A data access role hierarchy establishes varying levels of data access needed by users or groups. It ensures that managers can access the same data as their employees, irrespective of default settings. These Roles and Permissions do not need to precisely mirror the organizational chart but should instead align with the distinct data access requirements of each role.

Table of Contents

• Best Practices and Limits
• Role Changes and Access
• Modeling the Data Access Role Hierarchy
• Data Access Roles
• Hierarchy View and Add New
• Data Access Hierarchy Table

Best Practices and Limits

• Number of Roles: An organization is allowed 500 data access roles; however, this number can be increased by SnapApp.
• Internal Data Access Roles: Keep the number to 2,000.
• External Data Access Roles: Keep the number to 10,000.
• Hierarchy Levels: As a best practice, limit the data access role hierarchy to no more than 10 levels of branches in the hierarchy.

Role Changes and Access

When a user’s data access role changes, all pertinent sharing rules are reviewed to adjust access as needed. Being in the same data access role as peers does not automatically grant access to each other’s data.

Modeling the Data Access Role Hierarchy

Modeling the data access role hierarchy begins with understanding how the organization is structured.

1. Top Level: The CEO oversees the entire company.
2. Direct Reports: The CEO usually has direct reports that can be segmented by:
3. Business Unit (e.g., Sales or Support)
4. Geographical Region (e.g., EMEA, APAC)
5. Further Segmentation: Direct reports may have further segmentation, and so on.

Although this sounds very much like an HR organizational chart, when modeling data access, focus on data accessibility with a consideration to HR reporting.

Data Access Roles

This section allows you to configure data access roles within the SnapApp application. Data access roles are used to control which users have access to specific data in your application.

Hierarchy View and Add New

• Hierarchy View: This button allows you to view the existing hierarchy of data access roles.
• +Add New: This button allows you to create a new data access role. Clicking it will open a new window where you can configure the role details.

Data Access Hierarchy Table

• +Add New: This button allows you to create a new data access role. Clicking it will open a new window where you can configure the role details.

• Name: Displays the name of the data access role.

• Parent ID: Shows the ID of the parent role in the data access hierarchy. Child roles inherit the access permissions of their parent role.
• Application ID: Indicates the ID of the application associated with the data access role.

Note: Effective management of data access roles is essential for maintaining robust security and data integrity within your application. Proper configuration and assignment of roles to users are critical steps in ensuring secure and reliable data management.

Thank you for following these steps to manage your SnapApp access controls (data access hierarchy) settings effectively. If you have any questions or need further assistance, please don’t hesitate to reach out to our support team. We’re here to help you make the most out of your SnapApp experience.

For support, email us at snapapp@bluevector.ai