Security Roles in DataVerse

[Lakshya]

Hi Guys,

I have developed a solution in Dataverse which will be deployed for the entire organization. Right now I just have one business unit but my plan is to create different child business units for each directorate in my organizations and parent would be the one which is already there. So as far as I have understood when you create a business unit, it automatically creates a team. I have created a security role with basic access and have given business unit level access to the entity. Is this a better way to assign security roles in mu org so that no one department cannot see records of another department? What is the best practice to assign security roles.
Thanks in advance for all the help.

[parvezghumra]

@Lakshya Essentially this comes down to the requirements for your Security Model design. But a few best practices to consider:

1. Start with a copy of one of the Out of the Box roles that aligns closest to your business users with the lease privileges.

2. Ensure you base the design on personas rather than job roles, so that you can build up groupings of Security Roles that make a profile that you can assign collectively rather than individual Security Roles

3. Assign your Security Roles to Teams rather than individual Users, this will reduce your maintenance overhead

4. Create your Security Roles at the root level Business Unit, they will then get replicated to each subordinate Business unit

5. Transport your Security Roles across environments via Solutions, ensuring that each one only appears within a single solution

[Lakshya]

Cheers, Thanks @parvezghumra 

[Velegandla]

@Lakshya 

In addition to @parvezghumra said, check the video that explains BU Dataverse security concepts which is created by Power CAT Team. 

https://youtu.be/8UWSj-vvxzU?t=939

====================================================

If this response helped you in any way, please give kudos by clicking the 'Thumbs Up'/'Like' button and/or marking it as an 'Accepted Solution'. This helps others by providing a quick way to identify likely solutions to their issues.

https://www.linkedin.com/in/devendravelegandla/