Organizational units organizational-units
About units about-units
Each object and user of the platform is linked to an organizational unit. This unit allows a hierarchical structure to be defined in order to give users a filtered view. A user’s unit defines their access level for different platform objects.
A user has read-only access to all of the objects in the parent units. Such user has read and write access to all objects of their unit and child units. A user does not have access to objects in parallel branches.
By default, only the All units are available.
When the user is assigned an organizational unit, this unit will always be applied to the objects the user created.
Creating and managing units creating-and-managing-units
Organizational units allow you to filter your instance depending on the organization your users are linked to. This unit can represent a region, country or even a brand in your instance.
Here, we previously created security groups with different roles to two users: one user is assigned the security groups Administrators and Geometrixx, the other user belongs to the security groups Standard user and Geometrixx Clothes See Creating a security group and assigning users for the full example.
We now need to create the organizational units for the Geometrixx Clothes and Geometrixx security groups:
-
From Adobe campaign advanced menu, select Administration > Users & security > Organizational units.
-
Click Create to start configuring your organizational unit.
-
Change the default Label and ID to Geometrixx.
-
Then, link this unit to a parent unit. Here, we chose All.
-
Finally, click Create to start assigning your new organizational unit to security group.
-
Follow the same procedure for the Geometrixx Clothes unit, except that its parent unit has to be the previously created unit, Geometrixx.
To see the impact of assigning different units to different security group, the user assigned to the Administrator and Geometrixx groups will create two email templates to see what the other user assigned to Standard User and Geometrixx Clothes can or cannot access.
-
From the advanced menu, select Resources > Templates > Delivery Templates.
-
Duplicate an existing template and personalize it as needed. For more on this, refer to the About templates section.
-
When the template is created, select the Edit properties icon to assign units to your template.
-
In the Access authorization drop down menu, select the organizational unit.
Here we are going to create one template with the previously created organizational unit Geometrixx.
-
Follow the same procedures to create the second template assigned to the previously created Geometrixx Clothes organizational unit.
Users assigned to the Standard User and Geometrixx Clothes groups will be able to see both templates. Because of the hierarchical structure of the organizational units, they will have read and write access to the template linked to the Geometrixx Clothes unit and only read-only access to the template linked to the Geometrixx unit.
Since the Geometrixx Clothes unit is a child unit of Geometrixx, the following message appears when users try to modify the Geometrixx template:
Organizational units can restrict the access to different features such as profiles. For example, if our Geometrixx Clothes users access the Profiles tab, they will be able to fully access and modify the profiles with the Geometrixx Clothes organizational unit.
Whereas the profiles with the Geometrixx organizational unit will be read only, the following error will appear if users try to modify one profile: You do not have the rights needed to modify the ‘profile’ resource of ID.
Partitioning profiles partitioning-profiles
If your organization needs to isolate the profiles contacted by each of your different brands, you can partition your profiles by their organizational units.
By default, the organizational unit fields are not available on your profiles and need to be added.
-
From the advanced menu, via the Adobe Campaign logo, select Administration > Development > Custom resources.
-
Select Profile or create a new custom resource to extend the profiles. For more information on how to extend the profiles, refer to this page.
-
Check the Add access authorization management fields box to add the organizational units in the Profile extension.
-
Click Save.
-
Update the structure by re-publishing the custom resources. For more information about the publication process, refer to Updating the structure section.
The organizational unit field is added to your profiles in the Access authorization section.
Related topics: