Manage Companies and Users in a nested structure
As mentioned above, Companies on the platform support a nested structure.
- Users whose Role includes the "Manage Companies" permission can manage their Company and subsidiaries.
- Users whose Role includes the "Manage Users" permission can manage Users of their Company and Users of subsidiaries.
BUT
- Users whose Role includes the "Manage Companies" and/or "Manage Users" permissions cannot view and/or manage Users of parent Companies or unrelated Companies.
If the User has permission to manage an entity (for example, manage Companies), they automatically have permission to view it (for example, view Companies).
If the User has only permission to view an entity, they can view it but cannot manage it.
A "top-level administrator" is a User who participates in the parent Company (concerning your Company) and has management permissions.
Example: Manage Companies and Users in a nested structure
Suppose: The "B" Company has a "B.1" User with a "B.1" Role. "B.1" Role includes "Manage Company" permission. Then: The "B.1" User can manage and view Companies in his Company "B" and subsidiary "C". But: The "B.1" User cannot manage and view Companies in parent Companies: "Main" Company and "A" Company. And the "B.1" User cannot manage and view Companies in unrelated Company "D".
Suppose: The "B" Company has a "B.3" User with a "B.2" Role. The "B.2" Role includes "Manage Users" permission. Then: The "B.3" User can manage and view Users in their Company "B" and subsidiary "C". But: The "B.3" User cannot manage and view Users in parent Companies: "Main" Company and "A" Company. And the "B.3" User cannot manage and view Users in unrelated Company "D".
| # | Situation | Answer |
|---|---|---|
| 1. | The "B.1" User wants to add a new Company. | The "B.1" User can easily add a new Company. |
| 2. | The "B.1" User wants to change the existing Company. | The "B.1" User can easily change the existing "B" or "C" Companies. But the "B.1" User cannot change "A" or "D" Companies because Companies "B" and "D" are not related, and "A" Company is a parent Company. |
| 3. | The "B.1" User wants to change the parent Company. | same as the #2 point. |
| 4. | The "B.3" User wants to add the new User to the "B" or "C" Company. | The "B.3" User can easily add the new User to the "B" or "C" Company. |
| 5. | The "B.3" User wants to add the new User to the "D" or “A” Company. | The "B.3" User cannot add the new User to the "D" Company because Companies "B" and "D" are not related. The "B.3" User cannot add the new User to the "A" Company because the "A" Company is a parent Company. |
| 6. | The "B.3" User wants to change Role or Company for the “C.1” User. | The "B.3" User cannot change the Role or Company of the "C.1" User because the "B.3" User doesn't have the permission to “Manage user's participation”. |