Configuring Permissions for Records
Configuring the Permissions for Records settings lets you control which users can view, edit, and delete specific records.
Steps
-
Click the App Settings icon (the gear-shaped icon) at the upper right of the "View" screen.
-
On the "App Settings" screen, select the App Settings tab, then click Records under Permissions.
-
Click Add Permission Set.
-
In the Target Records section, specify the condition for the permission setting to be applied to records.
To combine multiple conditions, click the Add a condition icon (the plus sign-shaped icon). Then, specify an additional condition and select either All conditions are met or Any conditions are met. -
In the User, Group and Department to Grant Permissions To section, add the users, groups, or departments for whom you want to set permissions.
You can add users, groups, or departments by using the search box, or by clicking the Select users from departments or groups icon to the right of the search box and making a selection from the Select Users dialog. -
If you want to set permissions for any of the following users, departments, or groups who are specified for a record, click Add a field for selection and select the relevant option.
- The user, department, or group specified in a field
- The user who created a record
- The user who last updated a record
- Process management assignees
-
Select the checkboxes for the permissions that you want to grant to the users, departments, or groups.
-
To set multiple combinations of target records and permissions, click Add Permission Set again and add more conditions.
When there are multiple rows of permission sets, higher rows take precedence over lower rows. To change the priority order of a row, drag and drop the row using the Reorder icon at its left. -
Click Save at the bottom right of the screen.
-
Click Update App at the upper right of the screen.
-
On the confirmation dialog, click Update App.
Fields that cannot be specified in the "Target Records" section
The following fields cannot be specified in the Target Records section.
- Label
- Rich text
- Text area
- Attachment
- Related records
- Blank space
- Border
Caution: If a department or group is specified in a field set under "Target Records"
If a department or group is specified as the value of a field set as a condition under Target Records, record permissions are set based on the department and group information as of the following times.
- When the app settings are updated
- When a record is added
- When a record is updated
To have permission settings applied to all records based on the latest department and group information, update the app settings.
Groups and/or departments can be specified for the following fields:
- Created by
- Updated by
- Assignee
- User selection
- Department selection
- Group selection
Fields that can be specified under "User, Group and Department to Grant Permissions To"
The following fields can be specified from Add a field for selection under User, Group and Department to Grant Permissions To.
- User selection
- Department selection
- Group selection
In addition to fields, you can also specify the user who created a record, the user who updated a record, or process management assignees.
You can specify these users by selecting the following.
- Created by: The user who created the record.
- Updated by: The user who last updated the record.
- Assignee: The user who is assigned in the current status for process management.
If you include a single user in multiple permission sets
If a single user is included in multiple permission sets in the Permissions for Records settings, the permission set located highest on the list will take precedence.
For example, suppose the "Sales Division" department is listed above "Everyone". If the "Sales Division" department has the "View" permission but "Everyone" does not, only users who belong to the "Sales Division" department will be able to view the relevant records.
Example of how to use record permissions
This section provides usage examples of the Permissions for Records settings.
Specifying "Created by", "Updated by", or "Assignee"
You can set permissions for the user who created the record, the user who updated the record, or process management assignees.
For example, in an app for which the Process Management feature is enabled, you can configure the settings in such a way that only the "Created by", "Assignee", and "Updated by" users can view records with a status that is not set to "Completed".
Specifying the "User selection" or "Department selection" field
By specifying a "User Selection" or "Department Selection" field placed on the app form, you can apply permission settings to the user or department selected for the field in each record rather than to any one specific user or department.
For example, you can configure the settings in such a way that only the user specified in a specific "User selection" field (the "in charge of" field) can edit or delete the record.