Domain Seperation | Managing the users on Global domain

[vrnath]

Hello All,

Appreciate your help on this.

Currently we are working on Domain separated instance. Where we are facing an issue with the users. Right now, we have a domain structure like this:

Global

|

Global/Company   (where Company we built all the blueprint and have access to all the data in global and all customer domains)

|

Global/Company/CustA && Global/Company/CustB

We are having the different support groups and users (Support people) are in Company. From there we already given access for users the visibility to see all the data in CustA & CustB (Eg: Reporting the incidents by the CustA & CustB can bee seen by the support group people based in Company). As we declared all the users in Company we dont want to create the users (support people) in Cust A and Cust B. We want to create some different groups for Cust A & Cus B and want to add these users (Support people) to that groups.

As we are using the AD and making the userID as email. So while to recreate the users also will be an issue with duplication.

The other thing we tried to make these users( support people) as global, but they are getting access to all the domains from the settings menu and as well as the data. (thought to write an access control on Domain table and only allow Admins with domain = global to be able to create/write and delete items on domain table. - is this one will work to not show the drop down of the domain menu in settings)

Thought to make the group as global but once the incident is created - change the domain to company and still the users is not populating.

How to make the users (support people) to be created under one domain and is there any way to utilize that users on other domains. As its a domain specific environment the records created in one domain cant be visible in other domain.

Please suggest me if you have any other alternative which i missed.

Thanks in advance!!

Raghu

[vrnath]

Hello All,

Thanks for your valuable support,

Found some solution on this, We created an another domain and added all the support users to that domain. And for the CustA and CustB we added the new domain as contains under the custA and custB. By this way we are able to create the different groups for different customers with the same support people.

Really appreciate your help on this.

Thanks

Raghu

[Deepak Ingale1]

Hi Raghu,

Contains relationship gives access to complete domain from another domain. (It is a relationship between domain to domain).

I hope you are not creating other records like Incidents etc in "another" domain where "support users" are added.

[vrnath]

Hi Deepak,

Yes we are not creating any records inside that, just we are using that domain to populate the support users for all the domains.