Questions about Permissions and Access Control

Question 1. Who can view contracts in Getfly?

• Users with Access and Add permissions in the Contracts module can view contracts they created.

• Supervisors can view contracts created by their subordinates.

• According to the department hierarchy, users with the highest permission in a parent department can view contracts created by employees in subordinate departments.

• Users with the "View All Contracts" permission can view all contracts in the system.

Question 2. Who can view orders in Getfly?

• Users with Access and Add permissions in the Orders module can view orders where they are listed as the executor.

• The creator of the order can view the order they created.

• Users listed as related persons in the order can view the order.

• Users with Approve Orders permission can view orders from their own department and its sub-departments.

• Users with "View All Orders" permission can view all orders in the system.

Question 3. Who can view quotations in Getfly?

• Users with Access and Add permissions in the Quotations module can view quotations where they are the creator or executor, provided they also have permission to view the related customer.

• Supervisors can view quotations created by subordinates if they have permission to view the customer associated with the quotation.

• According to the department hierarchy, the user with the highest permission in a parent department can view quotations created by employees in sub-departments (requires permission to view the related customer).

• Users with "View All Quotations" permission can view all quotations in the system.

Question 4. Who can view customers in Getfly?

• The person assigned as the person in charge of the customer.

• Users with "View All Customers" permission.

• Users added as related persons to the customer.

• Users with permission to view customers in their own department and sub-departments will see customers whose assigned person is in their department or a subordinate department.

• Supervisors can view customers assigned to their subordinates (in the same department). The highest-level supervisor in a department can view customers of sub-departments.

Question 5. Who can view campaigns in Getfly?

• The campaign manager.

• Users who are participants in the campaign.

• Users with "View All Campaigns" permission.

Question 6. How to restrict sales staff to only see the orders they created and not those of other salespeople?

To ensure sales staff only see orders they created:

In the Order permission settings, only check Access and Add.

Go to System Settings → Permissions → Select the Sales Staff group → Under Sales Orders, only select Access and Add.

Note: Make sure to uncheck "Approve" and "View All" in the Sales Orders permissions. Otherwise, sales staff may still see each other's orders.

Question 7. How to set it up so that team leaders/managers can only see data from their own team and not other teams?

You can assign permissions so that team leaders only see data from their own teams.

Case 1: The user is a Department Head

• Set the user’s role as Department Head in the Organizational Chart.

• They will then only see data from employees under their management.

  

Case 2: The user is a regular employee

Remove the "View All Customers" permission.

Once removed, team members won’t be able to view each other’s customer data across different teams.

For same-team data visibility:

If you want members in the same department/team to see each other's customers, assign them the "View customers in own and sub-departments" permission.

Question 8. Can a parent permission group view customer data created by its child group?

No. A parent permission group cannot view customer data created by a child permission group.

1. Permission Structure:

Core principle: The parent permission group does not have access to data created by its child group.

Purpose: Ensures data separation and confidentiality between hierarchical groups.

1. When creating a child permission group:

The system automatically copies permissions from the parent group to the child group.

You can customize the child group’s permissions independently, enabling tailored access control.

Question 9. Who has permission to change the status of opportunities in a campaign?

The types of accounts related to opportunities and campaigns include: Campaign Manager (Responsible Account), Accounts with permission to view all opportunities, Accounts involved in the campaign.

The ability to change opportunity statuses within a campaign for each account type is as follows:

1. Campaign Manager (Responsible Account):

Can change the status of all opportunities within the campaign, including: Opportunities they are responsible for; Opportunities assigned to others; Opportunities with no assigned owner.

1. Accounts with permission to view all opportunities:

Can only change the status of: Opportunities they are responsible for; Opportunities with no assigned owner; Applies to both related and unrelated campaigns

1. Accounts involved in the campaign:

Can only change the status of: Opportunities they are responsible for, Opportunities with no assigned owner.

If they do not have permission to view all opportunities, they can only change the status of opportunities within campaigns they are involved in.