Question

A company uses a model-driven app built on Dataverse for case management. Sales representatives are organized into regional business units. The compliance team requires that a sales rep can only read and edit case records owned by users within their own business unit, but must never see cases from other regions. Managers, however, need read access to cases across all regions. The developer must configure this with minimal custom code. Which approach should the developer take?

Accepted Answer

Configure security roles with the Case table access level set to 'Business Unit' for the sales rep role and 'Organization' for the manager role.

Answer

Write a pre-operation plug-in on the Retrieve message that filters out cases from other business units for sales reps.

Answer

Use record sharing to individually share each case with the sales reps in the owning business unit.

Answer

Create separate Dataverse environments for each region and grant managers access to all environments.