Access control quick start guide

Prerequisites
  • The General > Admin permission removed from all existing roles. Failure to do so allows users with this permission assigned to their role to create, update, or delete any object within the organization.
  • The following object-based permissions assigned to the user role with the respective divisions:
    • Directory > User > Edit (to move members)
    • Architect > flow > Edit (to move flows)
    • Outbound > Campaign > Edit (to move outbound campaigns)
    • Outbound > Contact List > Edit (to move contact lists)
    • Outbound > DNC List > Edit (to move Do Not Call lists)
    • Routing > Queue > Edit (to move queues)
    •  Workforce Management > Management Unit > Edit (to move management units)
  •  All divisions for which objects are moving to and from assigned to the role that contains the object-based permissions
  • Review the Key concepts of access control

Access control enables administrators to divide and categorize resource objects such as users, queues, flows, management units, and campaigns into individual business units.

Create divisions to separate business units within the organization, configure roles to determine which users have access to specific objects, and move objects into divisions. 

This quick start article helps guide you through getting started with access control.

Step 1: Create a new division

  1. Click Admin.
  2. Under People & Permissions, click Divisions.
  3. Click  Create Division.
  4. Enter the division name and click Save. The new division opens to the Settings tab.
  5. (Optional) Add a more detailed description to the division.
  6. Click Save.

Learn more:

Step 2: Add the division to a user role with permission to edit objects

Notes:
  • If, in a previous edit to this user, you selected All future divisions for the user’s role, you can skip this step.
  •  You can also assign divisions to members of a role. For more information, see Assign divisions to users from role membership.

After you create the division, add the division to the user role with the appropriate edit permissions for the objects you will move into the division.

  1. Click Admin.
  2. Under People & Permissions, click People.
  3. Navigate to the person to which you want to grant a role in the division.
  4. Click More  and, from the menu that appears, click Edit Person. The Edit Person page opens to the Roles tab.
  5. Locate the role that contains the permissions required to edit objects into the division.
    Note: To add a new role to the user, in the Add New Role box type the first few letters and select it from the list.
  6. In the Divisions column, do the following:
    1. Click inside the Divisions box.
    2. Begin typing the first few letters of the division and select it from the list.
    3. (Optional) To add all divisions to this role, click Select All.
    4. (Optional) Select the All future divisions check box, which gives the user access to all divisions on the roles that provide the permissions. This option eliminates the need to repeat this step as you add new divisions to the organization and allows the user to move objects immediately.
  7. Repeat step 6 to add more divisions to this user’s role.
  8. To remove a division from the role, click X next to the division.
  9. Click Save.
  10. Repeat steps 1–9 for all users to which you want to grant object editing permission for the division.

Learn more:

Step 3: Move objects into the new division

Notes: By default, all objects start in the Home division.
  • If, in a previous edit to this user, you selected All future divisions for the user’s role, you can skip this step.
  •  You can also assign divisions to members of a role. For more information, see Assign divisions to users from role membership.

At this point, the user with appropriate permission and access can move objects into the new division. To move objects, including users, queues, flows, campaigns, contact lists, Do Not Contact lists, and management units, to a division, you must have:

  • An assigned role with edit permissions for the object. For example, to move members, add the Directory > User > Edit permission; to move queues, add the Routing > Queue > Edit permission.
  • Either the All Division assigned to the role or the divisions you want to move objects to and from assigned to the role. 

To move objects:

  1. Click Admin.
  2. Under People & Permissions, click Divisions.
  3. Click the division into which you want to move objects.
  4. To move members into the division, do the following:
    1. Click the Members tab.
    2. In the Reassign person box, begin typing the first few letters of the person’s name and then select it from the list. Genesys Cloud moves the member to the division.
    3. Repeat step 4 for each additional member you want to move.
  5. To move more objects into the division:
    1. Click the appropriate tab (Queues, Management Units, Flows, Campaigns, Contact lists, or DNC Lists).
    2. Search for the object to move and select it from the list.
    3. Repeat step 5 for each additional object you want to move.
  6. To move multiple objects out of the division and into another one, do the following:
    1. Click the appropriate tab (Members, Queues, Management Units, Flows, Campaigns, Contact lists, or DNC Lists).
    2. Select the check box next to each object you want to move.
    3. Click More . The Reassign Division panel appears.
    4. Under Select New Division, click the Select Division list and choose the division to which you want to move the objects.
    5. Click Save.

Learn more: