Restrict Root Business Unit data for Child Business Unit

[hmehra68]

Hi All,

I have a Root Business Unit and created a Child Business Unit with the Root Business Unit as parent. I want to restrict the users from Child BU to access the data of Root/Parent BU.

Is this possible or the child BU automatically inherits the parents BU access.

Thanks!

[Mahender]

Hi,

What data user can see depends on their access level in the security role, user can only see their parent unit records when they have organization level access, I will suggest you to look for the access level in below KB, and if you have any further question please post it here.

https://learn.microsoft.com/en-us/power-platform/admin/security-roles-privileges

You can setup user access level other then origination level based on your requirement.

[hmehra68]

@Mahender 

I am giving them System Customizer role and with that they are able to see the parent BU's data. How can I make it as a Business Unit level access for them and not organization?

[Mahender]

Hi,

System customizer role is for the user who are going to customize system so I think you should create another security role or at least copy system customer role and modify it based on your requirement.

for example let's say you don't want user to see records of Account entity created by the user of the Parent BU, then you should set access level to 

User- They will be able to see only record created by themselves or shared with them.

Or

BU- They can see records created by all the user in their BU.

[hmehra68]

@Mahender 

Thanks for the reply, but I already tried this. 

I have created a copy of System customizer and made each entity which is possible as 'Business Unit' as their permission. Still the child unit is able to access as well as delete the data from root BU.

Any idea what am I missing here?

[Mahender]

Hi,

Please check if the user is not having other security roles which providing them organization level access. or check if they are not part of any Team which having a security role with organization level access configured.

You can also check current user Access by using Check Access, this button is available in most of the entities.