RE: BOM access control

Dennis Lindinger — Wed, 11 Sep 2024 17:56:44 GMT

Hello Miranda, when you describe bom A and bom B, are you referring to two different parts that have their own BOM (user A should see part A and its bom and user B should see part B and its bom)? Or are describing a part that has a BOM and you want user A to see some parts in the BOM and user B to see to see other parts in the BOM? If it's the first scenario, then in addition to MAC policies, you could also solve it with Teams access control (Team A and Team B) and setting the appropriate team on the item.

You also have option to use role-based permissions using the managed_by or owned_by item properties in conjunction with the Owner and Manager identities giving access on the permission. Use a permission where the Manager identity has the ability to Edit. Create two identity groups (Group A and Group B). Populate the identities with user A and user B respectively.

-Dennis

RE: BOM access control

AJ Sebastian — Wed, 11 Sep 2024 13:01:39 GMT

Hi Miranda,

This should be possible through MAC Policies, which work in addition to the standard permission model.

Take a look at the following blogs: https://aras.com/en/blog/from-the-minerva-vault-how-to-create-secure-access-using-mac-policy-in-aras-innovator

https://aras.com/en/blog/implementing-mac-policies