You are browsing the documentation for version 1.6 of OroCommerce, OroCRM and OroPlatform, which is no longer maintained. Read version 5.1 (the latest LTS version) of the Oro documentation to get up-to-date information.

See our Release Process documentation for more information on the currently supported and upcoming releases.

Available in OroCRM Available in OroCommerce

Blueprints of User Access Configuration


As a precondition, we have ensured that there is a sales assistant role with the Business Unit access level granted for the sales-related entities and the sales manager role with the Division access level granted for the same entities. The users in the examples below have one of these roles assigned.

Example 1: Access to Business Units of the Same Organization

A sales assistant Todd needs access to the business units highlighted in yellow that are in the same organization.


Select each of the business units in Access Settings:


Example 2: Access to Business Units in Different Organizations

If a sales assistant Todd is helping in the sibling organization, he might need access to the business units highlighted in yellow that belong to the different organizations:


Select each of the organizations and business units to which Todd must have access in the Access Settings section:


Example 3: Access to the Business Unit with Subunits

When Todd is promoted to the sales manager, his role changes to the one with the division access level, and he gets access to the business units and the chain of its subunits.



A division is a business unit with the whole chain of its subunits, so you can select only the top business unit of the division (ACME East in our example) in Access Settings to automatically give Todd access to the entire division.

When a new business unit is added to the division, the sales manager has the necessary access to monitor it.


Related Articles