...
| Note |
|---|
Caution should be observed when configuring delegations by organization since wrongly configuring a location can cause unintended delegations, such as those described below. |
A person is assigned to the Health location.
The RBAC engine moves up the tree to see if the Internal Sales location is an organization.
Since the Internal Sales location is not an organization, it continues up to the next level to see if the Sales Division is an organization.
Since the Sales Division was not configured correctly and is not an organization, it continues up to the next level to see if the Delegation Scopes location is an organization.
Since the Delegation Scopes location is not an organization, it continues up to the next level to see if the RB Organization location is an organization.
Since the BR Organization is an organization type location, and is the first organization location that was encountered, the RBAC engine determines that the person belongs to the RB Organization and then assigns the appropriate delegation to the objects in all locations below the RB Organization location which grants permissions to many more objects than the administrator intended.
...
| Insert excerpt | ||||||
|---|---|---|---|---|---|---|
|
...
Related
About Business Roles and Locations
Map EmpowerID Locations to External Locations
Create Business Role and Location Combinations
...