supports unlimited assigned users, unlimited group assignments to records, custom layouts for each group, login/sudo capabilities and much more.
#329 - How best to make an Account and/or Contact visible to only Assigned To? (creator maybe?)
Hi, I would like to keep personal information about some of my contacts private. Meaning an account/contact is viewable by only a single regular user (admin's see all). How to do with SecuritySuite? Key on Assigned To? Creator? Add a custom field?
-
"The add-on itself was already a must for my SuiteCRM, which was missing this very important security feature. However, what surprised me the most was ..." - Davint
Read More Reviews
Larry Rudd
7 years ago
Additional note: While I am admin, the same idea required for regular users - If the company president wants to put her daughter's cell number in SuiteCRM, how to allow only the president to see/use it?
7 years ago
Basically a "Make Private" option? To do that without an explicit "make private" option you would remove all groups from the record. Users with roles that are set to Owner or Group would not see that record then. Only the person assigned to the record.
If someone has rights to view All records then they would still be able to see it. In that case, you would want to ensure that all users have at most Group rights.
We do have a "Make Private" option on the roadmap to add for more flexibility, but there is no time table for it yet.
7 years ago
"Make Private"! I vote for it moving up on list of to-do's. Thanks for update. I like the idea that "Make Private" would be discreet activity. No leaving up to chance whether a group setup incorrectly in future.
7 years ago
Noted and will be taken into consideration to move it up. It would be in a new tiered plan when it does come out due to the extensive work required to maintain that.
I do hope the daughter's cell number example was just a fun example to get the point across.
7 years ago
I have looked into this more and the challenge is how to handle related records. If an email is on an account should that be private as well? Leads, opps, etc? How about an task on an opportunity related to that account? It gets really messy fast. My preference is that a private option only makes that specific record private and not everything else related to it.