Home  >   Articles   >  User Management - Sharing Rules
Articles in this section

User Management - Sharing Rules

Learn how to configure Sharing Rules so users can access records and modules.
R
Ruba
4 Jan, 2024 - Updated 10 months ago
Table of Contents

Introduction

 

Vtiger allows you to customize sharing access across the CRM.

 

You can choose who can see CRM records just by setting up some rules. So, if you do not want a user to view records in a module, you can simply hide them. All this with the help of Sharing Rules!

 

In Vtiger CRM, the default access to CRM records is set to Public, which enables every user to see all the records.

 

Here are some points to remember before getting into the details:

 

Basic rules:

  • Admin users have full access to all records. However, read-only fields can only be modified by the system.
  • Record owners and superiors have full access as long as their profile permits them.
  • Profiles override the privileges granted by Sharing Rules at the user level. For example, if Profiles do not provide Edit permission, then you cannot allow Write permission in Sharing Rules.

Feature Availability 

 

Sales Starter

Sales/Help Desk Professional

Sales/Help Desk Enterprise

All-in-One Professional

All-in-One Enterprise

Sharing Rules

-

 

Note: Sharing rules are also available in Help Desk Starter edition.

Types of Sharing Rules

Here are the different modes available:

  • Public mode: The Public mode is used to enable public sharing. You can control whether a role or a group can have read, create, edit, delete, or all three permissions using the Public mode.
  • Private mode: The Private mode is used to block public access. Custom rules can be used to provide access to select roles and groups.
 

You can add Advanced Sharing Rules to provide customized access to roles and groups. Skip to this section to learn more.

 

Note: If a module is disabled in Settings > Module Management > Modules, then it is not shown under Sharing Rules, Profiles, and Roles.

 

Sharing rules enable you to configure the following permissions:

 

Rule Type

Description

Private

Users can only access records that are assigned to them and of users with roles in the lower hierarchy.

Public - Read-only

Users can view all other users’ records, but cannot modify or delete them.

Owners and co-owners can read, write, and  delete their records.

Public - Read, Create/Edit

Users can create records. They can also view and edit other users’ records, but cannot delete them.

Public - Read, Create/Edit, Delete

Users can view, edit, and delete other users’ records.

 

Configuring General Sharing Rules

By general sharing rules, we mean rules that apply to everybody in your company. 

Navigating to sharing rules

  1. Log in to your CRM account.
  2. Click the User Menu on the top right corner of the CRM screen.
  3. Click Settings.
  4. Look for the User Management section.
  5. Click Sharing Rules.

What do sharing rules look like

You will see the following screen when you open the Sharing Rules page:

 
 

The different columns are for assigning different rules for the modules mentioned under the Modules column. When you enable a radio button under a column, the rule mentioned in the column name gets applied to the module.

 

For example, if you set the Contacts module to Private, then users can access only the contact records that are assigned to them. On the other hand, if you set the Organizations module to Public - Read-only, then users can fully access their own records but only view others' records.

 

However, Admin users have full access to all the modules and records. 

 

Follow these steps to set general sharing rules:

  1. Log in to your CRM account.
  2. Click the User Menu on the top right corner of the CRM screen.
  3. Click Settings.
  • You will land on the Settings page.
  1. Look for the User Management section.
  2. Select Sharing Rules.
  3. Select a module and enable the radio button under a column to enable the rule.
  4. Click the Apply New Sharing Rules button.

Configuring Record-Level Access

When Record-Level Access is enabled for a module, then the records in the module are accessible only to their owners and co-owners.

Follow these steps to set the sharing rules to record-level access:

  1. Log in to your CRM account.
  2. Click the User Menu on the top right corner of the CRM screen.
  3. Click Settings.
    • You will land on the Settings page.
  4. Look for the User Management section.
  5. Select Sharing Rules.
  6. Select a module and enable the radio button under the Record Level Access column.
  7. Click the Apply New Sharing Rules button.

Who are the owners and co-owners of a record

The owner of a record is the user in the Assigned To field. The co-owner of a record is the user in the Co-owners field. 

A record can have one or more co-owners depending on the value of the field - it can be either a user or a group. When the value is a group name, then all the users belonging to the group become co-owners.

 

To learn more about groups, click here.

 

Note

  • In the case of nested groups (where a group is a part of another group), all the members of the group get access to records. 
  • You cannot set up Advanced Sharing Rules when you select Record Level access.
  • Admin users do not get access to records if they are not an owner or co-owner.
  • Only record owners and co-owners can access records via APIs. Other users get a Permission Denied alert. 


Setting up the co-owners of a record

You must first create the Co-owner field in a record and then assign a user or a group to it.

