Access control items

An access control item applies only to entities of protected category within its branch or specified with subtree scope in lower branches of an organization tree. An access control item applies to entities and processes only within its branch. If specified with subtree scope, the access control item applies to lower branches of an organization tree. Most of the access control items are defined at the Organization level. There are more considerations, such as:

• For a business unit object such as a business partner organization, an access control item must be originated one level higher. The access control item has a target entity type of business partner organization, to enable searching.

Parent topic: Scope of governing entities in the organization tree