01 Jun 2022
in reply to
Missing user
Link to this post
We currently have two security roles associated with Case management, Contact only and Contact and Account. The contact only security roles only allows that specific contact to view cases where they are the caller. The contact and Account security role, often given to supervisors or managers, can see all cases associated with their account. I populate a parent customer field on the case after the case is created so that I have both the contact and their account values. Within CRM, we only populate the Caller field on the Case form with Contact records.
The reason we do this is because many of our portal users oversee areas within their businesses that deal with sensitive information and they don't want all employees associated with a particular account to be able to see other people's cases.
Our portal solution is closed to the public and only made available to our customers. The on-line Help Desk is an area where we limit access to cases based on the Account and Contact relationship. Employee's of one Account can never see records associated with another Account.