 

Follow these steps to set up co-owners:

Step 1: Creating the Co-owner field.

  1. Log in to your CRM account.
  2. Click the User Menu on the top right corner of the CRM screen.
  3. Click Settings.
  4. Look for the Module Management section.
  5. Select Module Layouts & Fields
  6. Choose a module from the Select Module drop-down.
  7. Click the Detail View Layout tab.
  8. Click the +Add Custom Field button under any block you want to create it in. 
    • You can also create a new block:
      1. Click the +Add Block button.
      2. Enter the block name.
      3. Choose the existing block after which you want to add the new block. 
      4. Click Save.
      5. Click the +Add Custom Field button in the newly created block.
  9. Select Co-owners from the Select Field Type drop-down.
  10. Set the field properties:
  • Mandatory Field - Entering a value for the field becomes mandatory.
  • +Quick Create - The field becomes available under Quick Create
  • Key Field View - The field appears in the Key Fields section of a contact’s Summary View.
  • Header View - The field appears in the Header section of a contact’s Summary View.
  • Mass Edit - You can perform a mass edit action on the field.
  1. Click Save.
 

Step 2: Choosing the co-owner(s) for a record.

  1. Click the Main Menu.
  2. Go to the module where you created the Co-owners field in Step 5.
  3. Open a record in the module.
  4. Click the Details tab on the right sidebar.
  5. Search for the Co-owners field using the search bar.
  6. Choose a user or a group in the field to make them the co-owner.
  7. Click Save.
 

Configuring Advanced or Custom Sharing Rules

Custom sharing rules are used to allow subordinates to perform actions on their superiors’ records. If you are a user at a higher level in the hierarchy, you can grant permissions to your subordinates to access your records in a module. This can be done even when the module is made Private.

 

You might ask, “How is it different from the Public mode?”. 

 

The Public mode allows everybody to access your records. But the idea behind advanced or custom sharing rules is to provide selective access to groups and roles, and even subordinates. 

 

For instance, a Sales Manager is at a higher level than a Sales Rep in the role hierarchy. When sharing rules are set to Private, a Sales Manager can view a Sales Rep’s records, but the other way around is not possible. 

 

Now, the Sales Manager wants to give access to his records to a Sales Rep. Setting sharing rules to Public makes the records visible to all the users. But setting up custom sharing rules gives the Sales Manager the flexibility to grant exclusive access to the Sales Rep.

 

Follow these steps to set up custom sharing rules:

  1. Log in to your CRM account.
  2. Click the User Menu on the top right corner of the CRM screen.
  3. Click Settings.
  4. Look for the User Management section.
  5. Select Sharing Rules.
  6. Select a module and click the downward arrow under the Advanced Sharing Rules column.
  7. Define the custom rule. Let’s take an example of the Contacts module.
  1. Click the +Add Custom Rule button.
  2. Enter the following information:
    • Contacts of: Whose contact records you want to share
    • Can be accessed by: Who can access the contact records
    • With permissions: Which access permissions must be given
  3. Click Save.
  1. Click the Apply New Sharing Rules button.


Sharing Rules vs. Profiles

Confused about how Sharing Rules and Profiles are different?

 

Here is a simple explanation:

Sharing Rules define what records your users can view. Profiles, on the other hand, define the actions that users can perform on records.

 

Refer to the table below for more clarity.

 

Profiles→

Sharing Rules↓

Read

Read + Write

Read + Write + Delete

Private

Users can only read their records and the records of their subordinates.

 

Users cannot read + write + delete the records of their peers and superiors.

Users can read + write their records and the records of their subordinates.

 

Users cannot read + write + delete the records of their peers and superiors.

Users can read + write + delete their records and the records of their subordinates.

 

Users cannot read + write + delete the records of their peers and superiors.

Public - Read

Users can only read the records of all the users.

 

Users cannot write + delete the records of their peers and superiors.

Users can only read + write their records and the records of their subordinates.

 

Users can read but cannot write + delete the records of their peers and superiors.

Users can read + write + delete their records and the records of their subordinates.

 

Users can read but cannot write + delete the records of their peers and superiors.

Public - Read + Write

Users can only read the records of all the users.

Users can only read + write the records of all the users.

Users can read + write + delete their records and the records of their subordinates.

 

Users can read + write but cannot delete the records of their peers and superiors.

Public - Read +Write + Delete

Users can only read the records of all the users.

Users can only read + write the records of all the users.

 

Users cannot delete the records of their peers and subordinates.

Users can read + write + delete the records of all the users.

 

To learn more about Profiles, click here.

Was this article helpful?
1  out of  2  found this helpful.
Comments 0
Be the first to comment
© Copyright 2023 Vtiger. All rights reserved.