How to use Teams module?

[mozilla2004]

I have SugarCRM CE 5.5 installed. I installed the teams module which I got from this site http://www.sugarforge.org/projects/ce-teams/

But after I create teams (each team representing different real world companies using the same instance of sugarcrm) and assign different users to each team, people on different teams are still able to view each others "sales>contact" records.

I went to Admin>Teams>Enable Modules as well to make sure all the moduels have be checkmarked, which I assume means it will then support team features.

Am I using the teams module properly? Is the teams module not supported in CE 5.5?

[eggsurplus]

You need to also use roles. Teams determine what records a user has access to where roles define what a user can do with the record. If you want it set up so that a user can only see the team's records add a role to the user and set the List, View, Delete etc rights to Team.

[mahe23]

I used the module and I set up all the teams.

1. When I create a record with a assigned User as a teammember all other teammember can see the record (Rights set to Group)
2. For all existing record assigned to a Teammember, the records are not visible to other teammembers.

How can I set all existing records that they follow the new rules?

[eggsurplus]

The key part that you are missing is that the records need to be assigned to groups as well. It cannot just go based off of who else is in the same group as you for several security reasons. These reasons are covered in the module's documentation on the SugarForge project download page and in the referenced 3 tiered approach whitepaper.

Hope that clears things up. If you have further questions after reading the docs let me know,
Jason

[mahe23]

Thank you. I have now seen what happens in the database. So, I only have to fill the securitygroups table with all existing records.

Next question?

Example:

Chris is working as a salesmanager for a region. Ken is salesman for part of this region.
Chrsi want to see all records in account for the whole region including the part of Ken.
Ken only should see the account in his area.

Is this possible? And how? Thanks a lot for help.

Matthias

[eggsurplus]

Matthias,

So, I only have to fill the securitygroups table with all existing records.

Close, if you want to do it directly in the database you want the securitygroups_records table. This will make them show up in the records' subpanel. You can also do this on the list view of each module in the Mass Assign panel below Mass Update.

Chris is working as a salesmanager for a region. Ken is salesman for part of this region.
Chrsi want to see all records in account for the whole region including the part of Ken.
Ken only should see the account in his area.

So that I understand it correctly Chris is the sales manager for the whole region where Ken works region A within the whole region?

Assign Ken's group to the appropriate records to get that part set up and have his role set to Group so that he only sees region A. For Chris, you can either set his access to All and be done or if it needs to be more specific assign him to region A, region B, region C, etc and give him Group rights. For those region A/B/C groups go to the user subpanel after adding Chris, click edit on the right for his role, and check Not Inheritable. This will ensure that when Chris creates a record it won't add region A to it automatically to ensure that Ken can't see that record unless Chris decides that is ok and adds region A after save.

Hope that makes more sense!
Jason

[bantian132]

you can check the user manual for help