View accounts just for a specific application

[MohammedSouadji]

Hi,

I have 3 applications with accounts and entitlements, each application has a manager, the manager must just view all accounts and all entitlements for his application. for the moment i put the manager as an application technical owner, but with the technical owner entitlements the manager can create the collectors and modify the accounts ect..,

I want know how can i give to a manager the entitlements "view account" and "view entitelment" but just for his application?

Regards.

[VenkataRamanaR1 · Accepted solution]

I think solution would be to create a new custom user attribute on an application and use that attribute to set to manager.

Then, create a new Application-<View entitlement with a condition to only assign it to that users specified on the application. (see [T_SECURITY_CONTEXT] Customize the Aveksa application entitlements   )

Once that new entitlement is added and collected, it should be explicitly granted to the manager users. With that, user would get view privilege on specific application.