SaaS Marketing Strategy – Achieving SaaS Customer Alignment ...
Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management
-
Upload
bmc-software -
Category
Technology
-
view
882 -
download
0
Transcript of Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management
![Page 1: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/1.jpg)
—
Sr. Onboarding Consultant
August 2015Hugo R. Gracia
Using Remedyforce SaaS Help Desk / Cloud IT Service Management for Record Level Data Segregation
![Page 2: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/2.jpg)
Agenda• Overview
• Data Segregation• Remedyforce & Salesforce Concepts
• User Types• Profiles & Permission Sets• Role Hierarchy• Sharing Rules
• Configuration Steps• Summary
![Page 3: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/3.jpg)
—
What is data segregation?
01Overview and best practices
![Page 4: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/4.jpg)
Data Segregation OverviewData segregation is achieved through the corroboration of various components working together to achieve a tailored solution for each individual company.
System Administrator
Human Resources Finance General
Population
IT Staff
![Page 5: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/5.jpg)
Record Level Data Segregation
User Types Profiles and Permission Sets
Roles and Role Hierarchy
Sharing Rules & Org Wide Defaults
Components
![Page 6: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/6.jpg)
Administrators
Staff
Clients
User Types
![Page 7: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/7.jpg)
System Administrator
Service Desk Staff
Service Desk Client
Profiles and Permission Sets
![Page 8: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/8.jpg)
System Administrator
IT Staff
Human Resources Finance General Population
Role Hierarchy
![Page 9: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/9.jpg)
Role HierarchyBest Practice
• Keep the number of non-portal roles to 25,000. • Keep the number of portal roles to 100,000. • Keep the role hierarchy to no more than 10 levels of branches in the hierarchy
There are a few other things to take into consideration when working with roles: • When a user's role changes, any relevant sharing rules are evaluated to correct
access as necessary. • Peers within the same role don't guarantee them access to each other's data. • Modeling the role hierarchy begins with understanding how the organization is
structured.
![Page 10: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/10.jpg)
Record Ownership and Queues• Every record must be owned by a single user or a queue.
• The owner has full access to the record. • Users higher in a hierarchy inherit the same data access as their
subordinates for standard objects.
![Page 11: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/11.jpg)
Record Ownership
If a single user owns more than 10,000 records, as a best practice:
• The user record of the owner should not hold a role in the role hierarchy.
• If the owner's user record must hold a role, the role should be at the top of the hierarchy in its own branch of the role hierarchy.
![Page 12: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/12.jpg)
Sharing Rules and Organization-Wide Defaults
Organization-wide sharing settings specify the default level of access users have to each other’s records. You use organization-wide sharing settings to lock down your data to the most restrictive level, and then use the other record-level security and sharing tools to selectively give access to other users.
![Page 13: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/13.jpg)
—02Configuration
![Page 14: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/14.jpg)
Configuration of Components• Roles
• Role Assignment• Profiles and Permission Sets
• Profile Assignment• Permission Set Assignment
• Sharing Settings
![Page 15: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/15.jpg)
Role Hierarchy Configuration
![Page 16: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/16.jpg)
Role Hierarchy Creation
Manage Users > Roles
![Page 17: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/17.jpg)
Role HierarchyFrom this screen you can:• Add Roles• Modify Roles• Assign Roles
![Page 18: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/18.jpg)
Add Role• Under the role that you wish to
add another, click on Add Role.
• Fill in the information
![Page 19: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/19.jpg)
Populating Role InformationFill in the information for the Role according to the design.
![Page 20: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/20.jpg)
RoleThe new role has been created and added to the hierarchy.
Additional configuration steps might be necessary if this role is to have other roles reporting to it.
![Page 21: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/21.jpg)
Sharing Settings Configuration
Navigate to Setup > Administer > Security Controls > Sharing Settings
![Page 22: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/22.jpg)
Incident Object Sharing Settings
Incident Object Settings
![Page 23: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/23.jpg)
Sharing RuleUsed to either over ride the hierarchy based sharing settingsSharing can be performed across:• Roles• Queues• Public Groups
![Page 24: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/24.jpg)
Sharing Rule SettingsAs part of the design process, it will have been determined what sharing rules will be necessary if any.
If sharing rules are needed, the design will state how the sharing will take place.
You use sharing rules only to grant wider access to data, not to restrict access.
![Page 25: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/25.jpg)
Sharing Rule Configuration
![Page 26: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/26.jpg)
Sharing CalculationUpon hitting SAVE on a new sharing rule, a recalculation of access takes place.
Depending on the number of records and number of other sharing rules in place, the duration of the calculation will vary.
![Page 27: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/27.jpg)
Sharing Rule List
The new rule is now in effect.
![Page 28: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/28.jpg)
—Troubleshooting
03
![Page 29: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/29.jpg)
TroubleshootingWhat do you do when some one says they can’t see a record they should?
• The security layers you have architected will determine where you start. If you know the sharing model well, then you will probably know what component should have provided the access and should start there
![Page 30: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/30.jpg)
Troubleshooting Steps
1. Verify that the user has permissions to access to the object.
2. Identify the user's role who can't see the record and note it.
3. Identify the owner's role of the record and note it.
4. Review the role hierarchy and verify these two roles are in two different branches (they should be).
![Page 31: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/31.jpg)
Troubleshooting Steps
5. Review the sharing rules for the object and make sure there is no rule that will grant the user access.
a) This can also cause you to look in public groups as well. Maybe the user just got left out of a group where there is a sharing rule, or does it make sense to create a new sharing rule to grant the user access? This depends on the architecture you are trying to maintain, and applies to both ownership-based sharing rules and criteria-based sharing rules.
b) If you are using teams, should this user be on the team for that record? How are teams maintained and how did the miss occur?
c) If manual sharing is used, the user may have lost access because the record owner changed. Manual shares are dropped when ownership changes. The manual share could also have been removed using the Share button.
![Page 32: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/32.jpg)
Troubleshooting Steps
6. If you are using territory management, determine if the user missing from one of the territories. Where is the membership of territories maintained and how did the miss occur? Or, maybe the record did not get stamped with the territory where the user is a member.
7/ If you are creating programmatic shares and there are criteria for creating the share in code, review the code to understand why this user was omitted.
![Page 33: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/33.jpg)
—Summary
04
![Page 34: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/34.jpg)
SummaryData segregation can be, and usually is, a complex undertaking. The rule of thumb that is applied here is that 80% is planning and 20% is configuration.
Although this document focuses on a non-multi-tenancy organization, the principles apply just the same, with the one exception being that, in a multi-tenancy organization, you will also be dealing with accounts and account hierarchy.
Nonetheless, a well-planned out sharing architecture can serve the organization for a long time to come, providing secure record access.
![Page 35: Data Migration for Remedyforce SaaS Help Desk and High-Speed Digital Service Management](https://reader036.fdocuments.us/reader036/viewer/2022062822/587cf0001a28ab564b8b5ffd/html5/thumbnails/35.jpg)
—
Bring IT to Life.™
Thank You